CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 14/08/2024 |
| CVE-2024-39401 | 높음8.4 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an admin attacker. Exploitation of this issue requires user interaction an | 14/08/2024 |
| CVE-2024-39400 | 높음8.1 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an admin attacker to inject and execute arbitrary JavaScript code within the context of the user's browser session. Exploitation of this issue r | 14/08/2024 |
| CVE-2024-39399 | 높음7.7 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. A low-privileged attacker could exploit this vulnerability to gain access to files and | 14/08/2024 |
| CVE-2024-39398 | 높음7.4 | Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to perform brute force attacks and potentially gain unauthori | 14/08/2024 |
| CVE-2024-34111 | 높음8.8 | Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A low-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitat | 13/06/2024 |
| CVE-2024-34107 | 심각9.8 | Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and view minor unauthorised information. Exploitation of this issue d | 13/06/2024 |
| CVE-2024-34106 | 보통5.3 | Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to gain unauthorized access or perform actions with the privileges of another user. Exploitation o | 13/06/2024 |
| CVE-2024-34105 | 보통4.8 | Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an admin attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the | 13/06/2024 |
| CVE-2024-34104 | 높음8.2 | Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access, leading to both confidentiality and inte | 13/06/2024 |
| CVE-2024-34103 | 높음8.1 | Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access or elevated privileges within the application. Exploitation of this issue d | 13/06/2024 |
| CVE-2024-34102KEV | 심각9.8 | Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that references external en | 13/06/2024 |
| GHSA-8j7c-682x-r9f2 | 심각 | Magento RCE,XSS and other vulnerabilities | 15/05/2024 |
| GHSA-mcfc-67vm-j568 | 보통 | Magento Cross-Site Scripting (XSS) vulnerability | 15/05/2024 |
| GHSA-5gmh-85x8-5cx7 | 심각 | Magento remote code execution (RCE), Cross-Site Scripting (XSS) and other vulnerabilities | 15/05/2024 |
| GHSA-cv25-3pxr-4q7x | 심각 | Magento Open Source Security Advisory: Patch SUPEE-10975 | 15/05/2024 |
| GHSA-26hq-7286-mg8f | 심각 | Magento Patch SUPEE-9652 - Remote Code Execution using mail vulnerability | 15/05/2024 |
| GHSA-6wm4-3rjj-c8xx | 심각 | Magento Security enhancements that help close RCE,XSS,CSRF and other vulnerabilities | 15/05/2024 |