Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

magento magento 2.3.6 vulnerabilities and exploits

(subscribe to this query)
4
CVSSv2
CVE-2021-28567
Magento versions 2.4.2 (and previous versions), 2.4.1-p1 (and previous versions) and 2.3.6-p1 (and previous versions) are vulnerable to an Improper Authorization vulnerability in the customers module. Successful exploitation could allow a low-privileged user to modify customer da...
Magento Magento
6.4
CVSSv2
CVE-2021-28563
Magento versions 2.4.2 (and previous versions), 2.4.1-p1 (and previous versions) and 2.3.6-p1 (and previous versions) are affected by an Improper Authorization vulnerability via the 'Create Customer' endpoint. Successful exploitation could lead to unauthorized modificat...
Magento Magento
4
CVSSv2
CVE-2021-28566
Magento versions 2.4.2 (and previous versions), 2.4.1-p1 (and previous versions) and 2.3.6-p1 (and previous versions) are vulnerable to an Information Disclosure vulnerability when uploading a modified png file to a product image. Successful exploitation could lead to the disclos...
Magento Magento
4.3
CVSSv2
CVE-2021-21012
Magento versions 2.4.1 (and previous versions), 2.4.0-p1 (and previous versions) and 2.3.6 (and previous versions) are vulnerable to an insecure direct object vulnerability (IDOR) in the checkout module. Successful exploitation could lead to sensitive information disclosure.
Adobe Magento Open Source 2.4.1Adobe Magento Open Source 2.4.0Adobe Magento Commerce 2.4.1Adobe Magento Commerce 2.4.0Adobe Magento CommerceAdobe Magento Open Source
5.5
CVSSv2
CVE-2021-21013
Magento versions 2.4.1 (and previous versions), 2.4.0-p1 (and previous versions) and 2.3.6 (and previous versions) are vulnerable to an insecure direct object vulnerability (IDOR) in the customer API module. Successful exploitation could lead to sensitive information disclosure a...
Adobe Magento
6.8
CVSSv2
CVE-2015-5161
The Zend_Xml_Security::scan in ZendXml prior to 1.0.1 and Zend Framework prior to 1.12.14, 2.x prior to 2.4.6, and 2.5.x prior to 2.5.2, when running under PHP-FPM in a threaded environment, allows remote malicious users to bypass security checks and conduct XML external entity (...
Zend Zend Framework 1.0.0Zend Zend Framework 1.5.0Zend Zend Framework 1.5.1Zend Zend Framework 1.6.1Zend Zend Framework 1.6.2Zend Zend Framework 1.7.3Zend Zend Framework 1.7.4Zend Zend Framework 1.8.0Zend Zend Framework 1.8.1Zend Zend Framework 1.9.0Zend Zend Framework 1.9.5Zend Zend Framework 1.9.6Zend Zend Framework 1.10.2Zend Zend Framework 1.10.3Zend Zend Framework 1.11.0Zend Zend Framework 1.11.6Zend Zend Framework 1.11.7Zend Zend Framework 1.11.8Zend Zend Framework 1.12.0Zend Zend Framework 1.12.5Zend Zend Framework 1.12.6Zend Zend Framework 2.0.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-1183hard-codedCVE-2024-28254CVE-2023-43790buffer overflowbypassCVE-2024-32633CVE-2024-1874CVE-2024-23558
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook