Filter
AND
MagentoAn insecure direct object reference (IDOR) vulnerability exists in Magento 2.3 prior to 2.3.1, 2.2 p…
6.5
First published (updated )
MagentoPRODSECBUG-2446: Remote code execution via custom layout update in create product functionality
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MagentoPRODSECBUG-2407: Remote code execution due to unsafe PHP archieve deserialization in the import func…
7.2
First published (updated )
MagentoPRODSECBUG-2449: Remote code execution via local file delete and XSLT injection
7.2
First published (updated )
MagentoPRODSECBUG-2447: Using JS libraries with known security vulnerabilities
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MagentoPRODSECBUG-2444: Missing logs of configuration changes related to design update
4.9
First published (updated )
MagentoPRODSECBUG-2494: Arbitrary file deletion through design layout update
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/magento/community-editionInfoleak, Input Validation
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/magento/community-editionPRODSECBUG-2325: Denial-of-service by forcing a store to respond with a 404 error
7.5
First published (updated )
composer/magento/community-editionPRODSECBUG-2347: Insufficient brute-forcing defenses in the token exchange protocol could be abused …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/magento/community-editionMalicious File Upload
First published (updated )
composer/magento/community-editionMalicious File Upload
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.