CVE-2018-4932

creationtimestamp| type| source ---|---|--- 2018-04-16 07:58:04+00:00| seen| MISP/5ad4576f-d964-4248-9731-5edaac100a5a...

CVE-2018-0151

creationtimestamp| type| source ---|---|--- 2018-03-30 12:01:10+00:00| seen| https://t.me/informationsecuritychannel/15590 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-08 14:09:37+00:00| seen| https://t.me/arpsyndicate/1574 2024-12-24 20:27:48+00:00| seen|...

CVE-2018-5955

creationtimestamp| type| source ---|---|--- 2018-03-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44356 2018-04-02 08:49:29+00:00| published-proof-of-concept| https://t.me/antichat/1162 2018-05-29 15:50:33+00:00| seen|...

CVE-2018-8949

An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event without attribute UUIDs but attribute IDs set could overwrite an existing attribute...

CVE-2018-8948

In MISP before 2.4.89, app/View/Events/resolvedattributes.ctp has multiple XSS issues via a malicious MISP module...

Code injection

An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event without attribute UUIDs but attribute IDs set could overwrite an existing attribute...

CVE-2018-8949

An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event without attribute UUIDs but attribute IDs set could overwrite an existing attribute...

CVE-2018-8948

In MISP before 2.4.89, app/View/Events/resolvedattributes.ctp has multiple XSS issues via a malicious MISP module...

Cross site scripting

In MISP before 2.4.89, app/View/Events/resolvedattributes.ctp has multiple XSS issues via a malicious MISP module...

CVE-2018-8948

In MISP before 2.4.89, app/View/Events/resolvedattributes.ctp has multiple XSS issues via a malicious MISP module...

CVE-2018-8949

An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event without attribute UUIDs but attribute IDs set could overwrite an existing attribute...

CVE-2018-8948

CVE-2018-8948 affects MISP prior to 2.4.89, with multiple XSS flaws in app/View/Events/resolved_attributes.ctp due to a malicious MISP module. Impact is cross-site scripting; the documents do not specify exploit details or a remediation patch/version.

CVE-2018-8949

An issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API integrity bug, potentially allowing users to delete attributes of other events. A crafted edit for an event without attribute UUIDs but attribute IDs set could overwrite an existing attribute...

CVE-2018-8948

In MISP before 2.4.89, app/View/Events/resolvedattributes.ctp has multiple XSS issues via a malicious MISP module...

CVE-2018-8949

CVE-2018-8949 involves MISP before 2.4.89, where a flaw in app/Model/Attribute.php creates an API integrity risk that could let a user delete attributes of other events. A crafted event edit (no attribute UUIDs but with attribute IDs set) could overwrite an existing attribute, potentially impacti...

CVE-2017-9248

creationtimestamp| type| source ---|---|--- 2018-03-21 13:35:18+00:00| published-proof-of-concept| https://t.me/informationsecuritychannel/14891 2018-09-02 06:50:13+00:00| published-proof-of-concept| https://t.me/informationsecuritychannel/19908 2018-09-02 07:17:44+00:00|...

CVE-2018-7445

creationtimestamp| type| source ---|---|--- 2018-03-16 14:31:38+00:00| exploited| https://t.me/informationsecuritychannel/14481 2018-03-16 14:31:38+00:00| published-proof-of-concept| https://t.me/informationsecuritychannel/14482 2018-05-24 15:44:33+00:00| seen|...

CVE-2013-4979

creationtimestamp| type| source ---|---|--- 2018-03-14 21:04:26+00:00| seen| MISP/5aa98d8a-3cac-42f0-b224-45d09f590eb0...

CVE-2015-2387

creationtimestamp| type| source ---|---|--- 2018-03-14 21:04:26+00:00| seen| MISP/5aa98d8a-3cac-42f0-b224-45d09f590eb0 2020-10-09 14:48:27+00:00| seen| MISP/f299f6e0-f80f-4c16-9812-b49640ed46c1 2020-10-09 17:20:22+00:00| seen| MISP/86dc4eac-b270-4870-b4e6-d873d9381d9f 2023-06-14 21:10:03+00:00|...

CVE-2018-5999

creationtimestamp| type| source ---|---|--- 2018-02-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44176 2018-03-01 08:53:42+00:00| published-proof-of-concept| https://t.me/antichat/1000 2018-05-29 15:50:33+00:00| seen|...