Skip to contentMagento vulnerabilities
Newest
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition RCE VulnerabilityCVE-2019-7895Fix available7.2 High
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition RCE Vulnerability via SSRFCVE-2019-7892Fix available7.2 High
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition IDOR VulnerabilityCVE-2019-7890Fix available7.3 High
- magentoMagento 2 Community Edition Injection VulnerabilityCVE-2019-7889Fix available6.5 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Information DisclosureCVE-2019-7888Fix available6.5 Medium
- magentoMagento 2 Community Edition Cross-site Scripting VulnerabilityCVE-2019-7887Fix available4.8 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Cryptographic FlawCVE-2019-7886Fix available7.5 High
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition RCE VulnerabilityCVE-2019-7885Fix available8.8 High
- magentoMagento 2 Community Edition XSS VulnerabilityCVE-2019-7882Fix available5.4 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition XSS VulnerabilityCVE-2019-7881Fix available5.4 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition XSS VulnerabilityCVE-2019-7880Fix available4.8 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition XSS VulnerabilityCVE-2019-7877Fix available6.1 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition RCE VulnerabilityCVE-2019-7876Fix available8.8 High
- magentoMagento 2 Community Edition Cross-site Scripting VulnerabilityCVE-2019-7875Fix available4.8 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition XSS VulnerabilityCVE-2019-7874Fix available6.5 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Cross-site Scripting VulnerabilityCVE-2019-7873Fix available4.3 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento Insufficient authorization check when adding users to company accountsCVE-2019-7872Fix available6.5 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Unsafe File UploadCVE-2019-7871Fix available8.8 High
- adobe systems incorporated magento 2, magento +1 moreMagento Stored Cross-site Scripting vulnerability in the admin panelCVE-2019-7869Fix available4.8 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento Cross-site Scripting in the admin panelCVE-2019-7868Fix available4.8 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition XSS VulnerabilityCVE-2019-7867Fix available4.8 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition XSS VulnerabilityCVE-2019-7866Fix available4.8 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition CSRF VulnerabilityCVE-2019-7865Fix available8.8 High
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition IDOR VulnerabilityCVE-2019-7864Fix available5.3 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento Stored cross-site scripting in admin panelCVE-2019-7863Fix available4.8 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition XSS VulnerabilityCVE-2019-7862Fix available4.8 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Unsafe File UploadCVE-2019-7861Fix available7.5 High
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Weak PRNGCVE-2019-7860Fix available7.5 High
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Path Traversal VulnerabilityCVE-2019-7859Fix available7.5 High
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Cryptographic FlawCVE-2019-7858Fix available7.5 High
- adobe systems incorporated magento 2, magento +1 moreMagento Cross-Site Request Forgery (CSRF)CVE-2019-7857Fix available4.3 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Cryptographic FlawCVE-2019-7855Fix available5.3 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition IDOR VulnerabilityCVE-2019-7854Fix available7.5 High
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition Path DisclosureCVE-2019-7852Fix available5.3 Medium
- adobe systems incorporated magento 2, magento +1 moreMagento 2 Community Edition CSRF vulnerabilityCVE-2019-7851Fix available6.5 Medium
- magentoMagento 2 Community Edition Session Fixation CheckCVE-2019-7849Fix available7.5 High
- adobe magento, magento commerce, magento commerce +1 more +3 moreMagento 2 Community Edition SQLi VulnerabilityCVE-2019-7139Public exploitFix availableEPSS 22.2%9.8 Critical
- magentoMagento Cross-Site Request Forgery (CSRF)CVE-2018-5301Fix available6.5 Medium
- magentoMagento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have XSS...CVE-2016-107046.1 Medium
- magentoPassword reset tokens in Magento CE before 1.9.2.2, and Magento EE before 1.14.2.2 are passed via...CVE-2015-87079.8 Critical
- magentoCross-site scripting (XSS) vulnerability in Magento E-Commerce Platform 1.9.0.1.CVE-2014-97586.1 Medium
- magento magento2Unauthenticated crypto and weak IV in Magento\Framework\EncryptionCVE-2016-6485Fix available7.5 High
- magentoMagento CE and EE before 2.0.6 allows remote attackers to conduct PHP objection injection attacks...CVE-2016-4010Public exploitEPSS 92.9%9.8 Critical
- magentoThe getOrderByStatusUrlKey function in the Mage_Rss_Helper_Order class in app/code/core/Mage/Rss...CVE-2016-22125.3 Medium
- magentoThe fetchView function in the Mage_Core_Block_Template_Zend class in Magento Community Edition ...CVE-2015-34586.5 Medium
- magentoMagento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allow remote...CVE-2015-3457EPSS 25.1%5.0 Medium
- magentoPHP remote file inclusion vulnerability in the fetchView function in the...CVE-2015-13996.5 Medium
- magentoMultiple directory traversal vulnerabilities in Magento Community Edition (CE) 1.9.1.0 and...CVE-2015-1398EPSS 13.9%6.5 Medium
- magentoSQL injection vulnerability in the getCsvFile function in the Mage_Adminhtml_Block_Widget_Grid...CVE-2015-1397Public exploitEPSS 55.8%6.5 Medium