Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- M
Premature Release of Resource During Expected LifetimeCVE-2024-39413
Affects magento/community-edition | Versions <2.4.4-p10>=2.4.5, <2.4.5-p9>=2.4.6, <2.4.6-p7>=2.4.7-beta1, <2.4.7-p2
Has fix
ComposerPublished 9 Nov 2025
- M
Premature Release of Resource During Expected LifetimeCVE-2024-39407
Affects magento/community-edition | Versions <2.4.4-p10>=2.4.5, <2.4.5-p9>=2.4.6, <2.4.6-p7>=2.4.7-beta1, <2.4.7-p2
Has fix
ComposerPublished 9 Nov 2025
- H
Directory TraversalCVE-2024-39399
Affects magento/community-edition | Versions <2.4.4-p10>=2.4.5, <2.4.5-p9>=2.4.6, <2.4.6-p7>=2.4.7-beta1, <2.4.7-p2
Has fix
ComposerPublished 9 Nov 2025
- C
Brute ForceCVE-2024-39398
Affects magento/community-edition | Versions <2.4.4-p10>=2.4.5, <2.4.5-p9>=2.4.6, <2.4.6-p7>=2.4.7-beta1, <2.4.7-p2
Has fix
ComposerPublished 9 Nov 2025
- M
Cross-site Scripting (XSS)CVE-2024-39403
Affects magento/community-edition | Versions <2.4.4-p10>=2.4.5, <2.4.5-p9>=2.4.6, <2.4.6-p7>=2.4.7-beta1, <2.4.7-p2
Has fix
ComposerPublished 9 Nov 2025
- H
Cross-site Scripting (XSS)CVE-2024-39400
Affects magento/community-edition | Versions <2.4.4-p10>=2.4.5, <2.4.5-p9>=2.4.6, <2.4.6-p7>=2.4.7-beta1, <2.4.7-p2
Has fix
ComposerPublished 9 Nov 2025
- M
Deserialization of Untrusted DataCVE-2021-36025
Affects magento/community-edition | Versions <2.3.7-p1>=2.4.0, <2.4.2-p2
Has fix
ComposerPublished 9 Nov 2025
- C
Arbitrary File UploadCVE-2021-36042
Affects magento/community-edition | Versions <2.3.7-p1>=2.4.0, <2.4.2-p2
Has fix
ComposerPublished 9 Nov 2025
- H
Arbitrary File UploadCVE-2021-36041
Affects magento/community-edition | Versions <2.3.7-p1>=2.4.0, <2.4.2-p2
Has fix
ComposerPublished 9 Nov 2025
- H
Command InjectionCVE-2021-36024
Affects magento/community-edition | Versions <2.3.7-p1>=2.4.0, <2.4.2-p2
Has fix
ComposerPublished 9 Nov 2025
- C
Arbitrary File UploadCVE-2021-36040
Affects magento/community-edition | Versions <2.3.7-p1>=2.4.0, <2.4.2-p2
Has fix
ComposerPublished 9 Nov 2025
- H
Arbitrary File UploadCVE-2021-36034
Affects magento/community-edition | Versions <2.3.7-p1>=2.4.0, <2.4.2-p2
Has fix
ComposerPublished 9 Nov 2025
- C
XML InjectionCVE-2021-36033
Affects magento/community-edition | Versions <2.3.7-p1>=2.4.0, <2.4.2-p2
Has fix
ComposerPublished 9 Nov 2025
- M
Cross-site Scripting (XSS)CVE-2021-36027
Affects magento/community-edition | Versions <2.3.7-p1>=2.4.0, <2.4.2-p2
Has fix
ComposerPublished 9 Nov 2025
- C
XML InjectionCVE-2021-36023
Affects magento/community-edition | Versions <2.3.7-p1>=2.4.0, <2.4.2-p2
Has fix
ComposerPublished 9 Nov 2025
- M
Command InjectionCVE-2024-39401
Affects magento/community-edition | Versions <2.4.4-p10>=2.4.5-p1, <2.4.5-p9>=2.4.6-p1, <2.4.6-p7>=2.4.7-beta1, <2.4.7-p2
Has fix
ComposerPublished 7 Nov 2025
- M
Improper AuthorizationCVE-2024-39417
Affects magento/community-edition | Versions >=2.4.7-p1, <2.4.7-p2>=2.4.6-p1, <2.4.6-p7>=2.4.5-p1, <2.4.5-p9<2.4.4-p10
Has fix
ComposerPublished 24 Oct 2025
- M
Access Control BypassCVE-2025-27190
Affects magento/community-edition | Versions <2.4.4-p13>=2.4.5, <2.4.5-p12>=2.4.6, <2.4.6-p10>=2.4.7-beta1, <2.4.7-p5>=2.4.8-beta1, <2.4.8-beta2
Has fix
ComposerPublished 24 Oct 2025
- M
Improper AuthorizationCVE-2024-39411
Affects magento/community-edition | Versions >=2.4.7-p1, <2.4.7-p2>=2.4.6-p1, <2.4.6-p7>=2.4.5-p1, <2.4.5-p9<2.4.4-p10
Has fix
ComposerPublished 24 Oct 2025
- M
Improper AuthorizationCVE-2024-39415
Affects magento/community-edition | Versions <2.4.4-p10>=2.4.5-p1, <2.4.5-p9>=2.4.6-p1, <2.4.6-p7>=2.4.7-p1, <2.4.7-p2
Has fix
ComposerPublished 24 Oct 2025
- M
Incorrect AuthorizationCVE-2025-49550
Affects magento/community-edition | Versions >=2.4.5, <2.4.5-p13>=2.4.6-p1, <2.4.6-p11>=2.4.7-beta1, <2.4.7-p6>=2.4.8-beta1, <2.4.8-p1
Has fix
ComposerPublished 24 Oct 2025
- M
Insufficiently Protected CredentialsCVE-2025-27192
Affects magento/community-edition | Versions <2.4.4-p13>=2.4.5, <2.4.5-p12>=2.4.6, <2.4.6-p10>=2.4.7-beta1, <2.4.7-p5>=2.4.8-beta1, <2.4.8-beta2
Has fix
ComposerPublished 24 Oct 2025
- H
Improper AuthorizationCVE-2025-43585
Affects magento/community-edition | Versions >=2.4.5, <2.4.5-p13>=2.4.6-p1, <2.4.6-p11>=2.4.7-beta1, <2.4.7-p6>=2.4.8-beta1, <2.4.8-p1
Has fix
ComposerPublished 24 Oct 2025
- M
Improper AuthorizationCVE-2024-39419
Affects magento/community-edition | Versions >=2.4.7-p1, <2.4.7-p2>=2.4.6-p1, <2.4.6-p7>=2.4.5-p1, <2.4.5-p9<2.4.4-p10
Has fix
ComposerPublished 24 Oct 2025
- M
Access Control BypassCVE-2025-27191
Affects magento/community-edition | Versions <2.4.4-p13>=2.4.5, <2.4.5-p12>=2.4.6, <2.4.6-p10>=2.4.7-beta1, <2.4.7-p5>=2.4.8-beta1, <2.4.8-beta2
Has fix
ComposerPublished 24 Oct 2025
- M
Improper AuthorizationCVE-2024-39416
Affects magento/community-edition | Versions <2.4.4-p10>=2.4.5, <2.4.5-p8>=2.4.6, <2.4.6-p7>=2.4.7-beta1, <2.4.7-p2
Has fix
ComposerPublished 24 Oct 2025
- M
Access Control BypassCVE-2024-39414
Affects magento/community-edition | Versions <2.4.4-p10>=2.4.5, <2.4.5-p8>=2.4.6, <2.4.6-p7>=2.4.7-beta1, <2.4.7-p2
Has fix
ComposerPublished 24 Oct 2025
- M
Access Control BypassCVE-2025-27206
Affects magento/community-edition | Versions <2.4.5-p13>=2.4.6, <2.4.6-p11>=2.4.7, <2.4.7-p6>=2.4.8-beta1, <2.4.8-p1
Has fix
ComposerPublished 24 Oct 2025
- M
Incorrect AuthorizationCVE-2025-49549
Affects magento/community-edition | Versions <2.4.5-p13>=2.4.6, <2.4.6-p11>=2.4.7, <2.4.7-p6>=2.4.8-beta1, <2.4.8-p1
Has fix
ComposerPublished 24 Oct 2025
- M
Cross-site Scripting (XSS)CVE-2025-54264
Affects magento/community-edition | Versions <2.4.6-p13>=2.4.7-beta1, <2.4.7-p8>=2.4.8-beta1, <2.4.8-p3>=2.4.9-alpha1, <2.4.9-alpha3
Has fix
ComposerPublished 23 Oct 2025