Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
misp-project vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2023-48655
An issue exists in MISP prior to 2.4.176. app/Controller/Component/IndexFilterComponent.php does not properly filter out query parameters.
Misp-project Malware Information Sharing Platform
9.8
CVSSv3
CVE-2023-48656
An issue exists in MISP prior to 2.4.176. app/Model/AppModel.php mishandles order clauses.
Misp-project Malware Information Sharing Platform
9.8
CVSSv3
CVE-2023-48657
An issue exists in MISP prior to 2.4.176. app/Model/AppModel.php mishandles filters.
Misp-project Malware Information Sharing Platform
9.8
CVSSv3
CVE-2023-48658
An issue exists in MISP prior to 2.4.176. app/Model/AppModel.php lacks a checkParam function for alphanumerics, underscore, dash, period, and space.
Misp-project Malware Information Sharing Platform
9.8
CVSSv3
CVE-2023-48659
An issue exists in MISP prior to 2.4.176. app/Controller/AppController.php mishandles parameter parsing.
Misp-project Malware Information Sharing Platform
6.1
CVSSv3
CVE-2022-47928
In MISP prior to 2.4.167, there is XSS in the template file uploads in app/View/Templates/upload_file.ctp.
Misp-project Malware Information Sharing Platform
6.1
CVSSv3
CVE-2023-24070
app/View/AuthKeys/authkey_display.ctp in MISP up to and including 2.4.167 has an XSS in authkey add via a Referer field.
Misp-project Malware Information Sharing Platform
5.4
CVSSv3
CVE-2023-37307
In MISP prior to 2.4.172, title_for_layout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts.
Misp-project Malware Information Sharing Platform
6.1
CVSSv3
CVE-2023-28606
js/event-graph.js in MISP prior to 2.4.169 allows XSS via event-graph node tooltips.
Misp-project Malware Information Sharing Platform
6.1
CVSSv3
CVE-2023-28607
js/event-graph.js in MISP prior to 2.4.169 allows XSS via the event-graph relationship tooltip.
Misp-project Malware Information Sharing Platform
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49223
CVE-2024-0044
information disclosure
CVE-2024-35753
HTML injection
CVE-2024-21306
CVE-2024-35733
SQL injection
CVE-2024-35732
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
NEXT »