Media
CVE-2025-30150
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 65
Restablecer filtros
Media
CVE-2024-42357
Shopware vulnerable to blind SQL-injection in DAL aggregations
Alta
CVE-2024-42356
Shopware vulnerable to Server Side Template Injection in Twig using Context functions
Alta
CVE-2024-42355
Shopware vulnerable to Server Side Template Injection in Twig using deprecation silence tag
Media
CVE-2024-42354
Shopware vulnerable to Improper Access Control with ManyToMany associations in store-api
Media
CVE-2024-31447
Shopware Improper Session Handling in store-api account logout
Media
CVE-2024-22407
Broken Access Control order API in Shopware
Crítica
CVE-2024-22406
Blind SQL injection in shopware
Alta
CVE-2023-2017
Shopware Has Improper Control of Generation of Code in Twig rendered views
Media
CVE-2023-22734
Shopware has Improper Input Validation issue in newsletter subscription
Baja
CVE-2023-22732
Shopware has Insufficient Session Expiration in Administration
Baja
CVE-2023-22733
Shopware's log module vulnerable to Improper Output Neutralization
Crítica
CVE-2023-22731
Shopware vulnerable to Improper Control of Generation of Code in Twig rendered views
Media
CVE-2023-22730
Shopware vulnerable to Improper Input Validation of Clearance sale in cart
Alta
CVE-2020-13997
Shopware database password is leaked to an unauthenticated users
Alta
CVE-2022-24872
Improper Access Control in Shopware
Alta
CVE-2022-24871
Server-Side Request Forgery (SSRF) in Shopware
Media
CVE-2022-24748
Incorrect Authentication in shopware
Media
CVE-2022-24747
HTTP caching is marking private HTTP headers as public in Shopware
Media
CVE-2022-24746
HTML injection possibility in voucher code form in Shopware
Baja
CVE-2022-24744
Shopware user session is not logged out if the password is reset via password recovery
Crítica
ghsa-r64m-qchj-hrjp
Webcache Poisoning in shopware/platform and shopware/core
Media
CVE-2021-37709
Insecure direct object reference of log files of the Import/Export feature
Alta
CVE-2021-37708
Command injection in mail agent settings
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.