Filter
AND
Software
MagentoMagento Commerce Media Gallery Upload Improper Access Control Could Lead To Remote Code Execution
7.2
First published (updated )
MagentoMagento Commerce CMS Page Improper Input Validation Could Lead To Remote Code Execution
7.2
First published (updated )
Adobe Magento Commerce[CVE-2021-36032] Magento IDOR Leads to Account Takeover
8.8
First published (updated )
Adobe Magento CommerceAdobe Commerce Improper Access Control Privilege escalation
8.8
First published (updated )
Adobe Magento CommerceAdobe Commerce Improper Limitation of a Pathname to a Restricted Directory Arbitrary code execution
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MagentoMagento Commerce insecure storage of sensitive documentation
7.5
First published (updated )
MagentoMagento Commerce path traversal vulnerability in child theme store creation
7.2
First published (updated )
MagentoMagento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access
7.5
First published (updated )
MagentoMagento Commerce Stored Cross-site Scripting Could Lead To Arbitrary Javascript Execution
8.1
First published (updated )
MagentoMagento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MagentoMagento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code Execution
8.5
First published (updated )
MagentoSQL injection allows arbitrary read from database
7.1
First published (updated )
OpenMage Long Term SupportObservable Timing Discrepancy in OpenMage LTS
8
First published (updated )
MagentoMagento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a security mitigation bypass vu…
8.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MagentoMagento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4…
7.2
First published (updated )
MagentoMagento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MagentoIn Magento prior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrativ…
7.2
First published (updated )
MagentoA remote code execution vulnerability exists in Magento 1 prior to 1.9.x and 1.14.x. An authenticate…
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MagentoA remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3. An authenti…
7.2
First published (updated )
MagentoPRODSECBUG-2449: Remote code execution via local file delete and XSLT injection
7.2
First published (updated )
MagentoPRODSECBUG-2376: Remote code execution through crafted page layout and image data
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.