Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
Echo OS
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
M
SQL Injection
Affects
magento/community-edition
| Versions
>=2.1, <2.1.17
>=2.2, <2.2.8
>=2.3, <2.3.1
M
Privilege Escalation
Affects
magento/community-edition
| Versions
>=2.1, <2.1.17
>=2.2, <2.2.8
>=2.3, <2.3.1
M
Authentication Bypass
Affects
magento/community-edition
| Versions
>=2.1, <2.1.17
>=2.2, <2.2.8
>=2.3, <2.3.1
M
Cross-site Scripting (XSS)
Affects
magento/community-edition
| Versions
>=2.1, <2.1.17
>=2.2, <2.2.8
>=2.3, <2.3.1
M
Cross-site Scripting (XSS)
Affects
magento/community-edition
| Versions
>=2.1, <2.1.17
>=2.2, <2.2.8
>=2.3, <2.3.1
M
Information Exposure
Affects
magento/community-edition
| Versions
>=2.1, <2.1.17
H
Remote Code Execution (RCE)
Affects
magento/community-edition
| Versions
>=2.1, <2.1.17
>=2.2, <2.2.8
>=2.3, <2.3.1
H
Remote Code Execution (RCE)
Affects
magento/community-edition
| Versions
>=2.1, <2.1.17
>=2.2, <2.2.8
>=2.3, <2.3.1
H
Remote Code Execution (RCE)
Affects
magento/community-edition
| Versions
>=2.1, <2.1.17
>=2.2, <2.2.8
>=2.3, <2.3.1
H
Cross-site Scripting (XSS)
Affects
magento/community-edition
| Versions
>=2.1, <2.1.17
>=2.2, <2.2.8
>=2.3, <2.3.1
H
SQL Injection
Affects
magento/community-edition
| Versions
>=2.1, <2.1.17
>=2.2, <2.2.8
>=2.3, <2.3.1
H
Remote Code Execution (RCE)
Affects
magento/community-edition
| Versions
>=2.1, <2.1.17
>=2.2, <2.2.8
>=2.3, <2.3.1
H
Remote Code Execution (RCE)
Affects
magento/community-edition
| Versions
>=2.1, <2.1.17
>=2.2, <2.2.8
>=2.3, <2.3.1
C
SQL Injection
CVE-2019-7139
Affects
magento/community-edition
| Versions
>2.0.0, <2.1.17
>2.2.0, <2.2.8
>2.3.0, <2.3.1
H
Insecure Encryption
CVE-2016-6485
Affects
magento/community-edition
| Versions
<2.2.5
M
Improper Authorization
CVE-2020-24403
Affects
magento/core
| Versions
<2.3.6
>=2.4.0, <2.4.1
H
Remote Code Execution (RCE)
CVE-2020-24407
Affects
magento/core
| Versions
<2.3.6
>=2.4.0, <2.4.1
L
Information Exposure
CVE-2020-24406
Affects
magento/core
| Versions
<2.3.6
>=2.4.0, <2.4.1
M
Improper Authorization
CVE-2020-24404
Affects
magento/core
| Versions
<2.3.6
>=2.4.0, <2.4.1
M
Insufficient Validation
CVE-2020-24401
Affects
magento/core
| Versions
<2.3.6
>=2.4.0, <2.4.1
M
Improper Authorization
CVE-2020-24402
Affects
magento/core
| Versions
<2.3.6
>=2.4.0, <2.4.1
H
SQL Injection
CVE-2020-24400
Affects
magento/core
| Versions
<2.3.6
>=2.4.0, <2.4.1
H
Cross-site Scripting (XSS)
CVE-2020-24408
Affects
magento/core
| Versions
<2.3.6
>=2.4.0, <2.4.1
L
Improper Authorization
CVE-2020-24405
Affects
magento/core
| Versions
<2.3.6
>=2.4.0, <2.4.1
M
Cross-Site Request Forgery (CSRF)
CVE-2018-5301
Affects
magento/core
| Versions
<2.0.10
>=2.1.0, <2.1.2
H
Cross-site Scripting (XSS)
CVE-2020-9665
Affects
magento/core
| Versions
>=0.0.0
H
Cross-site Scripting (XSS)
CVE-2020-3715
Affects
magento/core
| Versions
>=2.3.0, <2.3.3
<2.2.10
H
SQL Injection
CVE-2020-3719
Affects
magento/core
| Versions
>=2.3.0, <2.3.4
<2.2.11
H
Arbitrary Code Execution
CVE-2020-3718
Affects
magento/core
| Versions
>=2.3.0, <2.3.4
<2.2.11
H
Directory Traversal
CVE-2020-3717
Affects
magento/core
| Versions
>=2.3.0, <2.3.4
<2.2.11