Skip to contentMagento vulnerabilities
Newest
- adobe magento commerce, magento +1 moreMagento Commerce Stored Cross-site Scripting Could Lead To Arbitrary Javascript ExecutionCVE-2021-21030Fix available8.1 High
- adobe magento commerce, magento +1 moreMagento Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Data ModificationCVE-2021-21027Fix available4.3 Medium
- adobe magento commerce, magento +1 moreMagento Commerce Incorrect permissions Could Lead To Unauthorized AccessCVE-2021-21026Fix available5.3 Medium
- adobe magento commerce, magento +1 moreMagento Commerce Blind SQL Injection Could Lead To Unauthorized AccessCVE-2021-21024Fix available9.1 Critical
- adobe magento commerce, magento +1 moreMagento Commerce Stored Cross Site Scripting Vulnerability Could Lead To Arbitrary Code ExecutionCVE-2021-21023Fix available4.8 Medium
- adobe magento commerce, magento +1 moreMagento Commerce Incorrect permissions Could Lead To Unauthorized AccessCVE-2021-21022Fix available5.3 Medium
- adobe magento commerce, magento +1 moreMagento Commerce Improper Access Control VulnerabilityCVE-2021-21020Fix available5.3 Medium
- adobe magento commerce, magento +1 moreMagento Commerce XML Injection Could Lead To Remote Code ExecutionCVE-2021-21019Fix available9.1 Critical
- adobe magento commerce, magento +1 moreMagento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code ExecutionCVE-2021-21015Fix available8.0 High
- magento, adobe magento.com +1 moreMagento Commerce Failure To Invalidate User Session Could Lead To Unauthorized AccessCVE-2021-21031Fix available5.6 Medium
- magento, adobe magento commerce +1 moreIncorrect permissions in Integrations component could lead to unauthorized deletion of cmsPages via REST APICVE-2020-24404Fix available2.7 Low
- magento, adobe magento commerce +1 moreArbitrary code execution via file import functionalityCVE-2020-24407Fix available9.1 Critical
- magento, adobe magento commerce +1 moreDocument root path disclosure on Maintenance pageCVE-2020-24406Fix available3.7 Low
- magento, adobe magento commerce +1 moreIncorrect permissions in Inventory module could lead to unauthorized modification of inventory stock dataCVE-2020-24405Fix available4.3 Medium
- magento, adobe magento commerce +1 moreIncorrect permissions could lead to unauthorized modification of inventory source data via REST APICVE-2020-24403Fix available2.7 Low
- magento, adobe magento commerce +1 moreIncorrect permissions following the deletion of a user role or deactivation of a userCVE-2020-24401Fix available6.5 Medium
- magento, adobe magento commerce +1 moreIncorrect permissions in the Integrations component could lead to unauthorized deletion of customer details via REST APICVE-2020-24402Fix available4.9 Medium
- magento, adobe magento commerce +1 moreSQL injection allows arbitrary read from databaseCVE-2020-24400Fix available7.1 High
- magento, adobe magento commerce +1 moreStored XSS in customer address upload featureCVE-2020-24408Fix available6.1 Medium
- magento, openmage magento-lts, long term support +2 moreObservable Timing Discrepancy in OpenMage LTSCVE-2020-15151Fix available8.0 High
- adobe magentoMagento DOM-based Cross-site scripting vulnerabilityCVE-2020-9691Fix available9.6 Critical
- adobe magentoMagento security mitigation bypass vulnerabilityCVE-2020-9692Fix available6.5 Medium
- adobe magentoMagento observable timing discrepancy vulnerabilityCVE-2020-9690Fix available4.2 Medium
- adobe magentoMagento path traversal vulnerabilityCVE-2020-9689Fix available6.5 Medium
- adobe magentoMagento php object injection vulnerabilityCVE-2020-96649.8 Critical
- adobe magentoMagento stored cross-site scripting vulnerabilityCVE-2020-96656.1 Medium
- adobe magentoMagento stored cross-site scripting vulnerabilityCVE-2020-9577Fix available6.1 Medium
- adobe magentoMagento command injection vulnerabilityCVE-2020-9576Fix available9.8 Critical
- adobe magentoMagento Signature verification bypassCVE-2020-9588Fix available7.2 High
- adobe magentoMagento command injection vulnerabilityCVE-2020-9578Fix available9.8 Critical
- adobe magentoMagento security mitigation bypass vulnerabilityCVE-2020-9631Fix available9.8 Critical
- adobe magentoMagento business logic error vulnerabilityCVE-2020-9630Fix available9.8 Critical
- adobe magentoMagento defense-in-depth security mitigation vulnerabilityCVE-2020-9591Fix available7.5 High
- adobe magentoMagento security mitigation bypass vulnerabilityCVE-2020-9632Fix available9.8 Critical
- adobe magentoMagento Security mitigation bypass vulnerabilityCVE-2020-9580Fix available9.8 Critical
- adobe magentoMagento stored cross-site scripting vulnerabilityCVE-2020-9581Fix available6.1 Medium
- adobe magentoMagento command injection vulnerabilityCVE-2020-9582Fix available9.8 Critical
- adobe magentoMagento command injection vulnerabilityCVE-2020-9583Fix available9.8 Critical
- adobe magentoMagento authorization bypass vulnerabilityCVE-2020-9587Fix available7.5 High
- adobe magentoMagento Stored cross-site scriptingCVE-2020-9584Fix available5.4 Medium
- adobe magentoMagento Security mitigation bypass vulnerabilityCVE-2020-9579Fix available9.8 Critical
- adobe magentoMagento Defense-in-depth security mitigation vulnerabilityCVE-2020-9585Fix available9.8 Critical
- magento advanced newsletterSQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via the /store...CVE-2014-16349.8 Critical
- adobe magentoMagento stored cross-site scripting vulnerabilityCVE-2020-3758Fix available6.1 Medium
- adobe magentoMagento sql injection vulnerabilityCVE-2020-3719Fix available7.5 High
- adobe magentoMagento security bypass vulnerabilityCVE-2020-3718Fix available9.8 Critical
- adobe magentoMagento Path TraversalCVE-2020-3717Fix available5.3 Medium
- adobe magentoMagento deserialization vulnerabilityCVE-2020-3716Fix availableEPSS 14.0%9.8 Critical
- adobe magentoMagento stored cross-site scripting vulnerabilityCVE-2020-3715Fix available6.1 Medium
- magentoMagento arbitrary PHP code execution via the productData parameterCVE-2015-6497Fix available8.8 High
- Show moreLoading…