Filter
AND
AND
Versions
Adobe CommerceAdobe Commerce Improper Access Control Security feature bypass
5.3
First published (updated )
Magento MagentoMagento Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Data Modification
4.3
First published (updated )
Adobe CommerceAdobe Commerce Stored XSS Arbitrary code execution
6.1
First published (updated )
Magento MagentoStored XSS in customer address upload feature
6.1
First published (updated )
composer/magento/community-editionMagento Commerce improper authorization allows an authenticated user to perform certain functions without permission
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoMagento Commerce DOM-based cross-site scripting (XSS) could lead to arbitrary javascript execution
6.9
First published (updated )
Magento MagentoMagento Commerce Improper Access Control Vulnerability
5.3
First published (updated )
Magento MagentoMagento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript Execution
4.8
First published (updated )
Magento MagentoIncorrect permissions in Inventory module could lead to unauthorized modification of inventory stock data
4.3
First published (updated )
Magento MagentoMagento Commerce improper Authorization via the 'Create Customer' endpoint
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoIncorrect permissions in the Integrations component could lead to unauthorized deletion of customer details via REST API
5.5
First published (updated )
Magento MagentoMagento Commerce Incorrect permissions Could Lead To Unauthorized Access
5.3
First published (updated )
Adobe CommerceAdobe Commerce Stored XSS Arbitrary code execution
5.5
First published (updated )
Magento MagentoMagento Commerce improper input validation in customer customer webapi
5.3
First published (updated )
composer/magento/community-editionMagento Commerce information disclosure during upload action leveraging a specially crafted file
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoThe fetchView function in the Mage_Core_Block_Template_Zend class in Magento Community Edition (CE) …
6.5
First published (updated )
Magento MagentoMagento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allow remote attackers t…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoAn insecure direct object reference (IDOR) vulnerability exists in Magento 2.3 prior to 2.3.1, 2.2 p…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.