Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
magento vulnerabilities and exploits
(subscribe to this query)
5.4
CVSSv3
CVE-2019-8157
A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 before 2.2.10, Magento 2.3 before 2.3.3 or 2.3.2-p1. An authenticated user can manipulate downloadable link and cause an invocation of error handling that acceses user input without sanitization.
Magento Magento 2.3.2
Magento Magento
6.1
CVSSv3
CVE-2019-8233
In Magento 2.2 before 2.2.10, Magento 2.3 before 2.3.3 or 2.3.2-p1, an unauthenticated user can inject arbitrary JavaScript code as a result of the sanitization engine ignoring HTML comments.
Magento Magento
Magento Magento 2.3.2
4.2
CVSSv3
CVE-2020-9690
Magento versions 2.3.5-p1 and previous versions, and 2.3.5-p1 and previous versions have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass.
Magento Magento
Magento Magento 2.3.5
3.7
CVSSv3
CVE-2020-24406
When in maintenance mode, Magento version 2.4.0 and 2.3.4 (and previous versions) are affected by an information disclosure vulnerability that could expose the installation path during build deployments. This information could be helpful to attackers if they are able to identify ...
Magento Magento
Magento Magento 2.4.0
7.2
CVSSv3
CVE-2022-34253
Adobe Commerce versions 2.4.3-p2 (and previous versions), 2.3.7-p3 (and previous versions) and 2.4.4 (and previous versions) are affected by an XML Injection vulnerability in the Widgets Module. An attacker with admin privileges can trigger a specially crafted script to achieve r...
Adobe Commerce 2.3.7
Adobe Commerce 2.4.3
Magento Magento 2.4.3
Magento Magento 2.3.7
Magento Magento 2.4.4
Magento Magento
Adobe Commerce 2.4.4
Adobe Commerce
8.8
CVSSv3
CVE-2022-34254
Adobe Commerce versions 2.4.3-p2 (and previous versions), 2.3.7-p3 (and previous versions) and 2.4.4 (and previous versions) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could be abused by an malici...
Adobe Commerce 2.3.7
Adobe Commerce 2.4.3
Magento Magento 2.4.3
Magento Magento 2.3.7
Magento Magento 2.4.4
Magento Magento
Adobe Commerce 2.4.4
Adobe Commerce
NA
CVE-2022-34255
Adobe Commerce versions 2.4.3-p2 (and previous versions), 2.3.7-p3 (and previous versions) and 2.4.4 (and previous versions) are affected by an Improper Access Control vulnerability that could result in Privilege escalation. An attacker with a low privilege account could leverage...
Adobe Commerce 2.3.7
Adobe Commerce 2.4.3
Magento Magento 2.4.3
Magento Magento 2.3.7
Magento Magento 2.4.4
Magento Magento
Adobe Commerce 2.4.4
Adobe Commerce
4.8
CVSSv3
CVE-2022-34258
Adobe Commerce versions 2.4.3-p2 (and previous versions), 2.3.7-p3 (and previous versions) and 2.4.4 (and previous versions) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker with admin privileges to inject malicious scripts int...
Adobe Commerce 2.3.7
Adobe Commerce 2.4.3
Magento Magento 2.4.3
Magento Magento 2.3.7
Magento Magento 2.4.4
Adobe Commerce
Adobe Commerce 2.4.4
Magento Magento
8.8
CVSSv3
CVE-2022-42344
Adobe Commerce versions 2.4.3-p2 (and previous versions), 2.3.7-p3 (and previous versions) and 2.4.4 (and previous versions) are affected by an Incorrect Authorization vulnerability. An authenticated attacker can exploit this vulnerability to achieve information exposure and priv...
Magento Magento
Adobe Commerce 2.3.7
Adobe Commerce 2.4.3
Adobe Commerce 2.4.4
Adobe Commerce
Magento Magento 2.4.4
Magento Magento 2.4.3
Magento Magento 2.3.7
6.1
CVSSv3
CVE-2022-34257
Adobe Commerce versions 2.4.3-p2 (and previous versions), 2.3.7-p3 (and previous versions) and 2.4.4 (and previous versions) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an malicious user to inject malicious scripts into vulnerable for...
Adobe Commerce 2.3.7
Adobe Commerce 2.4.3
Magento Magento 2.4.3
Magento Magento 2.3.7
Magento Magento 2.4.4
Adobe Commerce
Adobe Commerce 2.4.4
Magento Magento
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
validation
CVE-2024-34413
CVE-2024-34089
CVE-2024-33408
local
SQL
CVE-2024-0402
CVE-2024-33910
CVE-2024-31848
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
4
5
6
7
8
9
10
NEXT »