6716 matches found
CVE-2025-32773
CVE-2025-32773 entry is rejected/not used per initial description.
CVE-2024-23394
CVE-2024-23394 entry is rejected/not used per the Initial Description.
CVE-2024-23393
This CVE entry is rejected/not used as stated in the Initial Description.
CVE-2025-52934
CVE-2025-52934 entry is rejected/not used; it does not represent an active vulnerability entry.
CVE-2024-23392
CVE-2024-23392 is rejected/not used; this entry does not represent an active vulnerability.
CVE-2025-48787
CVE-2025-48787 entry is rejected/not used per the Initial Description.
CVE-2025-55027
CVE-2025-55027 entry is rejected/not used and does not represent an active vulnerability.
CVE-2024-21717
CVE-2024-21717 is rejected/not used per the Initial Description.
CVE-2022-36294
CVE-2022-36294 entry is rejected/not used and does not represent an active vulnerability.
CVE-2025-53387
CVE-2025-53387 entry is rejected/not used per the initial description.
CVE-2020-15245: Ability to switch customer email address on account detail page and stay verified
Impact The user may register in a shop by email [email protected], verify it, change it to the mail [email protected] and stay verified and enabled. This may lead to having accounts addressed to totally different emails, that were verified. Note, that this way one is not able to take over any...
CVE-2020-5220: Ability to define unintended serialisation groups via HTTP header which might lead to data exposure
Impact ResourceBundle accepts and uses any serialisation groups to be passed via a HTTP header. This might lead to data exposure by using an unintended serialisation group - for example it could make Shop API use a more permissive group from Admin API. Anyone exposing an API with ResourceBundle's...