Filter
AND
AND
Magento MagentoPRODSECBUG-2447: Using JS libraries with known security vulnerabilities
9.8
First published (updated )
composer/magento/community-editionMalicious File Upload
First published (updated )
Magento MagentoPRODSECBUG-2446: Remote code execution via custom layout update in create product functionality
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/magento/product-community-editionPRODSECBUG-2232: Arbitrary code execution via layout manipulation
8.8
First published (updated )
composer/magento/community-editionPRODSECBUG-2325: Denial-of-service by forcing a store to respond with a 404 error
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/magento/community-editionPRODSECBUG-2347: Insufficient brute-forcing defenses in the token exchange protocol could be abused …
7.5
First published (updated )
composer/magento/community-editionPRODSECBUG-2429: Insecure object reference via customer REST API
7.5
First published (updated )
composer/magento/community-editionPRODSECBUG-2276: Insecure Direct Object Reference (IDOR) vulnerability can expose order shipping det…
7.5
First published (updated )
Magento MagentoPRODSECBUG-2095: Defense-in-depth session validation check implemented
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/magento/community-editionPRODSECBUG-2132: Insecure Direct Object Reference (IDOR) vulnerability can expose sensitive company …
7.5
First published (updated )
composer/magento/community-editionMalicious File Upload, Input Validation
7.5
First published (updated )
composer/magento/community-editionPRODSECBUG-2172: Insecure user credential storage
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Magento MagentoPRODSECBUG-2449: Remote code execution via local file delete and XSLT injection
7.2
First published (updated )
Magento MagentoPRODSECBUG-2407: Remote code execution due to unsafe PHP archieve deserialization in the import func…
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/magento/community-editionPRODSECBUG-2298: Arbitrary code execution through product imports and design layout update
7.2
First published (updated )
composer/magento/community-editionPRODSECBUG-2296: Arbitrary code execution through design layout update
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.