Filter
Versions
Adobe Magento CommerceAdobe Commerce | Improper Access Control (CWE-284)
9.8
First published (updated )
Adobe Magento CommerceAdobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability
First published (updated )
Adobe Magento CommerceAdobe Commerce | Improper Authentication (CWE-287)
9.8
First published (updated )
Adobe CommerceMagento Commerce XML Injection Vulnerability In The 'City' Field Could Lead To Remote Code Execution
9.8
First published (updated )
Adobe Magento CommerceLarge attack surface through legit webhook usage in Adobe Commerce
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceMagento Commerce Improper Input Validation Could Lead To Remote Code Execution
9.1
First published (updated )
Adobe CommerceMagento Commerce Customer Edition Improper Input Validation Could Lead To Remote Code Execution
9.1
First published (updated )
Adobe CommerceMagento Commerce Stock Media Improper Input Validation Could Lead To Remote Code Execution
9.1
First published (updated )
Adobe CommerceMagento Commerce Widgets Module XML Injection Vulnerability Could Lead To Remote Code Execution
9.1
First published (updated )
Adobe CommerceMagento Commerce Improper Authorization Vulnerability Could Lead To Remote Code Execution
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceMagento Commerce Improper Neutralization of Special Elements Used In A Command
9.1
First published (updated )
Adobe CommerceMagento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution
9.1
First published (updated )
Adobe CommerceMagento Commerce XML Injection Vulnerability Could Lead To Remote Code Execution
9.1
First published (updated )
Adobe CommerceMagento Commerce Improper Input Validation Could Lead To Remote Code Execution
9.1
First published (updated )
Adobe CommerceMagento Commerce Improper Input Validation Could Lead To Remote Code Execution
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceMagento Commerce API File Option Upload Extension Improper Input Validation Vulnerability Could Lead To Remote Code Execution
9.1
First published (updated )
Adobe Magento CommerceAdobe Commerce | Improper Authentication (CWE-287)
8.8
First published (updated )
Adobe CommerceMagento Commerce Improper Input Validation Could Lead To Information Exposure and Privilege Escalation
8.8
First published (updated )
Adobe Magento CommerceAdobe Commerce | Improper Authorization (CWE-285)
8.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe Magento CommerceCustomer account takeover via web API call & subsequent password reset
8.1
First published (updated )
Adobe Magento CommerceAdobe Commerce | Cross-site Scripting (XSS) (CWE-79)
8.1
First published (updated )
Adobe CommerceMagento Commerce Authenticated Blind SSRF Could Lead To Remote Code Execution
8
First published (updated )
Adobe Magento CommerceAdobe Commerce | Improper Input Validation (CWE-20)
7.6
First published (updated )
Adobe CommerceMagento Commerce Improper Input Validation During Checkout Process Could Lead To Privilege Escalation
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Adobe CommerceMagento Commerce GraphQL Improper Input Validation Could Lead To Denial Of Service
7.5
First published (updated )
Adobe Magento CommerceRCE in the Adobe Commerce Webhook module through a legit webhook definition
7.2
First published (updated )
Adobe Magento CommerceAdobe Commerce | Improper Input Validation (CWE-20)
7.2
First published (updated )
Adobe CommerceMagento Commerce Path Traversal In `theme[preview_image]` Parameter Could Lead To Remote Code Execution
7.2
First published (updated )
Adobe Magento CommerceAdobe Commerce | Incorrect Authorization (CWE-863)
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.