Browse CVEs

MEDIUM 5.3 CVE-2019-8123 An insufficient logging and monitoring vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.1 prior to 2.1.19, Magento 2.2 prio… Magento 1.9.3.4 / 1.14.4.3+ Fix from $1,6002019-11-05 HIGH 8.8 CVE-2019-8093 An arbitrary file access vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can lever… Magento 2.2.10 / 2.3.2+ Fix from $1,9502019-11-05 HIGH 8.8 CVE-2019-8110 A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can levera… Magento 2.2.10 / 2.3.2+ Fix from $1,9502019-11-05 HIGH 8.8 CVE-2019-8111 A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can levera… Magento 2.2.10 / 2.3.2+ Fix from $1,9502019-11-05 HIGH 8.0 CVE-2019-8109 A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can craft … Magento 2.2.10 / 2.3.2+ Fix from $1,9502019-11-05 HIGH 7.5 CVE-2019-8112 A security bypass vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can bypass the… Magento 2.2.10 / 2.3.2+ Fix from $1,9502019-11-05 MEDIUM 6.5 CVE-2019-8107 An arbitrary file deletion vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with ex… Magento 2.2.10 / 2.3.2+ Fix from $1,6002019-11-05 MEDIUM 6.5 CVE-2019-8108 Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authen… Magento 2.2.10 / 2.3.2+ Fix from $1,6002019-11-05 MEDIUM 5.4 CVE-2019-8092 A reflected cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated … Magento 2.2.10 / 2.3.2+ Fix from $1,6002019-11-05 MEDIUM 5.3 CVE-2019-8113 Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1 uses cryptographically weak random number generator to brute-force the confirmati… Magento 2.2.10 / 2.3.2+ Fix from $1,6002019-11-05 MEDIUM 6.5 CVE-2019-8090 An arbitrary file deletion vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authentic… Magento 2.1.19 / 2.2.10+ Fix from $1,6002019-11-05 MEDIUM 6.5 CVE-2019-8235 An insecure direct object reference (IDOR) vulnerability exists in Magento 2.3 prior to 2.3.1, 2.2 prior to 2.2.8, and 2.1 prior to 2.1.17 versions. … Magento 2.1.17 / 2.2.8+ Fix from $1,6002019-10-30 HIGH 7.5 CVE-2019-7950 An access control bypass vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An unauthentica… Magento 2.1.18 / 2.2.9+ Fix from $1,9502019-08-02 HIGH 7.5 CVE-2019-7951 An information leakage vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. A SOAP web servic… Magento 2.1.18 / 2.2.9+ Fix from $1,9502019-08-02 HIGH 7.2 CVE-2019-7942 A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated… Magento 2.1.18 / 2.2.9+ Fix from $1,9502019-08-02 MEDIUM 6.5 CVE-2019-7947 A cross-site request forgery vulnerability exists in the GiftCardAccount removal feature for Magento Open Source prior to 1.9.4.2, and Magento Commer… Magento 1.9.4.2 / 1.14.4.2+ Fix from $1,6002019-08-02 MEDIUM 6.1 CVE-2019-7939 A reflected cross-site scripting vulnerability exists on the customer cart checkout page of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, … Magento 2.1.18 / 2.2.9+ Fix from $1,6002019-08-02 MEDIUM 5.4 CVE-2019-7944 A stored cross-site scripting vulnerability exists in the product comments field of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior … Magento 1.9.4.2 / 1.14.4.2+ Fix from $1,6002019-08-02 MEDIUM 5.4 CVE-2019-7945 A stored cross-cite scripting vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior… Magento 1.9.4.2 / 1.14.4.2+ Fix from $1,6002019-08-02 HIGH 7.5 CVE-2019-7928 A denial-of-service (DoS) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. By abusing ins… Magento 2.1.18 / 2.2.9+ Fix from $1,9502019-08-02 HIGH 7.2 CVE-2019-7923 A server-side request forgery (SSRF) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. Thi… Magento 2.1.18 / 2.2.9+ Fix from $1,9502019-08-02 HIGH 7.2 CVE-2019-7930 A file upload restriction bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user… Magento 2.1.18 / 2.2.9+ Fix from $1,9502019-08-02 HIGH 7.2 CVE-2019-7932 A remote code execution vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.… Magento 1.9.4.2 / 1.14.4.2+ Fix from $1,9502019-08-02 MEDIUM 5.4 CVE-2019-7921 A stored cross-site scripting vulnerability exists in the product catalog form of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.… Magento 2.1.18 / 2.2.9+ Fix from $1,6002019-08-02 HIGH 7.5 CVE-2019-7915 A denial-of-service vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. Under certain condit… Magento 2.1.18 / 2.2.9+ Fix from $1,9502019-08-02 HIGH 7.2 CVE-2019-7892 A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated… Magento 2.1.18 / 2.2.9+ Fix from $1,9502019-08-02 HIGH 7.2 CVE-2019-7895 A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated… Magento 2.1.18 / 2.2.9+ Fix from $1,9502019-08-02 HIGH 7.2 CVE-2019-7896 A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated… Magento 2.1.18 / 2.2.9+ Fix from $1,9502019-08-02 HIGH 7.2 CVE-2019-7903 A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated… Magento 2.1.18 / 2.2.9+ Fix from $1,9502019-08-02 HIGH 7.2 CVE-2019-7911 A server-side request forgery (SSRF) vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.… Magento 2.1.18 / 2.2.9+ Fix from $1,9502019-08-02