Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2026/01/07 9:37 a.m.5 views

CVE-2019-7862

A reflected cross-site scripting vulnerability exists in the Product widget chooser functionality in the admin panel for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2...

4.8CVSS6.1AI score0.0008EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-0345

Malicious code in bioql PyPI...

7.2CVSS6.9AI score0.01224EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-3360

Malicious code in bioql PyPI...

4.8CVSS5.5AI score0.00069EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-2159

Malicious code in bioql PyPI...

4.8CVSS5.5AI score0.00092EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-3286

Malicious code in bioql PyPI...

4.8CVSS5.4AI score0.00092EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-4716

Malicious code in bioql PyPI...

4.8CVSS5.4AI score0.00092EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2022-5108

Malicious code in bioql PyPI...

4.8CVSS5.4AI score0.00092EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/05/22 8:51 a.m.6 views

CVE-2019-7926

A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to modify node attributes to inject malicious javascript...

4.8CVSS5.6AI score0.00092EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:17 a.m.7 views

CVE-2019-7867

A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with access to manage orders and order status...

4.8CVSS5.7AI score0.00092EPSS
Exploits0References1
NVD
NVD
added 2023/01/27 7:15 p.m.18 views

CVE-2021-41143

OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, Magento admin users with access to the customer media could execute code on the server. Versions 19.4.22 and 20.0.19 contain a patch for this issue...

7.2CVSS7AI score0.01224EPSS
Exploits0References4
OSV
OSV
added 2023/01/27 7:15 p.m.10 views

CVE-2021-41143

OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, Magento admin users with access to the customer media could execute code on the server. Versions 19.4.22 and 20.0.19 contain a patch for this issue...

7.2CVSS7.1AI score
Exploits0References4
Cvelist
Cvelist
added 2023/01/27 6:2 p.m.12 views

CVE-2021-41143 OpenMage LTS arbitrary file deletion in customer media allows for remote code execution

OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, Magento admin users with access to the customer media could execute code on the server. Versions 19.4.22 and 20.0.19 contain a patch for this issue...

7.2CVSS7.2AI score0.01224EPSS
Exploits0References4
Friends Of PHP
Friends Of PHP
added 2019/06/25 12:0 a.m.18 views

PRODSECBUG-2127: Disclosure of Magento admin panel URL

More info at https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-33...

5.3CVSS7.2AI score0.00059EPSS
Exploits0Affected Software1
Rows per page
Query Builder