Filter
AND
AND
Versions
Adobe CommerceAdobe Commerce Improper Access Control Security feature bypass
5.3
First published (updated )
Adobe CommerceAdobe Commerce Stored XSS Arbitrary code execution
6.1
First published (updated )
Adobe CommerceAdobe Commerce Stored XSS Arbitrary code execution
5.5
First published (updated )
composer/magento/community-editionMagento Commerce improper authorization allows an authenticated user to perform certain functions without permission
6.5
First published (updated )
composer/magento/community-editionMagento Commerce information disclosure during upload action leveraging a specially crafted file
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoMagento Commerce improper input validation in customer customer webapi
5.3
First published (updated )
Magento MagentoMagento Commerce improper Authorization via the 'Create Customer' endpoint
6.5
First published (updated )
Magento MagentoMagento Commerce DOM-based cross-site scripting (XSS) could lead to arbitrary javascript execution
6.9
First published (updated )
Magento MagentoMagento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript Execution
4.8
First published (updated )
Magento MagentoMagento Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Data Modification
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoMagento Commerce Improper Access Control Vulnerability
5.3
First published (updated )
Magento MagentoMagento Commerce Incorrect permissions Could Lead To Unauthorized Access
5.3
First published (updated )
Magento MagentoMagento Commerce Stored Cross Site Scripting Vulnerability Could Lead To Arbitrary Code Execution
4.8
First published (updated )
Magento MagentoMagento Commerce Incorrect permissions Could Lead To Unauthorized Access
5.3
First published (updated )
Magento MagentoIncorrect permissions in Inventory module could lead to unauthorized modification of inventory stock data
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoIncorrect permissions in the Integrations component could lead to unauthorized deletion of customer details via REST API
5.5
First published (updated )
Magento MagentoStored XSS in customer address upload feature
6.1
First published (updated )
Magento MagentoDocument root path disclosure on Maintenance page
4.3
First published (updated )
Magento MagentoIncorrect permissions could lead to unauthorized modification of inventory source data via REST API
First published (updated )
Magento MagentoIncorrect permissions in Integrations component could lead to unauthorized deletion of cmsPages via REST API
5.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoIncorrect permissions following the deletion of a user role or deactivation of a user
6.5
First published (updated )
Magento MagentoMagento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have an observable timing discrepanc…
4.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.