Adobe CommerceAdobe Commerce Improper Access Control Privilege escalation
Adobe CommerceAdobe Commerce Improper Limitation of a Pathname to a Restricted Directory Arbitrary code execution
Magento MagentoMagento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4…
Magento MagentoMagento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoPRODSECBUG-2449: Remote code execution via local file delete and XSLT injection
Magento MagentoPRODSECBUG-2376: Remote code execution through crafted page layout and image data
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoPRODSECBUG-2446: Remote code execution via custom layout update in create product functionality
Magento MagentoPRODSECBUG-2414: Remote code execution through custom layout update of the content management functi…
Magento MagentoPRODSECBUG-2407: Remote code execution due to unsafe PHP archieve deserialization in the import func…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoPRODSECBUG-2456: Broken authentication and session managememt
Magento MagentoPRODSECBUG-2332: Remote code execution through arbitrary file inclusion
Magento MagentoPRODSECBUG-2470: Remote Code Execution in email templates
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoPRODSECBUG-2469: Remote Code Execution in email templates
Magento MagentoPRODSECBUG-2465: Bypass of user confirmation mechanism
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/magento/community-editionPRODSECBUG-2325: Denial-of-service by forcing a store to respond with a 404 error
composer/magento/community-editionPRODSECBUG-2347: Insufficient brute-forcing defenses in the token exchange protocol could be abused …
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/magento/community-editionPRODSECBUG-2429: Insecure object reference via customer REST API
composer/magento/community-editionPRODSECBUG-2276: Insecure Direct Object Reference (IDOR) vulnerability can expose order shipping det…
composer/magento/community-editionPRODSECBUG-2298: Arbitrary code execution through product imports and design layout update
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/magento/community-editionPRODSECBUG-2296: Arbitrary code execution through design layout update
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoPRODSECBUG-2095: Defense-in-depth session validation check implemented
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/magento/community-editionPRODSECBUG-2132: Insecure Direct Object Reference (IDOR) vulnerability can expose sensitive company …
composer/magento/community-editionMalicious File Upload, Input Validation
composer/magento/community-editionPRODSECBUG-2172: Insecure user credential storage
composer/magento/product-community-editionPRODSECBUG-2232: Arbitrary code execution via layout manipulation
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.