Latest vulnerabilities for vendor "misp-project"

9.8

First published (updated )

CVE-2023-48658

MISP - Malware Information Sharing PlatformAn issue was discovered in MISP before 2.4.176. app/Controller/AppController.php mishandles paramete…

9.8

First published (updated )

CVE-2023-48659

MISP - Malware Information Sharing PlatformAn issue was discovered in MISP before 2.4.176. app/Controller/Component/IndexFilterComponent.php do…

9.8

First published (updated )

CVE-2023-48655

MISP - Malware Information Sharing PlatformAn issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses.

9.8

First published (updated )

CVE-2023-48656

MISP - Malware Information Sharing PlatformAn issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters.

9.8

First published (updated )

CVE-2023-48657

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

MISP - Malware Information Sharing PlatformMISP 2.4.172 mishandles different certificate file extensions in server sync. An attacker can obtain…

high

7.5

First published (updated )

CVE-2023-37306

MISP - Malware Information Sharing PlatformXSS

high

7.5

First published (updated )

CVE-2023-37307

MISP - Malware Information Sharing PlatformXSS

6.1

First published (updated )

CVE-2023-28884

MISP - Malware Information Sharing PlatformXSS

6.1

First published (updated )

CVE-2023-28606

MISP - Malware Information Sharing PlatformXSS

6.1

First published (updated )

CVE-2023-28607

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

MISP - Malware Information Sharing PlatformXSS

6.1

First published (updated )

CVE-2023-24070

MISPIn MISP 2.4.167, app/Controller/Component/ACLComponent.php has incorrect access control for the deca…

9.8

First published (updated )

CVE-2023-24028

MISPXSS

6.1

First published (updated )

CVE-2023-24026

MISP - Malware Information Sharing PlatformXSS

6.1

First published (updated )

CVE-2022-47928

MISP - Malware Information Sharing Platformapp/Controller/UsersController.php in MISP before 2.4.164 allows attackers to discover role names (t…

4.3

First published (updated )

CVE-2022-42724

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

MISPXSS

6.1

First published (updated )

CVE-2018-11245

MISPAn issue was discovered in app/Model/Attribute.php in MISP before 2.4.89. There is a critical API in…

5.5

First published (updated )

CVE-2018-8949

MISPXSS

6.1

First published (updated )

CVE-2018-8948

MISPXSS

5.4

First published (updated )

CVE-2017-16802

MISPXSS

6.1

First published (updated )

CVE-2017-15216

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

MISPWhen MISP before 2.4.80 is configured with X.509 certificate authentication (CertAuth) in conjunctio…

high

8.1

First published (updated )

CVE-2017-14337

MISP - Malware Information Sharing PlatformCode Injection

9.8

First published (updated )

CVE-2015-5721

MISP - Malware Information Sharing Platformapp/Controller/TemplatesController.php in Malware Information Sharing Platform (MISP) before 2.3.92 …

10

First published (updated )

CVE-2015-5719

MISP - Malware Information Sharing PlatformXSS