Latest vulnerabilities for "magento magento" 2.1.0

6.5

First published (updated )

CVE-2019-8235

Magento MagentoXSS

5.4

First published (updated )

CVE-2019-8120

Magento MagentoPRODSECBUG-2449: Remote code execution via local file delete and XSLT injection

7.2

First published (updated )

CVE-2019-8119

Magento MagentoPRODSECBUG-2447: Using JS libraries with known security vulnerabilities

critical

9.8

First published (updated )

CVE-2019-8121

Magento MagentoPRODSECBUG-2446: Remote code execution via custom layout update in create product functionality

8.8

First published (updated )

CVE-2019-8122

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Magento MagentoPRODSECBUG-2407: Remote code execution due to unsafe PHP archieve deserialization in the import func…

7.2

First published (updated )

CVE-2019-8141

Magento MagentoWeak Encryption

5.3

First published (updated )

CVE-2019-8118

Magento MagentoPRODSECBUG-2444: Missing logs of configuration changes related to design update

4.9

First published (updated )

CVE-2019-8124

Magento MagentoPRODSECBUG-2494: Arbitrary file deletion through design layout update

6.5

First published (updated )

CVE-2019-8090

Magento MagentoXSS

5.4

First published (updated )

CVE-2019-7945

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Magento MagentoXSS

4.8

First published (updated )

CVE-2019-7940

Magento MagentoCSRF

6.5

First published (updated )

CVE-2019-7947

Magento MagentoInfoleak, Input Validation

7.5

First published (updated )

CVE-2019-7951

composer/magento/community-editionSSRF

7.2

First published (updated )

CVE-2019-7923

composer/magento/community-editionInfoleak

4.9

First published (updated )

CVE-2019-7929

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Magento MagentoXSS

4.8

First published (updated )

CVE-2019-7935

Magento MagentoXSS

6.1

First published (updated )

CVE-2019-7939

composer/magento/community-editionCode Injection

7.2

First published (updated )

CVE-2019-7942

composer/magento/community-editionXSS

4.8

First published (updated )

CVE-2019-7927

composer/magento/community-editionXSS

4.8

First published (updated )

CVE-2019-7937

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/magento/community-editionPRODSECBUG-2325: Denial-of-service by forcing a store to respond with a 404 error

7.5

First published (updated )

CVE-2019-7915

composer/magento/community-editionPRODSECBUG-2347: Insufficient brute-forcing defenses in the token exchange protocol could be abused …

7.5

First published (updated )

CVE-2019-7928

Magento MagentoXSS

4.8

First published (updated )

CVE-2019-7934

composer/magento/community-editionXSS

4.8

First published (updated )

CVE-2019-7926

Magento MagentoPath Traversal

5.5

First published (updated )

CVE-2019-7925

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/magento/community-editionMalicious File Upload

critical

9

First published (updated )

CVE-2019-7930

Magento MagentoMalicious File Upload

7.2

First published (updated )

CVE-2019-7912

Magento MagentoCode Injection

7.2

First published (updated )

CVE-2019-7932

composer/magento/community-editionXSS

5.4

First published (updated )

CVE-2019-7921

Magento MagentoXSS

5.4

First published (updated )

CVE-2019-7944

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/magento/community-editionSSRF

7.2

First published (updated )

CVE-2019-7913

composer/magento/community-editionPRODSECBUG-2429: Insecure object reference via customer REST API

7.5

First published (updated )

CVE-2019-7950

composer/magento/community-editionXSS

4.8

First published (updated )

CVE-2019-7936

Magento MagentoXSS

4.8

First published (updated )

CVE-2019-7938

Magento MagentoXSS

4.8

First published (updated )

CVE-2019-7908

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/magento/community-editionPRODSECBUG-2276: Insecure Direct Object Reference (IDOR) vulnerability can expose order shipping det…

7.5

First published (updated )

CVE-2019-7890

composer/magento/community-editionPRODSECBUG-2298: Arbitrary code execution through product imports and design layout update

7.2

First published (updated )

CVE-2019-7896

Magento MagentoPRODSECBUG-2275: Unsafe functionality is exposed via email templates manipulation

6.5

First published (updated )

CVE-2019-7889

Magento MagentoXSS

4.8

First published (updated )

CVE-2019-7897

Magento MagentoXSS

4.8

First published (updated )

CVE-2019-7909

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/magento/community-editionSSRF

7.2

First published (updated )

CVE-2019-7911

composer/magento/community-editionPRODSECBUG-2296: Arbitrary code execution through design layout update

7.2

First published (updated )

CVE-2019-7895

composer/magento/community-editionCode Injection

7.2

First published (updated )

CVE-2019-7903

composer/magento/community-editionSSRF

7.2

First published (updated )

CVE-2019-7892

composer/magento/community-editionPRODSECBUG-2307: Insufficient enforcement of user access controls can lead to unauthorized environme…

6.5

First published (updated )

CVE-2019-7904

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Magento MagentoInput Validation

5.3

First published (updated )

CVE-2019-7898

Magento MagentoInput Validation

5.3

First published (updated )

CVE-2019-7899

Magento MagentoXSS

4.8

First published (updated )

CVE-2019-7875

Magento MagentoXSS

4.8

First published (updated )

CVE-2019-7887

composer/magento/community-editionInput Validation

8.8

First published (updated )

CVE-2019-7885

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.