Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 360
Reset filtersMagento Improper Authorization leads to Security feature bypass
Magento Open Source Improper Authorization vulnerability
Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability
Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability
Magento Open Source Cross-Site Request Forgery vulnerability
Magento Open Source Path Traversal vulnerability
Magento Improper Authorization vulnerability
Magento Stored Cross-Site Scripting (XSS) vulnerability
Magento DOM-based Cross-Site Scripting (XSS) vulnerability
Magento Path Traversal vulnerability
Magento does not properly restrict excessive authentication attempts
Magento OS Command ('OS Command Injection') vulnerability
Magento OS Command ('OS Command Injection') vulnerability
Magento Improper Authorization vulnerability
Magento Open Source Server-Side Request Forgery (SSRF) vulnerability
Magento Open Source Improper Authentication vulnerability
Magento Open Source Incorrect Authorization vulnerability
Magento Open Source Improper Authorization vulnerability
Magento Open Source Cross-Site Scripting (XSS) vulnerability
Magento Open Source Improper Access Control vulnerability
Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability
Magento RCE,XSS and other vulnerabilities
Magento Cross-Site Scripting (XSS) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.