CVE-2017-15216

Summary: CVE-2017-15216 is a reflected XSS vulnerability in MISP prior to version 2.4.81. The issue arises in the quickDelete action used to delete a sighting, related to the files app/View/Sightings/ajax/quickDeleteConfirmationForm.ctp and app/webroot/js/misp.js. Affected software: MISP before 2...

CVE-2014-3566

creationtimestamp| type| source ---|---|--- 2017-10-09 18:29:26+00:00| seen| https://t.me/informationsecuritychannel/9760 2022-03-08 04:13:09+00:00| seen| Telegram/vucuqGbRCztQDBt8wgDth-hLVvGp8dTTlxQcNvjhW5htig 2022-11-07 22:22:31+00:00| seen|...

CVE-2015-4000

creationtimestamp| type| source ---|---|--- 2017-10-09 18:29:26+00:00| seen| https://t.me/informationsecuritychannel/9760 2018-05-24 15:44:33+00:00| seen| MISP/5b06d57d-f2b8-4357-9038-45d39f590eb0 2022-11-07 22:22:31+00:00| seen|...

CVE-2016-3309

creationtimestamp| type| source ---|---|--- 2017-10-06 16:06:20+00:00| exploited| https://t.me/canyoupwnme/2393 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:28:24+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971375 2025-02-23 02:10:11+00:00...

CVE-2017-12617

creationtimestamp| type| source ---|---|--- 2017-10-05 13:18:32+00:00| seen| https://t.me/informationsecuritychannel/9627 2017-10-05 21:40:16+00:00| seen| https://t.me/informationsecuritychannel/9655 2017-10-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42966 2017-10-09...

CVE-2017-14494

creationtimestamp| type| source ---|---|--- 2017-10-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42944 2024-11-14 06:09:54+00:00| seen| MISP/391f93ae-ac9e-4e23-a188-e10f41556b4d...

CVE-2017-1000253

creationtimestamp| type| source ---|---|--- 2017-09-30 14:06:42+00:00| seen| https://t.me/itsecalert/72 2017-11-05 16:10:41+00:00| exploited| https://t.me/canyoupwnme/2583 2024-09-11 16:36:49+00:00| seen| https://t.me/itsecnews/4693 2024-09-20 18:10:03+00:00| seen|...

CVE-2017-11610

creationtimestamp| type| source ---|---|--- 2017-09-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42779 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/supervisorxmlrpcexec.rb 2020-10-09 14:02:27+00:00|...

CVE-2017-14627

creationtimestamp| type| source ---|---|--- 2017-09-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42777 2018-12-11 14:39:46+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/cyberlinklppbof.rb 2018-12-13 00:00:00+00:00|...

CVE-2017-9798

creationtimestamp| type| source ---|---|--- 2017-09-20 16:36:06+00:00| seen| https://t.me/BleepingComputer/1758 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/apacheoptionsbleed.rb 2022-02-18 16:23:37+00:00| seen|...

CVE-2017-8759

creationtimestamp| type| source ---|---|--- 2017-09-13 04:56:03+00:00| seen| MISP/59b82957-23e0-483c-9142-7f22ac130004 2017-09-13 10:33:11+00:00| seen| https://t.me/sysadminchannel/88 2017-09-13 23:53:11+00:00| exploited| https://t.me/canyoupwnme/2280 2017-09-14 11:38:00+00:00| exploited|...

Authentication flaw

When MISP before 2.4.80 is configured with X.509 certificate authentication CertAuth in conjunction with a non-MISP external user management ReST API, if an external user provides X.509 certificate authentication and this API returns an empty value, the unauthenticated user can be granted access ...

CVE-2017-14337

When MISP before 2.4.80 is configured with X.509 certificate authentication CertAuth in conjunction with a non-MISP external user management ReST API, if an external user provides X.509 certificate authentication and this API returns an empty value, the unauthenticated user can be granted access ...

CVE-2017-14337

When MISP before 2.4.80 is configured with X.509 certificate authentication CertAuth in conjunction with a non-MISP external user management ReST API, if an external user provides X.509 certificate authentication and this API returns an empty value, the unauthenticated user can be granted access ...

CVE-2017-14337

When MISP before 2.4.80 is configured with X.509 certificate authentication CertAuth in conjunction with a non-MISP external user management ReST API, if an external user provides X.509 certificate authentication and this API returns an empty value, the unauthenticated user can be granted access ...

CVE-2017-14337

CVE-2017-14337 affects MISP prior to 2.4.80. When CertAuth via X.509 is used together with a non-MISP external user management REST API, and that API returns an empty value for an external user, an unauthenticated user can be granted access as an arbitrary user. Evidence across connected records ...

CVE-2017-9805

creationtimestamp| type| source ---|---|--- 2017-09-06 07:05:34+00:00| seen| https://t.me/HackerOne/985 2017-09-06 11:05:58+00:00| exploited| https://t.me/webpwn/148 2017-09-06 11:10:48+00:00| published-proof-of-concept| https://t.me/cybershit/77 2017-09-06 12:56:14+00:00| seen|...

CVE-2017-5070

creationtimestamp| type| source ---|---|--- 2017-09-04 17:48:58+00:00| exploited| https://t.me/informationsecuritychannel/8457 2019-09-25 08:28:15+00:00| seen| MISP/5d8b23ae-50d0-4a09-86da-4dc9950d210f 2020-10-09 14:30:50+00:00| seen| MISP/bbad3705-75de-41f7-980c-0e90136909de 2022-06-07...

CVE-2017-8570

creationtimestamp| type| source ---|---|--- 2017-09-02 13:40:38+00:00| seen| https://t.me/informationsecuritychannel/8407 2018-02-27 14:00:30+00:00| seen| MISP/5a955d28-c2e8-4016-beaa-41ed950d210f 2018-03-20 06:51:20+00:00| seen| MISP/5aafa3d9-cf3c-49fe-9c4e-2e52ac100a5a 2018-03-22 14:09:47+00:00...

CVE-2017-1000117

creationtimestamp| type| source ---|---|--- 2017-08-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42599 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gitsubmodulecommandexec.rb 2018-11-19 16:33:23+00:00|...