Vulnerability index

Browse CVEs

153 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Magento HIGH 8.8
CVE-2019-8159

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with syste…

Fix: 2.2.10 / 2.3.2+
Fix from $1,950 2019-11-06
Magento HIGH 7.2
CVE-2019-8151

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin…

Fix: 2.2.10 / 2.3.2+
Fix from $1,950 2019-11-06
Magento MEDIUM 6.1
CVE-2019-8153

A mitigation bypass to prevent cross-site scripting (XSS) exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. Successful e…

Fix: 2.2.10 / 2.3.2+
Fix from $1,600 2019-11-06
Magento MEDIUM 5.4
CVE-2019-8146

A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated use…

Fix: 2.2.10 / 2.3.2+
Fix from $1,600 2019-11-06
Magento MEDIUM 5.4
CVE-2019-8147

A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated use…

Fix: 2.2.10 / 2.3.2+
Fix from $1,600 2019-11-06
Magento MEDIUM 5.4
CVE-2019-8152

A stored cross-site scripting (XSS) vulnerability exists in in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento 2.3 prio…

Fix: 1.9.4.3 / 1.14.4.3+
Fix from $1,600 2019-11-06
Magento CRITICAL 9.8
CVE-2019-8136

An insecure component vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. Magento 2 codebase leveraged outda…

Fix: 2.2.10 / 2.3.2+
Fix from $2,300 2019-11-06
Magento CRITICAL 9.8
CVE-2019-8144

A remote code execution vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can insert a malicious payload throug…

Fix: 2.3.2+
Fix from $2,300 2019-11-06
Magento HIGH 8.8
CVE-2019-8137

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with privi…

Fix: 2.2.10 / 2.3.2+
Fix from $1,950 2019-11-06
Magento HIGH 7.2
CVE-2019-8141

A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticate…

Fix: 2.1.19 / 2.2.10+
Fix from $1,950 2019-11-06
Magento MEDIUM 6.5
CVE-2019-8143

A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with access to ema…

Fix: 2.2.10 / 2.3.2+
Fix from $1,600 2019-11-06
Magento MEDIUM 5.4
CVE-2019-8138

A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated use…

Fix: 2.2.10 / 2.3.2+
Fix from $1,600 2019-11-06
Magento MEDIUM 5.4
CVE-2019-8139

A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary Javasc…

Fix: 2.3.2+
Fix from $1,600 2019-11-06
Magento MEDIUM 5.4
CVE-2019-8142

A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated use…

Fix: 2.2.10 / 2.3.2+
Fix from $1,600 2019-11-06
Magento CRITICAL 9.8
CVE-2019-8135

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. Dependency injection through Sym…

Fix: 2.2.10 / 2.3.2+
Fix from $2,300 2019-11-06
Magento HIGH 8.8
CVE-2019-8130

A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. A user with store manipulation privilege…

Fix: 2.2.10 / 2.3.2+
Fix from $1,950 2019-11-06
Magento HIGH 8.8
CVE-2019-8134

A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. A user with marketing privileges can exe…

Fix: 2.2.10 / 2.3.2+
Fix from $1,950 2019-11-06
Magento MEDIUM 6.5
CVE-2019-8133

A security bypass vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. A user with privileges to generate sit…

Fix: 2.2.10 / 2.3.2+
Fix from $1,600 2019-11-06
Magento MEDIUM 5.4
CVE-2019-8128

A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated use…

Fix: 2.2.10 / 2.3.2+
Fix from $1,600 2019-11-06
Magento MEDIUM 5.4
CVE-2019-8129

A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated use…

Fix: 2.2.10 / 2.3.2+
Fix from $1,600 2019-11-06
Magento MEDIUM 5.4
CVE-2019-8131

A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated use…

Fix: 2.2.10 / 2.3.2+
Fix from $1,600 2019-11-06
Magento CRITICAL 9.8
CVE-2019-8121

An insecure component vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. Magento 2 codebas…

Fix: 2.1.19 / 2.2.10+
Fix from $2,300 2019-11-05
Magento HIGH 8.8
CVE-2019-8122

A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticate…

Fix: 2.1.19 / 2.2.10+
Fix from $1,950 2019-11-05
Magento HIGH 8.8
CVE-2019-8127

A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with privileges to…

Fix: 2.2.10 / 2.3.2+
Fix from $1,950 2019-11-05
Magento HIGH 7.5
CVE-2019-8116

Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauth…

Fix: 2.2.10 / 2.3.2+
Fix from $1,950 2019-11-05
Magento HIGH 7.2
CVE-2019-8114

A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2…

Fix: 1.9.4.3 / 1.14.4.3+
Fix from $1,950 2019-11-05
Magento HIGH 7.2
CVE-2019-8119

A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticate…

Fix: 2.1.19 / 2.2.10+
Fix from $1,950 2019-11-05
Magento MEDIUM 5.4
CVE-2019-8117

A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticates use…

Fix: 2.2.10+
Fix from $1,600 2019-11-05
Magento MEDIUM 5.4
CVE-2019-8120

A stored cross-site scripting (XSS) vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An …

Fix: 2.1.19 / 2.2.10+
Fix from $1,600 2019-11-05
Magento MEDIUM 5.3
CVE-2019-8118

Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed login attem…

Fix: 2.1.19 / 2.2.10+
Fix from $1,600 2019-11-05