Filters
Magento MagentoMagento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution
9.1
First published (updated )
Adobe CommerceAdobe Commerce XML Injection Arbitrary code execution
9.1
First published (updated )
Adobe CommerceAdobe Commerce Improper Authorization Privilege escalation
9.8
First published (updated )
Adobe CommerceAdobe Commerce and Magento Open Source Improper Input Validation Vulnerability
First published (updated )
Magento MagentoMagento Commerce Arbitrary Folder Empty Could Lead To Arbitrary Code Execution
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoMagento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code Execution
9.1
First published (updated )
Magento MagentoMagnto Commerce Unauthorized Data Modification Could Lead To Arbitrary Code Execution
9.1
First published (updated )
Magento MagentoMagento Commerce XML Injection Could Lead To Arbitrary Code Execution
9.1
First published (updated )
Magento MagentoMagento Commerce XML Injection Could Lead To Remote Code Execution
9.1
First published (updated )
Magento MagentoMagento Commerce Blind SQL Injection Could Lead To Unauthorized Access
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoArbitrary code execution via file import functionality
9.1
First published (updated )
Magento MagentoCommand Injection, OS Command Injection
9.8
First published (updated )
Magento MagentoCommand Injection, OS Command Injection
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoMagento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4…
10
First published (updated )
Magento MagentoMagento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4…
9.8
First published (updated )
Magento MagentoMagento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4…
10
First published (updated )
Magento MagentoMagento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4…
9.8
First published (updated )
Magento MagentoCommand Injection, OS Command Injection
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoCommand Injection, OS Command Injection
9.8
First published (updated )
Magento MagentoMagento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4…
9.8
First published (updated )
Magento MagentoMagento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4…
9.8
First published (updated )
Magento MagentoMagento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlie…
10
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoMagento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlie…
10
First published (updated )
Magento MagentoOS Command Injection, Command Injection
First published (updated )
Magento MagentoPRODSECBUG-2447: Using JS libraries with known security vulnerabilities
9.8
First published (updated )
Magento MagentoPRODSECBUG-2390: Broken authentication and session managememt
9.8
First published (updated )
Magento MagentoPRODSECBUG-2416: Using vulnerable component that provides abstraction of HTTP specification
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoPRODSECBUG-2272: XPath Injection via front end rendering functionality
9.8
First published (updated )
Magento MagentoPRODSECBUG-2403: Remote code execution through crafted PageBuilder templates
9.8
First published (updated )
Magento MagentoPRODSECBUG-2417: Remote code execution via vulnerable Symphony dependecy injection
9.8
First published (updated )
composer/magento/community-editionMalicious File Upload
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoMagento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks an…
9.8
First published (updated )