Magento MagentoMagento Commerce Media Gallery Upload Improper Access Control Could Lead To Remote Code Execution
Magento MagentoMagento Commerce CMS Page Improper Input Validation Could Lead To Remote Code Execution
Adobe Commerce[CVE-2021-36032] Magento IDOR Leads to Account Takeover
Adobe CommerceAdobe Commerce Improper Access Control Privilege escalation
Adobe CommerceAdobe Commerce Improper Limitation of a Pathname to a Restricted Directory Arbitrary code execution
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoMagento Commerce insecure storage of sensitive documentation
Magento MagentoMagento Commerce path traversal vulnerability in child theme store creation
Magento MagentoMagento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access
Magento MagentoMagento Commerce Stored Cross-site Scripting Could Lead To Arbitrary Javascript Execution
Magento MagentoMagento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoMagento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code Execution
Magento MagentoSQL injection allows arbitrary read from database
Openmage Openmage Long Term SupportObservable Timing Discrepancy in OpenMage LTS
Magento MagentoMagento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a security mitigation bypass vu…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoMagento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4…
Magento MagentoMagento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoIn Magento prior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrativ…
Magento MagentoA remote code execution vulnerability exists in Magento 1 prior to 1.9.x and 1.14.x. An authenticate…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoA remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3. An authenti…
Magento MagentoPRODSECBUG-2449: Remote code execution via local file delete and XSLT injection
Magento MagentoPRODSECBUG-2376: Remote code execution through crafted page layout and image data
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoPRODSECBUG-2446: Remote code execution via custom layout update in create product functionality
Magento MagentoPRODSECBUG-2414: Remote code execution through custom layout update of the content management functi…
Magento MagentoPRODSECBUG-2407: Remote code execution due to unsafe PHP archieve deserialization in the import func…
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoPRODSECBUG-2456: Broken authentication and session managememt
Magento MagentoPRODSECBUG-2332: Remote code execution through arbitrary file inclusion
Magento MagentoPRODSECBUG-2470: Remote Code Execution in email templates
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoPRODSECBUG-2469: Remote Code Execution in email templates
Magento MagentoPRODSECBUG-2465: Bypass of user confirmation mechanism
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/magento/community-editionPRODSECBUG-2325: Denial-of-service by forcing a store to respond with a 404 error
composer/magento/community-editionPRODSECBUG-2347: Insufficient brute-forcing defenses in the token exchange protocol could be abused …
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.