CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

194 matches found

OSV•added 2018/08/20 10:29 p.m.•10 views

CVE-2018-12579

An issue was discovered in OXID eShop Enterprise Edition before 5.3.8, 6.0.x before 6.0.3, and 6.1.x before 6.1.0; Professional Edition before 4.10.8, 5.x and 6.0.x before 6.0.3, and 6.1.x before 6.1.0; and Community Edition before 4.10.8, 5.x and 6.0.x before 6.0.3, and 6.1.x before 6.1.0. An...

8.1CVSS5.8AI score0.01201EPSS

SaveExploits0References2

CVE•added 2018/08/20 10:00 p.m.•56 views

CVE-2018-14020

The CVE-2018-14020 entry concerns the Paymorrow module for OXID eShop. Affected: Paymorrow module versions 1.0.0 up to before 1.0.2 and 2.0.0 up to before 2.0.1. Issue: an attacker can bypass delivery-address change detection if the module does not properly use eShop’s checkout procedure, by chan...

5.3CVSS5.2AI score0.01082EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2018/08/20 10:00 p.m.•33 views

CVE-2018-14020

An issue was discovered in the Paymorrow module 1.0.0 before 1.0.2 and 2.0.0 before 2.0.1 for OXID eShop. An attacker can bypass delivery-address change detection if the payment module doesn't use eShop's checkout procedure properly. To do so, the attacker must change the delivery address to one...

5.2AI score0.01082EPSS

SaveExploits0References2

Cvelist•added 2018/08/20 10:00 p.m.•34 views

CVE-2018-12579

8.3AI score0.01201EPSS

SaveExploits0References2

CVE•added 2018/08/20 10:00 p.m.•56 views

CVE-2018-12579

CVE-2018-12579 affects OXID eShop, spanning Enterprise Edition before 5.3.8, 6.0.x before 6.0.3, and 6.1.x before 6.1.0; Professional Edition before 4.10.8, 5.x and 6.0.x before 6.0.3, and 6.1.x before 6.1.0; and Community Edition before 4.10.8, 5.x and 6.0.x before 6.0.3, and 6.1.x before 6.1.0....

8.1CVSS8.2AI score0.01201EPSS

SaveExploits0References2Affected Software1

Rapid7 Vulnerability Database (full)•added 2018/08/20 12:00 a.m.•4 views

CVE-2018-12579: Weak Password Recovery Mechanism for Forgotten Password

8.1CVSS7.5AI score0.01201EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2018/08/20 12:00 a.m.•8 views

CVE-2018-14020: Undefined Security Weakness

5.3CVSS5.9AI score0.01082EPSS

SaveExploits0References1

CNVD•added 2018/03/12 12:00 a.m.•14 views

OXID eSales OXID eShop Denial of Service Vulnerability

OXID eSales OXID eShop is a set of e-commerce content management system of Germany OXID eSales company. The system includes B2C, B2B and other modules. A security vulnerability exists in OXID eSales OXID eShop. A remote attacker can exploit this vulnerability to cause a denial of service...

7.5CVSS6.8AI score0.01203EPSS

SaveExploits0References1

OSV•added 2018/02/20 11:29 p.m.•11 views

CVE-2017-12415

OXID eShop Community Edition before 6.0.0 RC2 development, 4.10.x before 4.10.5 maintenance, and 4.9.x before 4.9.10 legacy, Enterprise Edition before 6.0.0 RC2 development, 5.2.x before 5.2.10 legacy, and 5.3.x before 5.3.5 maintenance, and Professional Edition before 6.0.0 RC2 development, 4.9....

7.5CVSS5.6AI score0.0067EPSS

SaveExploits1References2

NVD•added 2018/02/20 11:29 p.m.•23 views

CVE-2017-12415

7.5CVSS7.6AI score0.0067EPSS

SaveExploits1References2

NVD•added 2018/02/20 11:29 p.m.•22 views

CVE-2017-14993

OXID eShop Community Edition before 6.0.0 RC3 development, 4.10.x before 4.10.6 maintenance, and 4.9.x before 4.9.11 legacy, Enterprise Edition before 6.0.0 RC3 development, 5.2.x before 5.2.11 legacy, and 5.3.x before 5.3.6 maintenance, and Professional Edition before 6.0.0 RC3 development, 4.9....

7.5CVSS7.7AI score0.01203EPSS

SaveExploits0References2

Prion•added 2018/02/20 11:29 p.m.•23 views

Cross site request forgery (csrf)

5.1CVSS7.6AI score0.0067EPSS

SaveExploits1References2Affected Software1

Prion•added 2018/02/20 11:29 p.m.•19 views

Buffer overflow

5CVSS7.7AI score0.01203EPSS

SaveExploits0References2Affected Software1

CVE•added 2018/02/20 11:00 p.m.•64 views

CVE-2017-14993

OXID eShop (Community Edition) affected: versions prior to 6.0.0 RC3 (development), 4.10.x prior to 4.10.6 (maintenance), 4.9.x prior to 4.9.11 (legacy); Enterprise Edition prior to 6.0.0 RC3 (development), 5.2.x prior to 5.2.11 (legacy), 5.3.x prior to 5.3.6 (maintenance); Professional Edition p...

7.5CVSS7.6AI score0.01203EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2018/02/20 11:00 p.m.•31 views

CVE-2017-12415

7.7AI score0.0067EPSS

SaveExploits1References2

CVE•added 2018/02/20 11:00 p.m.•65 views

CVE-2017-12415

CVE-2017-12415 affects OXID eShop variants (Community, Enterprise, Professional) across multiple branches: 6.0.0 RC2 and earlier in development, 4.10.x prior to 4.10.5, 4.9.x prior to 4.9.10, 5.2.x prior to 5.2.10, and 5.3.x prior to 5.3.5, potentially enabling remote attackers to hijack a client...

7.5CVSS7.6AI score0.0067EPSS

SaveExploits1References2Affected Software1

Cvelist•added 2018/02/20 11:00 p.m.•27 views

CVE-2017-14993

7.7AI score0.01203EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2018/02/20 12:00 a.m.•3 views

CVE-2017-12415: Cross-Site Request Forgery (CSRF)

7.5CVSS7.1AI score0.0067EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2018/02/20 12:00 a.m.•3 views

CVE-2017-14993: Direct Request

7.5CVSS7.3AI score0.01203EPSS

SaveExploits0References2

OSV•added 2018/02/19 9:29 p.m.•12 views

CVE-2018-5763

An issue was discovered in OXID eShop Enterprise Edition before 5.3.7 and 6.x before 6.0.1. By entering specially crafted URLs, an attacker is able to bring the shop server to a standstill and hence, it stops working. This is only valid if OXID High Performance Option is activated and Varnish is...

5.9CVSS5.8AI score0.01065EPSS

SaveExploits0References1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by