Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

composer/magento/project-community-editionMagento DOM-based Cross-site scripting vulnerability

Risk 84
Severity
9.7
XSS
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Magento DOM-based Cross-site scripting vulnerability

1 / 2
Source: Packagist
First published (updated )
CVE-2020-9691

composer/magento/project-community-editionMagento 2 Community Edition RCE via Unsafe File Upload

Risk 73
Severity
9.1
Malicious File Upload
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Magento 2 Community Edition RCE via Unsafe File Upload

1 / 2
Source: Packagist
First published (updated )
CVE-2020-24407

OpenMage Openmage Long Term SupportObservable Timing Discrepancy in OpenMage LTS

Risk 58
Severity
8
CSRF
AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

Impact This vulnerability allows to circumvent the formkey protection in the Admin Interface and increases the attack surface for Cross Site Request Forgery attacks

Patches The latest OpenMage Versions up from 19.4.6 and 20.0.2 have this Issue solved

References Related to Adobes CVE-2020-9690 ( https://helpx.adobe.com/security/products/magento/apsb20-47.html ) fixed in Magento2 https://github.com/magento/magento2/commit/52d72b8010c9cecb5b8e3d98ec5edc1ddcc65fb4 as part of 2.4.0/2.3.5-p2

1 / 3
Source: GitHub
First published (updated )
CVE-2020-15151

composer/magento/community-editionMagento SQL Injection vulnerability

Risk 50
Severity
7.1
SQL Injection
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Magento SQL Injection vulnerability

1 / 2
Source: Packagist
First published (updated )
CVE-2020-24400

composer/magento/project-community-editionMagento path traversal vulnerability

Risk 75
Severity
6.5
Path Traversal
AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Magento path traversal vulnerability

1 / 2
Source: Packagist
First published (updated )
CVE-2020-9689

composer/magento/community-editionMagento security mitigation bypass vulnerability

Risk 75
Severity
6.5
AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Magento security mitigation bypass vulnerability

1 / 2
Source: Packagist
First published (updated )
CVE-2020-9692

composer/magento/project-community-editionMagento 2 Community Edition Incorrect Authorization

Risk 50
Severity
6.5
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Magento 2 Community Edition Incorrect Authorization

1 / 2
Source: Packagist
First published (updated )
CVE-2020-24401

composer/magento/community-editionMagento 2 Community Edition XSS Vulnerability

Risk 38
Severity
6.1
XSS
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Magento 2 Community Edition XSS Vulnerability

1 / 2
Source: Packagist
First published (updated )
CVE-2020-24408

composer/magento/project-community-editionMagento incorrect permissions vulnerability in the Integrations component

Risk 36
Severity
4.9
AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Magento incorrect permissions vulnerability in the Integrations component

1 / 2
Source: Packagist
First published (updated )
CVE-2020-24402

composer/magento/community-editionMagento incorrect permissions vulnerability in the Inventory module

Risk 23
Severity
4.3
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Magento incorrect permissions vulnerability in the Inventory module

1 / 2
Source: Packagist
First published (updated )
CVE-2020-24405

composer/magento/community-editionMagento observable timing discrepancy vulnerability

Risk 25
Severity
4.2
AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

Magento observable timing discrepancy vulnerability

1 / 2
Source: Packagist
First published (updated )
CVE-2020-9690

composer/magento/project-community-editionMagento incorrect user permissions vulnerability within the Inventory component

Risk 22
Severity
2.7
AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Magento incorrect user permissions vulnerability within the Inventory component

1 / 2
Source: Packagist
First published (updated )
CVE-2020-24403

composer/magento/community-editionMagento 2 Community Edition vulnerable to Improper Authorization

Risk 35
Severity
2.7
AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Magento 2 Community Edition vulnerable to Improper Authorization

1 / 2
Source: Packagist
First published (updated )
CVE-2020-24404

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203