14437 matches found
CVE-2023-29295
Adobe Commerce CVE-2023-29295 describes an Incorrect Authorization vulnerability affecting 2.4.6 and earlier (including 2.4.5-p2, 2.4.4-p3) that could let a low-privilege attacker bypass a security feature without user interaction. The issue stems from an authorization flaw in the Create Quote fl...
CVE-2023-29287 Adobe Commerce Information Exposure Security feature bypass
Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by an Information Exposure vulnerability that could lead to a security feature bypass. An attacker could leverage this vulnerability to leak minor user data. Exploitation of this issue does not...
CVE-2023-29288 Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A privileged attacker could leverage this vulnerability to modify a minor functionality of another user...
CVE-2023-29294 Bypass Purchase Order Approval using Company User in Adobe Commerce B2B
Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by a Business Logic Errors vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass a minor functionality. Exploitation ...
CVE-2023-29293
Adobe Commerce (Magento) Open Source/Commerce: Vulnerable in 2.4.4-p3 and earlier up to 2.4.6 and earlier. An Improper Input Validation vulnerability could allow an admin-privileged attacker to bypass a security feature and affect the availability of a user’s minor feature without user interactio...
CVE-2023-29296 [Cloud] Customer suspects IDOR vulnerability
Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to modify a minor functionality of another...
CVE-2023-29287 Adobe Commerce Information Exposure Security feature bypass
Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by an Information Exposure vulnerability that could lead to a security feature bypass. An attacker could leverage this vulnerability to leak minor user data. Exploitation of this issue does not...
CVE-2023-34865
Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature...
CVE-2023-34865
Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature...
Directory traversal
Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature...
CVE-2023-32021
Windows SMB Witness Service Security Feature Bypass Vulnerability...
CVE-2023-32022
Windows Server Service Security Feature Bypass Vulnerability...
CVE-2023-32021
Windows SMB Witness Service Security Feature Bypass Vulnerability...
CVE-2023-32022
Windows Server Service Security Feature Bypass Vulnerability...
CVE-2023-29352
Windows Remote Desktop Security Feature Bypass Vulnerability...
CVE-2023-29352
Windows Remote Desktop Security Feature Bypass Vulnerability...
CVE-2023-29352
Windows Remote Desktop Security Feature Bypass Vulnerability...
Security feature bypass
Windows SMB Witness Service Security Feature Bypass Vulnerability...