Filter
AND
MagentoAn insecure direct object reference (IDOR) vulnerability exists in Magento 2.3 prior to 2.3.1, 2.2 p…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MagentoPRODSECBUG-2376: Remote code execution through crafted page layout and image data
8.8
First published (updated )
MagentoPRODSECBUG-2446: Remote code execution via custom layout update in create product functionality
8.8
First published (updated )
MagentoPRODSECBUG-2407: Remote code execution due to unsafe PHP archieve deserialization in the import func…
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MagentoPRODSECBUG-2390: Broken authentication and session managememt
9.8
First published (updated )
MagentoPRODSECBUG-2272: XPath Injection via front end rendering functionality
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MagentoPRODSECBUG-2478: Broken authentication and session managememt
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MagentoPRODSECBUG-2445: Insufficient logging and monitoring of configuration changes
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MagentoPRODSECBUG-2449: Remote code execution via local file delete and XSLT injection
7.2
First published (updated )
MagentoPRODSECBUG-2419: Bypass of sitemp access restrictions
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.