Find out if you have vulnerabilities that put you at risk
Test your applications
Toggle filtering controls
All Vulnerabilities
APPLICATION
Cargo | Rust
Objective-C, CocoaPods | Swift
Composer | PHP
Conan | C/C++
GitHub | Go
Hex | Elixir / Erlang
Maven | Java
npm | JavaScript
NuGet | C#/F#/VB
Pypi | Python
pub | Dart, Flutter
RubyGems | Ruby
Swift Packages | Swift
C/C++
OPERATING SYSTEM
All OS vulnerabilities
AlmaLinux
Alpine Linux
Amazon Linux
CentOS
Chainguard
Debian
MinimOS
Oracle Linux
Red Hat Enterprise Linux
Rocky Linux
SUSE Linux Enterprise Server
Ubuntu
Wolfi
Report a new vulnerability
Vulnerabilities
Packages
H
Insecure Encryption
CVE-2016-6485
Affects
magento/community-edition
| Versions
<2.2.5
M
Improper Authorization
CVE-2020-24403
Affects
magento/core
| Versions
<2.3.6
>=2.4.0, <2.4.1
H
Remote Code Execution (RCE)
CVE-2020-24407
Affects
magento/core
| Versions
<2.3.6
>=2.4.0, <2.4.1
L
Information Exposure
CVE-2020-24406
Affects
magento/core
| Versions
<2.3.6
>=2.4.0, <2.4.1
M
Improper Authorization
CVE-2020-24404
Affects
magento/core
| Versions
<2.3.6
>=2.4.0, <2.4.1
M
Insufficient Validation
CVE-2020-24401
Affects
magento/core
| Versions
<2.3.6
>=2.4.0, <2.4.1
M
Improper Authorization
CVE-2020-24402
Affects
magento/core
| Versions
<2.3.6
>=2.4.0, <2.4.1
H
SQL Injection
CVE-2020-24400
Affects
magento/core
| Versions
<2.3.6
>=2.4.0, <2.4.1
H
Cross-site Scripting (XSS)
CVE-2020-24408
Affects
magento/core
| Versions
<2.3.6
>=2.4.0, <2.4.1
L
Improper Authorization
CVE-2020-24405
Affects
magento/core
| Versions
<2.3.6
>=2.4.0, <2.4.1
M
Cross-Site Request Forgery (CSRF)
CVE-2018-5301
Affects
magento/core
| Versions
<2.0.10
>=2.1.0, <2.1.2
H
Cross-site Scripting (XSS)
CVE-2020-9665
Affects
magento/core
| Versions
>=0.0.0
H
Cross-site Scripting (XSS)
CVE-2020-3715
Affects
magento/core
| Versions
>=2.3.0, <2.3.3
<2.2.10
H
SQL Injection
CVE-2020-3719
Affects
magento/core
| Versions
>=2.3.0, <2.3.4
<2.2.11
H
Arbitrary Code Execution
CVE-2020-3718
Affects
magento/core
| Versions
>=2.3.0, <2.3.4
<2.2.11
H
Directory Traversal
CVE-2020-3717
Affects
magento/core
| Versions
>=2.3.0, <2.3.4
<2.2.11
H
Cross-site Scripting (XSS)
CVE-2020-3758
Affects
magento/core
| Versions
>=2.3.0, <2.3.4
<2.2.11
H
Deserialization of Untrusted Data
CVE-2020-3716
Affects
magento/core
| Versions
>=2.3.0, <2.3.4
<2.2.11
H
Security Bypass
CVE-2020-9632
Affects
magento/core
| Versions
<2.3.4-p2
H
Security Bypass
CVE-2020-9631
Affects
magento/core
| Versions
<2.3.4-p2
M
Privilege Escalation
CVE-2020-9630
Affects
magento/core
| Versions
<2.2.11
>=2.3.0, <2.3.4
H
Authorization Bypass
CVE-2020-9587
Affects
magento/core
| Versions
<1.9.4.5
M
Command Injection
CVE-2020-9576
Affects
magento/core
| Versions
<1.9.4.5
M
Arbitrary Code Execution
CVE-2020-9585
Affects
magento/core
| Versions
<1.9.4.5
H
Cross-site Scripting (XSS)
CVE-2020-9584
Affects
magento/core
| Versions
<1.9.4.5
H
Command Injection
CVE-2020-9583
Affects
magento/core
| Versions
<1.9.4.5
H
Improper Authorization
CVE-2020-9591
Affects
magento/core
| Versions
<1.9.4.5
H
Command Injection
CVE-2020-9582
Affects
magento/core
| Versions
<1.9.4.5
H
Arbitrary Code Execution
CVE-2020-9579
Affects
magento/core
| Versions
<1.9.4.5
H
Command Injection
CVE-2020-9578
Affects
magento/core
| Versions
<1.9.4.5