Lucene search
K

10 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-3713

Malicious code in bioql PyPI...

7.2CVSS6.9AI score0.01105EPSS
Exploits0References4
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-34675 Malicious code in temando-carrier-gateway (npm)

The package temando-carrier-gateway was found to contain malicious code...

7.2AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.0 views

Malicious code in temando-carrier-gateway (npm)

The package temando-carrier-gateway was found to contain malicious code...

7AI score
Exploits0
Github Security Blog
Github Security Blog
added 2022/05/24 5:0 p.m.11 views

Magento Server-Side Request Forgery (SSRF)

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to manipulate shippment settings can execute arbitrary code through server-side request forgery due to unsafe handling of a carrier...

7.2CVSS7.5AI score0.01105EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2019/11/06 12:15 a.m.6 views

CVE-2019-8151

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to manipulate shippment settings can execute arbitrary code through server-side request forgery due to unsafe handling of a carrier...

7.2CVSS8.1AI score
Exploits0References1
Prion
Prion
added 2019/11/06 12:15 a.m.10 views

Remote code execution

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to manipulate shippment settings can execute arbitrary code through server-side request forgery due to unsafe handling of a carrier...

6.5CVSS7.4AI score0.01105EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2019/11/05 11:37 p.m.11 views

CVE-2019-8151

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to manipulate shippment settings can execute arbitrary code through server-side request forgery due to unsafe handling of a carrier...

7.6AI score0.01105EPSS
Exploits0References1
Friends Of PHP
Friends Of PHP
added 2019/10/08 12:0 a.m.12 views

PRODSECBUG-2367: Remote code execution due to unsafe handling of a carrier gateway

More info at https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update...

7.2CVSS7.2AI score0.01105EPSS
Exploits0Affected Software1
Friends Of PHP
Friends Of PHP
added 2019/06/25 12:0 a.m.15 views

PRODSECBUG-2285: Arbitrary code execution due to unsafe handling of a carrier gateway

More info at https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13...

7.2CVSS7.2AI score0.00826EPSS
Exploits0Affected Software1
Friends Of PHP
Friends Of PHP
added 2019/06/25 12:0 a.m.9 views

PRODSECBUG-2339: Arbitrary code execution due to unsafe handling of a carrier gateway

More info at https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13...

7.2CVSS7.2AI score0.00254EPSS
Exploits0Affected Software1
Rows per page
Query Builder