Magento MagentoPRODSECBUG-2445: Insufficient logging and monitoring of configuration changes
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoOS Command Injection, Command Injection
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoPRODSECBUG-2449: Remote code execution via local file delete and XSLT injection
Magento MagentoPRODSECBUG-2419: Bypass of sitemp access restrictions
Magento MagentoPRODSECBUG-2376: Remote code execution through crafted page layout and image data
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoPRODSECBUG-2447: Using JS libraries with known security vulnerabilities
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoPRODSECBUG-2446: Remote code execution via custom layout update in create product functionality
Magento MagentoPRODSECBUG-2414: Remote code execution through custom layout update of the content management functi…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoPRODSECBUG-2407: Remote code execution due to unsafe PHP archieve deserialization in the import func…
Magento MagentoPRODSECBUG-2390: Broken authentication and session managememt
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoPRODSECBUG-2456: Broken authentication and session managememt
Magento MagentoPRODSECBUG-2416: Using vulnerable component that provides abstraction of HTTP specification
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoPRODSECBUG-2272: XPath Injection via front end rendering functionality
Magento MagentoPRODSECBUG-2403: Remote code execution through crafted PageBuilder templates
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoPRODSECBUG-2444: Missing logs of configuration changes related to design update
Magento MagentoPRODSECBUG-2332: Remote code execution through arbitrary file inclusion
Magento MagentoPRODSECBUG-2417: Remote code execution via vulnerable Symphony dependecy injection
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoPRODSECBUG-2470: Remote Code Execution in email templates
Magento MagentoPRODSECBUG-2478: Broken authentication and session managememt
Magento MagentoPRODSECBUG-2484: Arbitrary file deletion through export data data transfer
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.