Lucene search
+L

340 matches found

OSV
OSV
added 2023/03/27 9:30 p.m.22 views

GHSA-2WM7-MMGC-QXR3 Magento Open Source allows Incorrect Authorization

Adobe Commerce versions 2.4.4-p2 and earlier and 2.4.5-p1 and earlier are affected by an Incorrect Authorization vulnerability. A low-privileged authenticated attacker could leverage this vulnerability to achieve minor information disclosure...

5.3CVSS4AI score0.00563EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2023/03/27 9:30 p.m.11 views

Magento Open Source allows Improper Access Control

Adobe Commerce versions 2.4.4-p2 and earlier and 2.4.5-p1 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user's minor feature. Exploitation of this...

5.3CVSS6.7AI score0.00957EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/03/15 12:0 a.m.7 views

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of protective measures for website structures. This allows attackers to execute arbitrary code.

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS6.3AI score0.09722EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/03/11 12:0 a.m.6 views

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in insufficient validation of input data, which allows attackers to exploit their privileges.

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

9CVSS7.5AI score0.01091EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/03/11 12:0 a.m.8 views

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of access control mechanisms. This allows attackers to bypass security restrictions.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions remotely...

5.3CVSS5.9AI score0.01171EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
added 2022/11/17 12:0 a.m.8 views

Magento Open Source 跨站脚本漏洞

Magento Open Source is designed to provide basic e-commerce functionality, allowing you to build unique online stores from scratch. A security vulnerability exists in the Amasty Blog Pro plugin for Magento Open Source that stems from the unsafe use of eval...

5.4CVSS5.8AI score0.00534EPSS
SaveExploits1References2
OSV
OSV
added 2022/10/15 12:1 p.m.9 views

GHSA-5FXX-JWJM-X9HJ Magento Open Source allows Improper Access Control

Adobe Commerce versions 2.4.3-p3 and earlier, 2.4.4-p1 and earlier and 2.4.5 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user's minor feature...

6.9CVSS5AI score0.01171EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/10/15 12:1 p.m.15 views

Magento Open Source allows Stored Cross-Site Scripting (Stored XSS)

Adobe Commerce versions 2.4.3-p3 and earlier, 2.4.4-p1 and earlier and 2.4.5 and earlier are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution...

10CVSS7AI score0.09722EPSS
SaveExploits0References3Affected Software2
Circl
Circl
added 2022/10/12 6:0 a.m.8 views

CVE-2022-35698

creationtimestamp| type| source ---|---|--- 2022-10-12 06:00:10+00:00| seen| https://www.cert.at/de/warnungen/2022/10/kritische-sicherheitslucke-in-magento-open-source-und-adobe-commerce-updates-verfugbar 2022-10-12 09:34:02+00:00| seen|...

10CVSS6AI score0.09722EPSS
SaveExploits0References3
NCSC
NCSC
added 2022/10/12 12:0 a.m.55 views

Vulnerabilities fixed in Adobe products

Vulnerabilities have been fixed in Adobe products. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Circumvention of security measure. Remote code execution...

10CVSS7.5AI score0.80023EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/10/03 12:0 a.m.7 views

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in errors in XML request processing, allowing attackers to execute arbitrary code.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to errors in processing XML requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially created XML data...

9.1CVSS7.9AI score0.0427EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/10/03 12:0 a.m.9 views

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce products lies in the incorrect limitation of the path to the restricted catalog. This allows attackers to execute arbitrary code.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to incorrect path name restrictions for access to restricted catalogs. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in t...

9.1CVSS8AI score0.02015EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/08/24 12:0 a.m.12 views

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

5.5CVSS5.3AI score0.68332EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/08/24 12:0 a.m.8 views

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of protective measures for website structures, allowing attackers to carry out cross-site scripting attacks.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

6.4CVSS6AI score0.00882EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/08/24 12:0 a.m.7 views

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of authentication procedures, which allow attackers to increase their privileges.

The vulnerability of the software platforms for developing and managing online stores Magento Open Source and Adobe Commerce is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

8.5CVSS7.7AI score0.01915EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/08/24 12:0 a.m.9 views

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in their lack of access control mechanisms. This allows attackers to trigger service interruptions.

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

5.3CVSS5.9AI score0.01471EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/08/24 12:0 a.m.9 views

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in insufficient validation of input data, which allows attackers to exploit this weakness to increase their privileges.

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce stores is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by sending specially crafted requests...

8.5CVSS7.6AI score0.01774EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2022/08/20 12:0 a.m.11 views

GHSA-GM4M-9RM8-7RXJ Magento Open Source has Improper Access Control vulnerability

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to leak minor information of another user's account...

5.3CVSS6.1AI score0.00696EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2022/08/20 12:0 a.m.17 views

Magento Open Source has Improper Access Control vulnerability

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to leak minor information of another user's account...

5.3CVSS6.1AI score0.00696EPSS
SaveExploits0References3Affected Software2
CNNVD
CNNVD
added 2022/08/09 12:0 a.m.5 views

Adobe Magento Open Source 安全漏洞

Magento Open Source is provides basic e-commerce functionality, allowing you to build unique online stores from scratch. A security vulnerability exists in Adobe Magento Open Source, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor...

9.1CVSS7.9AI score0.0427EPSS
SaveExploits0References4
Rows per page
Query Builder