Lucene search
+L

333 matches found

BDU FSTEC
BDU FSTEC
added 2021/03/25 12:00 a.m.10 views

The vulnerability of the integration component of the Magento Commerce software development and management platform, related to authentication errors, allows attackers to gain unauthorized access to protected information.

The vulnerability of the integration component of the Magento Commerce software development and management platform is related to authentication errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by using...

5.3CVSS5.9AI score0.01812EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:00 a.m.9 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Magento Commerce development and management software platform relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

4.9CVSS6AI score0.84674EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:00 a.m.12 views

The vulnerability of the integration component of the Magento Commerce software development and management platform relates to the lack of protection against cross-site request forgery attacks. This allows attackers to perform unauthorized changes to user metadata.

The vulnerability of the integration component of the Magento Commerce software platform for online store development and management is related to the lack of protection against cross-site request forgery attacks. Exploiting this vulnerability allows a malicious actor to perform unauthorized...

4.3CVSS5.3AI score0.01665EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:00 a.m.8 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores relates to errors in processing XML requests, which allows a hacker to execute arbitrary code.

Vulnerability of the software platform for developing and managing online stores Magento Commerce. Exploiting this vulnerability allows a malicious actor to execute arbitrary code with access rights as an administrator to the console...

9.1CVSS8.2AI score0.03269EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/25 12:00 a.m.11 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of automatic termination of all sessions after changing passwords. This allows attackers to gain unauthorized access to limited resources.

The vulnerability of the Magento Commerce software development and management platform lies in the lack of automatic termination of all sessions after the password is changed. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to limited resources...

7.5CVSS6AI score0.01558EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/02 12:00 a.m.17 views

The vulnerability of the module for scheduled operations on the Magento Commerce software development and management platform allows a hacker to execute arbitrary code.

The vulnerability of the module for scheduled operations on the Magento Commerce software platform relates to the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.1CVSS8.2AI score0.03898EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/02 12:00 a.m.21 views

The vulnerability of the order formatting module of the Magento Commerce software platform, which is used for developing and managing online stores, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the order processing module of the Magento Commerce software platform for developing and managing online stores is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized...

5.3CVSS6.3AI score0.03951EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/02 12:00 a.m.20 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in its ability to allow unlimited loading of dangerous files, enabling attackers to execute arbitrary code.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.1CVSS8.1AI score0.04213EPSS
SaveExploits1References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/02 12:00 a.m.17 views

The vulnerability of the Magento Commerce software development and management platform lies in its lack of measures to neutralize special elements used in the operating system, allowing attackers to execute arbitrary code.

The vulnerability of the Magento Commerce software development and management platform is related to the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8CVSS7.8AI score0.02863EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/02 12:00 a.m.18 views

The vulnerability of the WebAPI interface of the Magento Commerce software development and management platform allows a perpetrator to execute arbitrary code.

The vulnerability of the WebAPI interface of the Magento Commerce software development and management platform relates to the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.1CVSS8.1AI score0.04739EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/02 12:00 a.m.14 views

The vulnerability of the user API module of the software platform for developing and managing online stores Magento Commerce allows a hacker to gain unauthorized access to protected information.

The vulnerability of the user API module of the Magento Commerce software development and management platform is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

8.5CVSS6.6AI score0.03181EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/03/02 12:00 a.m.12 views

The vulnerability of the Widgets module of the Magento Commerce software development and e-commerce management platform allows a hacker to execute arbitrary code.

The vulnerability of the Widgets module in the Magento Commerce software platform for developing and managing online stores is related to errors in processing XML requests. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.1CVSS8.1AI score0.03635EPSS
SaveExploits0References3Affected Software2
Packet Storm
Packet Storm
added 2021/02/10 12:00 a.m.275 views

Adobe Magento Commerce Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Reflected Cross-Site Scripting XSS product: Adobe Magento Commerce vulnerable version: 2.4.2 fixed version: 2.4.2 CVE number: CVE-2021-21029 impact: Medium homepage:...

0.84674EPSS
SaveExploits1
ThreatPost
ThreatPost
added 2021/02/09 7:40 p.m.266 views

Attackers Exploit Critical Adobe Bug, Target Windows

Adobe is warning of a critical vulnerability that has been exploited in the wild to target Adobe Reader users on Windows. The vulnerability CVE-2021-21017 has been exploited in “limited attacks,” according to Adobe’s Tuesday advisory, part of its regularly scheduled February updates. The flaw in...

1.4AI score0.86326EPSS
SaveExploits3References9
Positive Technologies
Positive Technologies
added 2021/02/09 12:00 a.m.7 views

PT-2021-2309 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.1 and earlier Magento versions 2.4.0-p1 and earlier Magento versions 2.3.6 and earlier Description: The issue is related to improper authorization in the integrations module of Magento Commerce, which can be exploited by ...

5.3CVSS5.6AI score0.01812EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2021/02/09 12:00 a.m.13 views

Adobe Magento 注入漏洞

Adobe Magento is Adobe's one with PHP written in open source e-commerce platform.Magento Community Edition is the community edition, later renamed Magento Open Source, Magento Enterprise Edition is the enterprise edition, later renamed Magento Magento Enterprise Edition is the enterprise edition,...

9.1CVSS7.5AI score0.03635EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/02/09 12:00 a.m.12 views

Magento Commerce 和 Magento Open Source editions 代码问题漏洞

Adobe Magento is Adobe's one with PHP written in open source e-commerce platform.Magento Community Edition is the community edition, later renamed Magento Open Source, Magento Enterprise Edition is the enterprise edition, later renamed Magento Magento Enterprise Edition is the enterprise edition,...

7.5CVSS6.1AI score0.01673EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/02/09 12:00 a.m.11 views

Magento Commerce 和 Magento Open Source editions 安全漏洞

Adobe Magento is Adobe's one with PHP written in open source e-commerce platform.Magento Community Edition is the community edition, later renamed Magento Open Source, Magento Enterprise Edition is the enterprise edition, later renamed Magento Magento Enterprise Edition is the enterprise edition,...

9.1CVSS7.5AI score0.03269EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2021/02/02 12:00 a.m.10 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores, related to cross-site scripting, allows attackers to access confidential information.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to cross-site scripting. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...

6.1CVSS5.7AI score0.01429EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/01/20 12:00 a.m.12 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from improper code generation. This allows attackers to introduce arbitrary code.

The vulnerability of the Magento Commerce development and management software platform is related to improper code generation. Exploiting this vulnerability allows a malicious actor to inject arbitrary code into the generated PHP files and execute it using specially crafted requests...

10CVSS8.1AI score0.08385EPSS
SaveExploits0References3Affected Software2
Rows per page
Query Builder