Search Results (83 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-29859 2 Misp, Misp-project 2 Misp, Misp 2024-11-21 9.8 Critical
In MISP before 2.4.187, add_misp_export in app/Controller/EventsController.php does not properly check for a valid file upload.
CVE-2020-12889 1 Misp 1 Misp-maltego 2024-11-21 9.8 Critical
MISP MISP-maltego 1.4.4 incorrectly shares a MISP connection across users in a remote-transform use case.
CVE-2024-45509 2 Misp, Misp-project 2 Misp, Misp 2024-09-04 9.8 Critical
In MISP through 2.4.196, app/Controller/BookmarksController.php does not properly restrict access to bookmarks data in the case where the user is not an org admin.