← Back

Misp Project

misp-project

122 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Misp
misp
122 CVEs
Malware Information Sharing Platform
malware_information_sharing_platform
16 CVEs

CVEs (122)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-5720
1Misp Project
2Malware Information Sharing Platform
Misp
Jun 23, 2026
Sep 3, 2016
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in the template-creation feature in Malware Information Sharing Platform (MISP) before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors...Show more
Multiple cross-site scripting (XSS) vulnerabilities in the template-creation feature in Malware Information Sharing Platform (MISP) before 2.3.90 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) add.ctp, (2) edit.ctp, and (3) ajaxification.js.Show less
CVE-2015-5719
1Misp Project
2Malware Information Sharing Platform
Misp
Jun 23, 2026
Sep 3, 2016
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
app/Controller/TemplatesController.php in Malware Information Sharing Platform (MISP) before 2.3.92 does not properly restrict filenames under the tmp/files/ directory, which has unspecified impact and attack vectors.