Browse CVEs

HIGH 8.8 CVE-2019-8159 A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with syste… Magento 2.2.10 / 2.3.2+ Fix from $1,9502019-11-06 HIGH 7.2 CVE-2019-8151 A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin… Magento 2.2.10 / 2.3.2+ Fix from $1,9502019-11-06 MEDIUM 6.1 CVE-2019-8153 A mitigation bypass to prevent cross-site scripting (XSS) exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. Successful e… Magento 2.2.10 / 2.3.2+ Fix from $1,6002019-11-06 MEDIUM 5.4 CVE-2019-8146 A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated use… Magento 2.2.10 / 2.3.2+ Fix from $1,6002019-11-06 MEDIUM 5.4 CVE-2019-8147 A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated use… Magento 2.2.10 / 2.3.2+ Fix from $1,6002019-11-06 MEDIUM 5.4 CVE-2019-8152 A stored cross-site scripting (XSS) vulnerability exists in in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento 2.3 prio… Magento 1.9.4.3 / 1.14.4.3+ Fix from $1,6002019-11-06 CRITICAL 9.8 CVE-2019-8136 An insecure component vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. Magento 2 codebase leveraged outda… Magento 2.2.10 / 2.3.2+ Fix from $2,3002019-11-06 CRITICAL 9.8 CVE-2019-8144 A remote code execution vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can insert a malicious payload throug… Magento 2.3.2+ Fix from $2,3002019-11-06 HIGH 8.8 CVE-2019-8137 A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with privi… Magento 2.2.10 / 2.3.2+ Fix from $1,9502019-11-06 HIGH 7.2 CVE-2019-8141 A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticate… Magento 2.1.19 / 2.2.10+ Fix from $1,9502019-11-06 MEDIUM 6.5 CVE-2019-8143 A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with access to ema… Magento 2.2.10 / 2.3.2+ Fix from $1,6002019-11-06 MEDIUM 5.4 CVE-2019-8138 A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated use… Magento 2.2.10 / 2.3.2+ Fix from $1,6002019-11-06 MEDIUM 5.4 CVE-2019-8139 A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary Javasc… Magento 2.3.2+ Fix from $1,6002019-11-06 MEDIUM 5.4 CVE-2019-8142 A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated use… Magento 2.2.10 / 2.3.2+ Fix from $1,6002019-11-06 CRITICAL 9.8 CVE-2019-8135 A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. Dependency injection through Sym… Magento 2.2.10 / 2.3.2+ Fix from $2,3002019-11-06 HIGH 8.8 CVE-2019-8130 A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. A user with store manipulation privilege… Magento 2.2.10 / 2.3.2+ Fix from $1,9502019-11-06 HIGH 8.8 CVE-2019-8134 A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. A user with marketing privileges can exe… Magento 2.2.10 / 2.3.2+ Fix from $1,9502019-11-06 MEDIUM 6.5 CVE-2019-8133 A security bypass vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. A user with privileges to generate sit… Magento 2.2.10 / 2.3.2+ Fix from $1,6002019-11-06 MEDIUM 5.4 CVE-2019-8128 A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated use… Magento 2.2.10 / 2.3.2+ Fix from $1,6002019-11-06 MEDIUM 5.4 CVE-2019-8129 A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated use… Magento 2.2.10 / 2.3.2+ Fix from $1,6002019-11-06 MEDIUM 5.4 CVE-2019-8131 A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated use… Magento 2.2.10 / 2.3.2+ Fix from $1,6002019-11-06 CRITICAL 9.8 CVE-2019-8121 An insecure component vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. Magento 2 codebas… Magento 2.1.19 / 2.2.10+ Fix from $2,3002019-11-05 HIGH 8.8 CVE-2019-8122 A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticate… Magento 2.1.19 / 2.2.10+ Fix from $1,9502019-11-05 HIGH 8.8 CVE-2019-8127 A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with privileges to… Magento 2.2.10 / 2.3.2+ Fix from $1,9502019-11-05 HIGH 7.5 CVE-2019-8116 Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauth… Magento 2.2.10 / 2.3.2+ Fix from $1,9502019-11-05 HIGH 7.2 CVE-2019-8114 A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2… Magento 1.9.4.3 / 1.14.4.3+ Fix from $1,9502019-11-05 HIGH 7.2 CVE-2019-8119 A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticate… Magento 2.1.19 / 2.2.10+ Fix from $1,9502019-11-05 MEDIUM 5.4 CVE-2019-8117 A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticates use… Magento 2.2.10+ Fix from $1,6002019-11-05 MEDIUM 5.4 CVE-2019-8120 A stored cross-site scripting (XSS) vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An … Magento 2.1.19 / 2.2.10+ Fix from $1,6002019-11-05 MEDIUM 5.3 CVE-2019-8118 Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 uses weak cryptographic function to store the failed login attem… Magento 2.1.19 / 2.2.10+ Fix from $1,6002019-11-05