Lucene search
+L

333 matches found

CNNVD
CNNVD
added 2021/08/10 12:00 a.m.11 views

Magento Open Source和Magento Commerce 注入漏洞

Magento Open Source is to provide basic e-commerce functionality that allows you to build unique online stores from scratch.Magento Commerce is to provide a best-in-class shopping experience without the need for developer support. An injection vulnerability exists in Magento Commerce and Magento...

9.1CVSS7.8AI score0.0344EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/08/10 12:00 a.m.7 views

Magento Commerce输入验证错误漏洞

Magento is an open source e-commerce platform written in PHP by Adobe. Adobe Magento is vulnerable to improper input validation. An attacker can exploit this vulnerability to execute arbitrary code...

9.1CVSS6.1AI score0.02807EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/08/10 12:00 a.m.10 views

Magento Commerce 安全漏洞

Magento Commerce is to provide a best-in-class shopping experience without the need for developer support. A security vulnerability exists in Magento Commerce, which exists due to incorrect input validation when processing XML data. A remote administrator can pass specially crafted XML data to th...

9.1CVSS8AI score0.03122EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/08/10 12:00 a.m.11 views

Magento Commerce 和 Magento Open Source 输入验证错误漏洞

Magento Open Source is to provide basic e-commerce functionality that allows you to build unique online stores from scratch.Magento Commerce is to provide a best-in-class shopping experience without the need for developer support. An input validation error vulnerability exists in Magento Commerce...

7.2CVSS7.9AI score0.01949EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/08/10 12:00 a.m.9 views

Magento Commerce 跨站脚本漏洞

Magento Commerce is to provide a first-class shopping experience without the need for developer support. Magento Commerce suffers from a cross-site scripting vulnerability that exists due to insufficient cleaning of user-supplied data. A remote attacker can exploit this vulnerability to inject an...

6.5CVSS6.5AI score0.01701EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/08/10 12:00 a.m.10 views

Magento Commerce 安全漏洞

Magento Commerce is to provide a best-in-class shopping experience without developer support. Magento Commerce has a security vulnerability that exists due to insufficient authorization checks. A remote administrator can bypass implemented security restrictions and gain unauthorized access to the...

6.5CVSS6.5AI score0.01802EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/08/09 12:00 a.m.9 views

The vulnerability of the Magento Commerce software development and management platform lies in its lack of measures to neutralize special elements used in the operating system. This allows attackers to execute arbitrary code.

The vulnerability of the Magento Commerce software development and management platform is related to the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.0572EPSS
SaveExploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/07/30 12:00 a.m.14 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores relates to the bypassing of security features, allowing unauthorized users to obtain unauthorized discounts on products.

The vulnerability of the Magento Commerce software platform for developing and managing online stores relates to the bypassing of security features. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to products, potentially leading to unauthorized discounts...

7.8CVSS7.2AI score0.05009EPSS
SaveExploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:00 a.m.10 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores relates to access control errors, which allow unauthorized users to gain unauthorized access to protected data.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to lack of access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected data...

6.4CVSS5.5AI score0.01897EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:00 a.m.10 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Magento Commerce development and management software platform is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.4CVSS6.5AI score0.01429EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:00 a.m.8 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of measures taken to protect the website structure, allowing attackers to execute arbitrary JavaScript code.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser using ...

6.4CVSS6AI score0.01397EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:00 a.m.11 views

The vulnerability of the software platform for developing and managing online stores Magento Commerce arises from insufficient validation of input data. This allows attackers to access confidential information.

The vulnerability of the Magento Commerce software platform for developing and managing online stores exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...

2.6CVSS5.4AI score0.01425EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:00 a.m.14 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from insufficient validation of input data. This allows attackers to bypass security functions.

The vulnerability of the software platform for developing and managing online stores Magento Commerce is related to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to bypass security functions in the target system using a specially crafted PDF file...

5.3CVSS5.9AI score0.01578EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:00 a.m.11 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from incorrect restrictions on the path to the restricted catalog. This allows attackers to write arbitrary files into the device’s file system.

The vulnerability of the Magento Commerce development and management software platform is related to incorrect restrictions on the path name used to access the restricted catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files to the device’s file system...

5CVSS7.2AI score0.0178EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/06/29 12:00 a.m.11 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Magento Commerce development and management software platform is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information and modify user data...

6.4CVSS5.9AI score0.00824EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/05/19 12:00 a.m.8 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores, related to authentication errors, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Magento Commerce development and management software platform is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.3CVSS5.9AI score0.02195EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/05/19 12:00 a.m.13 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of measures taken to protect the website structure, allowing attackers to execute arbitrary JavaScript code.

The vulnerability of the Magento Commerce development and management software platform relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code in the user’s browser, through access with...

4.9CVSS5.9AI score0.0161EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/05/19 12:00 a.m.14 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of measures to protect SQL query structures, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Magento Commerce development and management software platform lies in the lack of measures to protect SQL query structures. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by using administrator-level access rights...

9.1CVSS7.6AI score0.02772EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:00 a.m.11 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of automatic termination of all sessions after changing passwords. This allows attackers to gain unauthorized access to limited resources.

The vulnerability of the Magento Commerce software development and management platform lies in the lack of automatic termination of all sessions after the password is changed. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to limited resources...

7.5CVSS6AI score0.01673EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:00 a.m.8 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Magento Commerce development and management software platform relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

8.1CVSS7.9AI score0.05629EPSS
SaveExploits0References3Affected Software2
Rows per page
Query Builder