Medium
CVE-2022-34259
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 360
Reset filters
Medium
CVE-2022-34257
Magento stored Cross-Site Scripting (XSS) vulnerability
High
CVE-2022-34255
Magento Improper Access Control vulnerability
High
CVE-2022-34256
Magento Improper Authorization vulnerability
Medium
CVE-2022-34258
Magento stored Cross-Site Scripting (XSS) vulnerability
Critical
CVE-2022-34253
Magento XML Injection vulnerability in the Widgets Module
Medium
CVE-2021-36027
Magento stored cross-site scripting vulnerability
Medium
CVE-2021-36026
Magento stored cross-site scripting vulnerability in the customer address upload feature
Critical
CVE-2019-8149
Magento Broken authentication and session managememt
High
CVE-2019-8154
Magento remote code execution vulnerability
Critical
CVE-2019-7139
Magento 2 Community Edition SQLi Vulnerability
Medium
CVE-2021-39864
Magento Open Source allows Cross-Site Request Forgery (CSRF)
Low
CVE-2021-28566
Magento Information Disclosure vulnerability
Medium
CVE-2021-28567
Magento Improper Authorization vulnerability in the customers module
High
CVE-2021-36020
Magento XML Injection vulnerability in the 'City' field
High
CVE-2021-36022
Magento XML Injection vulnerability in the Widgets Update Layout
Medium
CVE-2021-36012
Magento affected by a business logic error in the placeOrder graphql mutation
High
CVE-2021-36032
Magento is affected by an improper input validation vulnerability
Critical
CVE-2021-36028
Magento has an XML Injection vulnerability
Critical
CVE-2021-36025
Magento is affected by an improper input validation vulnerability while saving a customer's details
High
CVE-2021-36024
Magento is affected by an os command injection via the Data collection endpoint
Critical
CVE-2021-36033
Magento XML Injection vulnerability in the Widgets Module
High
CVE-2021-36030
Magento allows attackers to alter the price of items
High
CVE-2021-36029
Magento improper authorization vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.