Misp

🛡 Vulnerabilities tagged with this 117

	ID	Title	Severity	Detected
	CVE-2024-25675	Vulnerability in misp-project (CVE-2024-25675)	Critical	2 years ago
	CVE-2023-50918	app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs.	Critical	2 years ago
	CVE-2023-49926	app/Lib/Tools/EventTimelineTool.php in MISP before 2.4.179 allows XSS in the event timeline widget.	Medium	2 years ago
	CVE-2023-48655	Vulnerability in misp-project (CVE-2023-48655)	Critical	2 years ago
	CVE-2023-48656	An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses.	Critical	2 years ago
	CVE-2023-48657	An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters.	Critical	2 years ago
	CVE-2023-48658	Vulnerability in misp-project (CVE-2023-48658)	Critical	2 years ago
	CVE-2023-48659	Vulnerability in misp-project (CVE-2023-48659)	Critical	2 years ago
	CVE-2023-41098	Cross-Site Scripting (XSS) in misp-project (CVE-2023-41098)	Medium	2 years ago
	CVE-2023-40224	MISP 2.4.174 allows XSS in app/View/Events/index.ctp.	Medium	2 years ago
	CVE-2023-37306	Vulnerability in misp-project (CVE-2023-37306)	High	3 years ago
	CVE-2023-37307	Cross-Site Scripting (XSS) in misp-project (CVE-2023-37307)	Medium	3 years ago
	CVE-2023-28884	In MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index.	Medium	3 years ago
	CVE-2023-28606	js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips.	Medium	3 years ago
	CVE-2023-28607	js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip.	Medium	3 years ago
	CVE-2022-48328	Vulnerability in misp-project (CVE-2022-48328)	Critical	3 years ago
	CVE-2022-48329	Vulnerability in misp-project (CVE-2022-48329)	Critical	3 years ago
	CVE-2023-24070	Cross-Site Scripting (XSS) in misp-project (CVE-2023-24070)	Medium	3 years ago
	CVE-2023-24027	In MISP 2.4.167, app/webroot/js/action_table.js allows XSS via a network history name.	Medium	3 years ago
	CVE-2022-47928	Cross-Site Scripting (XSS) in misp-project (CVE-2022-47928)	Medium	3 years ago
	CVE-2022-42724	Information Disclosure in misp-project (CVE-2022-42724)	Medium	3 years ago
	CVE-2019-12868	Unsafe Deserialization in deserialization (CVE-2019-12868)	High	4 years ago
	CVE-2021-41326	Vulnerability in misp-project (CVE-2021-41326)	Critical	4 years ago
	CVE-2021-39302	SQL Injection in sqli (CVE-2021-39302)	Critical	4 years ago
	CVE-2021-37743	Cross-Site Scripting (XSS) in misp-project (CVE-2021-37743)	Medium	4 years ago
	CVE-2021-37742	Cross-Site Scripting (XSS) in misp-project (CVE-2021-37742)	Medium	4 years ago
	CVE-2021-37534	app/View/GalaxyClusters/add.ctp in MISP 2.4.146 allows Stored XSS when forking a galaxy cluster.	Medium	4 years ago
	CVE-2021-36212	Cross-Site Scripting (XSS) in misp-project (CVE-2021-36212)	Medium	4 years ago
	CVE-2021-35502	Vulnerability in misp-project (CVE-2021-35502)	Critical	4 years ago
	CVE-2021-31780	Vulnerability in misp-project (CVE-2021-31780)	High	4 years ago