Lucene search
+L

2273 matches found

BDU FSTEC
BDU FSTEC
added 2025/05/12 12:0 a.m.9 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B, related to lack of access control, allows attackers to bypass existing security restrictions and gain unauthorized access to protected information.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to lack of access control mechanisms. Exploiting these vulnerabilities can allow unauthorized actors to bypass existing security...

5.5CVSS5.5AI score0.00433EPSS
SaveExploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/05/12 12:0 a.m.8 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B relates to access control errors. These errors allow attackers to bypass existing security restrictions and gain unauthorized access to protected information.

The vulnerabilities of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to access control errors. Exploiting these vulnerabilities can allow attackers to bypass existing security restrictions and gain...

4.3CVSS5.5AI score0.00512EPSS
SaveExploits0References3Affected Software3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/05 5:30 p.m.2 views

Malicious code in adobe-commerce-magento (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd6d37a2366d35f3960bd44382c3af4b61fa4ef998f6983dc7cd8bbe7dab3f78 Any computer that has this package installed or running should be considered...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2025/05/05 5:30 p.m.15 views

MAL-2025-3606 Malicious code in adobe-commerce-magento (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd6d37a2366d35f3960bd44382c3af4b61fa4ef998f6983dc7cd8bbe7dab3f78 Any computer that has this package installed or running should be considered...

7AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.9 views

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their susceptibility to cross-site requests forgery attacks. This allows attackers to cause service failures.

The vulnerabilities of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to the exploitation of cross-site requests. Exploiting these vulnerabilities can allow attackers to trigger service interruptions throug...

5CVSS5.4AI score0.00968EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.11 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of access control mechanisms. This allows attackers to circumvent existing security restrictions.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to bypass existing security restrictions...

5.3CVSS5.5AI score0.00468EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.9 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of access control mechanisms. This allows attackers to circumvent existing security restrictions.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to bypass existing security restrictions...

5.3CVSS5.5AI score0.00468EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/04/23 12:0 a.m.12 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to escalate their privileges.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

4.3CVSS5.5AI score0.00549EPSS
SaveExploits0References2Affected Software3
CNVD
CNVD
added 2025/04/18 12:0 a.m.9 views

Adobe Commerce Cross-Site Request Forgery Vulnerability (CNVD-2025-08777)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A cross-site request forgery vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause a denial of service due to the web...

4.3CVSS6.6AI score0.00968EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/18 12:0 a.m.30 views

Adobe Commerce License Issues Vulnerability (CNVD-2025-08776)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce has an authorization issue vulnerability that stems from improper authorization, and no detailed vulnerability details are available at...

4.3CVSS6.6AI score0.00549EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/18 12:0 a.m.3 views

Adobe Commerce Unauthorized Access Vulnerability

Adobe Commerce is a leading global digital commerce solution for merchants and brands. An unauthorized access vulnerability exists in Adobe Commerce. The vulnerability stems from inadequate protection of access to sensitive credential information, which allows an attacker with elevated privileges...

2.7CVSS6.6AI score0.00461EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/18 12:0 a.m.8 views

Adobe Commerce Access Control Error Vulnerability (CNVD-2025-08783)

Adobe Commerce is a leading global digital commerce solution for merchants and brands. Adobe Commerce suffers from an Access Control Error vulnerability that stems from improper access control, and no detailed vulnerability details are available at this time...

5.3CVSS6.7AI score0.00468EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/04/18 12:0 a.m.10 views

Adobe Commerce Access Control Error Vulnerability (CNVD-2025-08775)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. Adobe Commerce suffers from an Access Control Error vulnerability that stems from improper access control, no details of the vulnerability are available...

5.3CVSS6.7AI score0.00468EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/11 3:36 a.m.29 views

CVE-2025-27192

Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to...

2.7CVSS6.7AI score0.00461EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/11 12:5 a.m.8 views

CVE-2025-27188

Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access...

4.3CVSS7AI score0.00549EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/11 12:3 a.m.11 views

CVE-2025-27191

Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access...

5.3CVSS6.9AI score0.00468EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/11 12:0 a.m.8 views

CVE-2025-27190

Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access...

5.3CVSS6.9AI score0.00468EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/10 11:59 p.m.18 views

CVE-2025-27189

Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by a Cross-Site Request Forgery CSRF vulnerability that could be exploited to cause a denial-of-service condition. An attacker could trick a logged-in user into submitting a forged request to th...

4.3CVSS6.9AI score0.00968EPSS
SaveExploits0References3
NVD
NVD
added 2025/04/08 9:15 p.m.11 views

CVE-2025-27192

Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to...

2.7CVSS0.00461EPSS
SaveExploits0References1
OSV
OSV
added 2025/04/08 9:15 p.m.7 views

CVE-2025-27189

Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by a Cross-Site Request Forgery CSRF vulnerability that could be exploited to cause a denial-of-service condition. An attacker could trick a logged-in user into submitting a forged request to th...

4.3CVSS5.8AI score0.00968EPSS
SaveExploits0References1
Rows per page
Query Builder