Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Misp Subscribe
Filtered by product Misp
Total 62 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-16946 1 Misp 1 Misp 2017-12-07 4.0 MEDIUM 4.9 MEDIUM
The admin_edit function in app/Controller/UsersController.php in MISP 2.4.82 mishandles the enable_password field, which allows admins to discover a hashed password by reading the audit log.
CVE-2017-13671 1 Misp 1 Misp 2017-09-05 4.3 MEDIUM 6.1 MEDIUM
app/View/Helper/CommandHelper.php in MISP before 2.4.79 has persistent XSS via comments. It only impacts the users of the same instance because the comment field is not part of the MISP synchronisation.