High
CVE-2023-22247
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 161
Reset filters
Medium
CVE-2022-35689
Magento Open Source allows Improper Access Control
High
CVE-2022-35698
Magento Open Source allows Stored Cross-Site Scripting (Stored XSS)
Medium
CVE-2022-35692
Magento Open Source has Improper Access Control vulnerability
Medium
CVE-2021-36027
Magento stored cross-site scripting vulnerability
Medium
CVE-2021-36026
Magento stored cross-site scripting vulnerability in the customer address upload feature
Medium
CVE-2021-39864
Magento Open Source allows Cross-Site Request Forgery (CSRF)
Medium
CVE-2021-28567
Magento Improper Authorization vulnerability in the customers module
High
CVE-2021-36020
Magento XML Injection vulnerability in the 'City' field
High
CVE-2021-36022
Magento XML Injection vulnerability in the Widgets Update Layout
Medium
CVE-2021-36012
Magento affected by a business logic error in the placeOrder graphql mutation
High
CVE-2021-36032
Magento is affected by an improper input validation vulnerability
Critical
CVE-2021-36028
Magento has an XML Injection vulnerability
Critical
CVE-2021-36025
Magento is affected by an improper input validation vulnerability while saving a customer's details
High
CVE-2021-36024
Magento is affected by an os command injection via the Data collection endpoint
Critical
CVE-2021-36033
Magento XML Injection vulnerability in the Widgets Module
High
CVE-2021-36030
Magento allows attackers to alter the price of items
High
CVE-2021-36029
Magento improper authorization vulnerability
High
CVE-2021-36031
Magento Path Traversal vulnerability via the `theme[preview_image]` parameter
High
CVE-2021-36043
Magento affected by a blind SSRF vulnerability in the bundled dotmailer extension
Critical
CVE-2021-36042
Magento executes code via the API File Option Upload Extension
High
CVE-2021-36041
Magento vulnerable to file upload attack
Medium
CVE-2021-36039
Magento discloses sensitive information
High
CVE-2021-36034
Magento affected by remote code execution via a file upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.