Lucene search
+L

333 matches found

BDU FSTEC
BDU FSTEC
added 2020/12/18 12:00 a.m.10 views

The vulnerability of the software platform for developing and managing online stores Magento Commerce is related to the exposure of information through inconsistencies, allowing attackers to gain access to protected information.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to the exposure of information through inconsistencies. Exploiting this vulnerability can allow a malicious actor to gain access to protected information...

6.8CVSS6.3AI score0.01632EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/12/18 12:00 a.m.14 views

The vulnerability of the Magento Commerce software development and management platform lies in the incorrect limitation of the path to the restricted catalog. This allows attackers to execute arbitrary code.

The vulnerability of the Magento Commerce development and management software platform is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

9CVSS7AI score0.04138EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/12/15 12:00 a.m.9 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of the Magento Commerce development and management software platform relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

10CVSS8.2AI score0.06018EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/12/15 12:00 a.m.11 views

The vulnerability of the software platform for developing and managing online stores Magento Commerce, related to deficiencies in authentication mechanisms, allows a perpetrator to execute arbitrary code.

The vulnerability of the Magento Commerce development and management software platform is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

9CVSS7AI score0.03807EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:00 a.m.9 views

The vulnerability of the software platform for developing and managing online stores Magento Commerce arises from insufficient validation of input data. This allows attackers to access confidential information.

The vulnerability of the Magento Commerce software platform for developing and managing online stores exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential information...

5.3CVSS5.5AI score0.02078EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:00 a.m.12 views

The vulnerability of the software platform for developing and managing online stores Magento Commerce arises from insufficient cleaning of data provided by users. This vulnerability allows a malicious attacker to execute harmful JavaScript code.

The vulnerability of the Magento Commerce software platform for developing and managing online stores exists due to insufficient cleaning of data provided by users. Exploiting this vulnerability allows a malicious actor to execute malicious JavaScript code using specially crafted HTTP requests...

7.2CVSS6.5AI score0.01741EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:00 a.m.17 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of restrictions on file uploads, which allows attackers to execute arbitrary code.

The vulnerability of the Magento Commerce software platform for developing and managing online stores is related to the lack of restrictions on file uploads. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.1AI score0.05272EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:00 a.m.7 views

The vulnerability of the Inventory component of the Magento Commerce software platform for developing and managing online stores, related to authentication errors, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Inventory component of the Magento Commerce software platform for developing and managing online stores is related to authentication errors, which allow attackers to compromise the confidentiality and integrity of protected information using the HTTP network protocol...

9.4CVSS5.4AI score0.0163EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:00 a.m.8 views

The vulnerability of the integration component of the Magento Commerce software development and management platform, related to authentication errors, allows a malicious user to delete CMS pages via the REST API without authentication.

The vulnerability of the integration component of the Magento Commerce software for developing and managing online stores is related to authentication errors. Exploiting this vulnerability allows a malicious actor to delete CMS pages through the REST API without authentication...

7.8CVSS5.4AI score0.01579EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:00 a.m.12 views

The vulnerability of the integration component of the Magento Commerce software development and management platform, related to authentication errors, allows attackers to gain unauthorized access to protected information and delete customer data through the REST API without authorization.

The vulnerability of the integration component of the Magento Commerce software for online store development and management is related to authentication errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information and delete customer data throug...

6.5CVSS5.6AI score0.01703EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:00 a.m.9 views

The vulnerability of the Inventory component of the Magento Commerce software platform for developing and managing online stores, related to authentication errors, allows attackers to compromise the integrity of the protected information.

The vulnerability of the Inventory component in the Magento Commerce software platform for developing and managing online stores is related to authentication errors. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

7.8CVSS5.5AI score0.01519EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/12 12:00 a.m.10 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of measures to protect SQL query structures. This allows attackers to execute arbitrary SQL queries against the database in the target system and gain access to protected information.

The vulnerability of the Magento Commerce development and management software platform lies in the lack of measures to protect SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database in the target system by sending a...

8.5CVSS7.5AI score0.02301EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/11/12 12:00 a.m.12 views

The vulnerability of the Magento Commerce software platform for developing and managing online stores, related to improper authorization, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Magento Commerce development and management software platform is related to improper authorization. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

8.5CVSS6.5AI score0.0232EPSS
SaveExploits0References4Affected Software2
CNVD
CNVD
added 2020/10/20 12:00 a.m.3 views

Adobe Magento Sensitive Information Disclosure Vulnerability

Adobe Magento is the United States of America Odo than Adobe company's set of open source PHP e-commerce system. The system provides rights management , search engine and payment gateway and other functions.Magento Open Source is the open source version of Magento.Magento Commerce is the commerci...

4.3CVSS6.8AI score0.02078EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/10/19 12:00 a.m.5 views

Adobe Magento SQL Injection Vulnerability

Adobe Magento is the U.S. Odobie Adobe company's set of open source PHP e-commerce system. The system provides rights management , search engine and payment gateway and other functions.Magento Open Source is the open source version of Magento.Magento Commerce is the commercial version of Magento...

7.1CVSS8.2AI score0.02301EPSS
SaveExploits0References1
CISA
CISA
added 2020/10/16 12:00 a.m.13 views

Adobe Releases Security Updates for Magento

Adobe has released security updates to address vulnerabilities affecting Magento Commerce and Magento Open Source. An attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and...

7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2020/10/15 12:00 a.m.6 views

PT-2020-4581 · Adobe · Magento Commerce

Name of the Vulnerable Software and Affected Versions: Magento Commerce versions 2.3.4 and earlier Magento Commerce version 2.4.0 Description: The issue exists due to insufficient input validation, potentially allowing a remote attacker to access confidential information. In maintenance mode, an...

5CVSS4.3AI score0.02078EPSS
SaveExploits0References10
CISA
CISA
added 2020/07/29 12:00 a.m.13 views

Adobe Releases Security Updates for Magento

Adobe has released security updates to address vulnerabilities in Magento Commerce 2 formerly known as Magento Enterprise Edition and Magento Open Source 2 formerly known as Magento Community Edition. An attacker could exploit some of these vulnerabilities to take control of an affected system. T...

7AI score
SaveExploits0References1
CNVD
CNVD
added 2020/07/29 12:00 a.m.9 views

Adobe Magento Commerce and Magento Open Source Cross-Site Scripting Vulnerability

Adobe Magento is the U.S. Odobie Adobe company's set of open source PHP e-commerce system. The system provides rights management , search engine and payment gateway and other functions.Magento Open Source is the open source version of Magento.Magento Commerce is the commercial version of Magento....

9.6CVSS6.6AI score0.06018EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/07/29 12:00 a.m.12 views

Adobe Magento Commerce and Magento Open Source Path Traversal Vulnerability

Adobe Magento is the United States of America Odo than Adobe company's set of open source PHP e-commerce system. The system provides rights management , search engine and payment gateway and other functions.Magento Open Source is the open source version of Magento.Magento Commerce is the commerci...

8.5CVSS7.4AI score0.04138EPSS
SaveExploits0References1
Rows per page
Query Builder