Filter
AND

Magento MagentoAn insecure direct object reference (IDOR) vulnerability exists in Magento 2.3 prior to 2.3.1, 2.2 p…

First published (updated )

Magento MagentoXSS

First published (updated )

Magento MagentoPRODSECBUG-2449: Remote code execution via local file delete and XSLT injection

7.2
First published (updated )

Magento MagentoPRODSECBUG-2447: Using JS libraries with known security vulnerabilities

First published (updated )

Magento MagentoPRODSECBUG-2446: Remote code execution via custom layout update in create product functionality

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Magento MagentoPRODSECBUG-2407: Remote code execution due to unsafe PHP archieve deserialization in the import func…

7.2
First published (updated )

Magento MagentoWeak Encryption

First published (updated )

Magento MagentoPRODSECBUG-2444: Missing logs of configuration changes related to design update

First published (updated )

Magento MagentoPRODSECBUG-2494: Arbitrary file deletion through design layout update

First published (updated )

Magento MagentoXSS

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Magento MagentoXSS

First published (updated )

Magento MagentoCSRF

First published (updated )

Magento MagentoInfoleak, Input Validation

7.5
First published (updated )

composer/magento/community-editionSSRF

7.2
First published (updated )

composer/magento/community-editionInfoleak

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Magento MagentoXSS

First published (updated )

Magento MagentoXSS

First published (updated )

composer/magento/community-editionCode Injection

7.2
First published (updated )

composer/magento/community-editionXSS

First published (updated )

composer/magento/community-editionXSS

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/magento/community-editionPRODSECBUG-2325: Denial-of-service by forcing a store to respond with a 404 error

7.5
First published (updated )

composer/magento/community-editionPRODSECBUG-2347: Insufficient brute-forcing defenses in the token exchange protocol could be abused …

7.5
First published (updated )

Magento MagentoXSS

First published (updated )

composer/magento/community-editionXSS

First published (updated )

Magento MagentoPath Traversal

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/magento/community-editionMalicious File Upload

First published (updated )

Magento MagentoMalicious File Upload

7.2
First published (updated )

Magento MagentoCode Injection

7.2
First published (updated )

composer/magento/community-editionXSS

First published (updated )

Magento MagentoXSS

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/magento/community-editionSSRF

7.2
First published (updated )

composer/magento/community-editionPRODSECBUG-2429: Insecure object reference via customer REST API

7.5
First published (updated )

composer/magento/community-editionXSS

First published (updated )

Magento MagentoXSS

First published (updated )

Magento MagentoXSS

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/magento/community-editionPRODSECBUG-2276: Insecure Direct Object Reference (IDOR) vulnerability can expose order shipping det…

7.5
First published (updated )

composer/magento/community-editionPRODSECBUG-2298: Arbitrary code execution through product imports and design layout update

7.2
First published (updated )

Magento MagentoPRODSECBUG-2275: Unsafe functionality is exposed via email templates manipulation

First published (updated )

Magento MagentoXSS

First published (updated )

Magento MagentoXSS

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/magento/community-editionSSRF

7.2
First published (updated )

composer/magento/community-editionPRODSECBUG-2296: Arbitrary code execution through design layout update

7.2
First published (updated )

composer/magento/community-editionCode Injection

7.2
First published (updated )

composer/magento/community-editionSSRF

7.2
First published (updated )

composer/magento/community-editionPRODSECBUG-2307: Insufficient enforcement of user access controls can lead to unauthorized environme…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Magento MagentoInput Validation

First published (updated )

Magento MagentoInput Validation

First published (updated )

Magento MagentoXSS

First published (updated )

Magento MagentoXSS

First published (updated )

composer/magento/community-editionInput Validation

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203