Lucene search
K

4 matches found

Snyk
Snyk
added 2024/02/15 3:30 p.m.1 views

Denial of Service (DoS)

Overview magento/community-edition is a modern cloud eCommerce platform. Affected versions of this package are vulnerable to Denial of Service DoS through the resource allocation process. An attacker can exhaust system resources, causing the application to slow down or crash by leveraging...

6.7CVSS7AI score0.00265EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/02/15 12:0 a.m.2 views

PT-2024-1794

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier Description The issue is related to an improper neutralization of special elements used in an OS command, which could lead to arbitrary code execution by an attacker. This...

9.1CVSS9.7AI score0.07195EPSS
Exploits0References52
Positive Technologies
Positive Technologies
added 2023/12/04 12:0 a.m.5 views

PT-2023-9137 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier Description: The issue is related to a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts...

8.5CVSS5.5AI score0.01627EPSS
Exploits0References14
Positive Technologies
Positive Technologies
added 2023/12/04 12:0 a.m.2 views

PT-2023-9138 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier Description: The issue is related to an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user...

9CVSS8.1AI score0.02201EPSS
Exploits0References15
Rows per page
Query Builder