Vulnerability index

Browse CVEs

153 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Magento MEDIUM 5.3
CVE-2019-8123

An insufficient logging and monitoring vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.1 prior to 2.1.19, Magento 2.2 prio…

Fix: 1.9.3.4 / 1.14.4.3+
Fix from $1,600 2019-11-05
Magento HIGH 8.8
CVE-2019-8093

An arbitrary file access vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can lever…

Fix: 2.2.10 / 2.3.2+
Fix from $1,950 2019-11-05
Magento HIGH 8.8
CVE-2019-8110

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can levera…

Fix: 2.2.10 / 2.3.2+
Fix from $1,950 2019-11-05
Magento HIGH 8.8
CVE-2019-8111

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can levera…

Fix: 2.2.10 / 2.3.2+
Fix from $1,950 2019-11-05
Magento HIGH 8.0
CVE-2019-8109

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can craft …

Fix: 2.2.10 / 2.3.2+
Fix from $1,950 2019-11-05
Magento HIGH 7.5
CVE-2019-8112

A security bypass vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can bypass the…

Fix: 2.2.10 / 2.3.2+
Fix from $1,950 2019-11-05
Magento MEDIUM 6.5
CVE-2019-8107

An arbitrary file deletion vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with ex…

Fix: 2.2.10 / 2.3.2+
Fix from $1,600 2019-11-05
Magento MEDIUM 6.5
CVE-2019-8108

Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authen…

Fix: 2.2.10 / 2.3.2+
Fix from $1,600 2019-11-05
Magento MEDIUM 5.4
CVE-2019-8092

A reflected cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated …

Fix: 2.2.10 / 2.3.2+
Fix from $1,600 2019-11-05
Magento MEDIUM 5.3
CVE-2019-8113

Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1 uses cryptographically weak random number generator to brute-force the confirmati…

Fix: 2.2.10 / 2.3.2+
Fix from $1,600 2019-11-05
Magento MEDIUM 6.5
CVE-2019-8090

An arbitrary file deletion vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authentic…

Fix: 2.1.19 / 2.2.10+
Fix from $1,600 2019-11-05
Magento MEDIUM 6.5
CVE-2019-8235

An insecure direct object reference (IDOR) vulnerability exists in Magento 2.3 prior to 2.3.1, 2.2 prior to 2.2.8, and 2.1 prior to 2.1.17 versions. …

Fix: 2.1.17 / 2.2.8+
Fix from $1,600 2019-10-30
Magento HIGH 7.5
CVE-2019-7950

An access control bypass vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An unauthentica…

Fix: 2.1.18 / 2.2.9+
Fix from $1,950 2019-08-02
Magento HIGH 7.5
CVE-2019-7951

An information leakage vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. A SOAP web servic…

Fix: 2.1.18 / 2.2.9+
Fix from $1,950 2019-08-02
Magento HIGH 7.2
CVE-2019-7942

A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated…

Fix: 2.1.18 / 2.2.9+
Fix from $1,950 2019-08-02
Magento MEDIUM 6.5
CVE-2019-7947

A cross-site request forgery vulnerability exists in the GiftCardAccount removal feature for Magento Open Source prior to 1.9.4.2, and Magento Commer…

Fix: 1.9.4.2 / 1.14.4.2+
Fix from $1,600 2019-08-02
Magento MEDIUM 6.1
CVE-2019-7939

A reflected cross-site scripting vulnerability exists on the customer cart checkout page of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, …

Fix: 2.1.18 / 2.2.9+
Fix from $1,600 2019-08-02
Magento MEDIUM 5.4
CVE-2019-7944

A stored cross-site scripting vulnerability exists in the product comments field of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior …

Fix: 1.9.4.2 / 1.14.4.2+
Fix from $1,600 2019-08-02
Magento MEDIUM 5.4
CVE-2019-7945

A stored cross-cite scripting vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior…

Fix: 1.9.4.2 / 1.14.4.2+
Fix from $1,600 2019-08-02
Magento HIGH 7.5
CVE-2019-7928

A denial-of-service (DoS) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. By abusing ins…

Fix: 2.1.18 / 2.2.9+
Fix from $1,950 2019-08-02
Magento HIGH 7.2
CVE-2019-7923

A server-side request forgery (SSRF) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. Thi…

Fix: 2.1.18 / 2.2.9+
Fix from $1,950 2019-08-02
Magento HIGH 7.2
CVE-2019-7930

A file upload restriction bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user…

Fix: 2.1.18 / 2.2.9+
Fix from $1,950 2019-08-02
Magento HIGH 7.2
CVE-2019-7932

A remote code execution vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.…

Fix: 1.9.4.2 / 1.14.4.2+
Fix from $1,950 2019-08-02
Magento MEDIUM 5.4
CVE-2019-7921

A stored cross-site scripting vulnerability exists in the product catalog form of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.…

Fix: 2.1.18 / 2.2.9+
Fix from $1,600 2019-08-02
Magento HIGH 7.5
CVE-2019-7915

A denial-of-service vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. Under certain condit…

Fix: 2.1.18 / 2.2.9+
Fix from $1,950 2019-08-02
Magento HIGH 7.2
CVE-2019-7892

A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated…

Fix: 2.1.18 / 2.2.9+
Fix from $1,950 2019-08-02
Magento HIGH 7.2
CVE-2019-7895

A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated…

Fix: 2.1.18 / 2.2.9+
Fix from $1,950 2019-08-02
Magento HIGH 7.2
CVE-2019-7896

A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated…

Fix: 2.1.18 / 2.2.9+
Fix from $1,950 2019-08-02
Magento HIGH 7.2
CVE-2019-7903

A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated…

Fix: 2.1.18 / 2.2.9+
Fix from $1,950 2019-08-02
Magento HIGH 7.2
CVE-2019-7911

A server-side request forgery (SSRF) vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.…

Fix: 2.1.18 / 2.2.9+
Fix from $1,950 2019-08-02