Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- M
Cross-Site Request Forgery (CSRF)CVE-2024-39409
Affects magento/community-edition | Versions <2.4.4-p10>=2.4.5-p1, <2.4.5-p9>=2.4.6-p1, <2.4.6-p7>=2.4.7-p1, <2.4.7-p2
Has fix
ComposerPublished 17 Sept 2024
- M
Cross-Site Request Forgery (CSRF)CVE-2024-39408
Affects magento/community-edition | Versions <2.4.4-p10>=2.4.5-p1, <2.4.5-p9>=2.4.6-p1, <2.4.6-p7>=2.4.7-p1, <2.4.7-p2
Has fix
ComposerPublished 17 Sept 2024
- M
Improper AuthorizationCVE-2024-39412
Affects magento/community-edition | Versions <2.4.4-p10>=2.4.5-p1, <2.4.5-p9>=2.4.6-p1, <2.4.6-p7>=2.4.7-p1, <2.4.7-p2
Has fix
ComposerPublished 17 Sept 2024
- M
Cross-Site Request Forgery (CSRF)CVE-2024-39410
Affects magento/community-edition | Versions <2.4.4-p10>=2.4.5-p1, <2.4.5-p9>=2.4.6-p1, <2.4.6-p7>=2.4.7-p1, <2.4.7-p2
Has fix
ComposerPublished 17 Sept 2024
- H
Path TraversalCVE-2024-39406
Affects magento/community-edition | Versions >=2.4.7-p1, <2.4.7-p2>=2.4.6-p1, <2.4.6-p7>=2.4.5-p1, <2.4.5-p9<2.4.4-p10
Has fix
ComposerPublished 17 Sept 2024
- M
Cross-site Scripting (XSS)CVE-2024-34105
Affects magento/community-edition | Versions <2.4.4-p9>=2.4.5-p1, <2.4.5-p8>=2.4.6-p1, <2.4.6-p6>=2.4.7-beta1, <2.4.7-p1
Has fix
ComposerPublished 8 Aug 2024
- M
Incorrect AuthorizationCVE-2024-34106
Affects magento/community-edition | Versions <2.4.4-p9>=2.4.5-p1, <2.4.5-p8>=2.4.6-p1, <2.4.6-p6>=2.4.7-beta1, <2.4.7-p1
Has fix
ComposerPublished 8 Aug 2024
- M
Improper Access ControlCVE-2024-34107
Affects magento/community-edition | Versions <2.4.4-p9>=2.4.5-p1, <2.4.5-p8>=2.4.6-p1, <2.4.6-p6>=2.4.7-beta1, <2.4.7-p1
Has fix
ComposerPublished 8 Aug 2024
- H
Improper AuthorizationCVE-2024-34104
Affects magento/community-edition | Versions <2.4.4-p9>=2.4.5-p1, <2.4.5-p8>=2.4.6-p1, <2.4.6-p6>=2.4.7-beta1, <2.4.7-p1
Has fix
ComposerPublished 8 Aug 2024
- H
Server-Side Request Forgery (SSRF)CVE-2024-34111
Affects magento/community-edition | Versions <2.4.4-p9>=2.4.5-p1, <2.4.5-p8>=2.4.6-p1, <2.4.6-p6>=2.4.7-beta1, <2.4.7-p1
Has fix
ComposerPublished 8 Aug 2024
- C
Improper AuthenticationCVE-2024-34103
Affects magento/community-edition | Versions <2.4.4-p9>=2.4.5-p1, <2.4.5-p8>=2.4.6-p1, <2.4.6-p6>=2.4.7-beta1, <2.4.7-p1
Has fix
ComposerPublished 8 Aug 2024
- C
XML External Entity (XXE) InjectionCVE-2024-34102
Affects magento/community-edition | Versions <2.4.4-p9>=2.4.5, <2.4.5-p8>=2.4.6, <2.4.6-p6>=2.4.7, <2.4.7-p1
Has fix
ComposerPublished 14 Jun 2024
Affects magento/community-edition | Versions >=2.1, <2.1.15>=2.2, <2.2.6
Has fix
ComposerPublished 29 May 2024
- M
Insecure DefaultsCVE-2019-8136
Affects magento/community-edition | Versions >=2.2.0, <2.2.10>=2.3.0, <2.3.3
Has fix
ComposerPublished 19 Jul 2023
- M
Cross-site Scripting (XSS)CVE-2022-35698
Affects magento/community-edition | Versions <2.4.4-p2>=2.4.5, <2.4.5-p1
Has fix
ComposerPublished 8 Dec 2022
- H
Improper Input ValidationCVE-2022-42344
Affects magento/community-edition | Versions <2.3.7-p4>=2.4.0, <2.4.3-p3>=2.4.4, <2.4.4-p1
Has fix
ComposerPublished 8 Dec 2022
- M
Improper Access ControlCVE-2022-34259
Affects magento/community-edition | Versions <2.3.7-p4>=2.4.0, <2.4.3-p3>=2.4.4, <2.4.4-p1
Has fix
ComposerPublished 8 Dec 2022
- L
Cross-site Scripting (XSS)CVE-2022-34258
Affects magento/community-edition | Versions <2.3.7-p4>=2.4.0, <2.4.3-p3>=2.4.4, <2.4.4-p1
Has fix
ComposerPublished 8 Dec 2022
- M
Cross-site Scripting (XSS)CVE-2022-34257
Affects magento/community-edition | Versions <2.3.7-p4>=2.4.0, <2.4.3-p3>=2.4.4, <2.4.4-p1
Has fix
ComposerPublished 8 Dec 2022
- L
Improper AuthorizationCVE-2022-35692
Affects magento/community-edition | Versions <2.3.7-p4>=2.4.0, <2.4.3-p3>=2.4.4, <2.4.4-p1
Has fix
ComposerPublished 8 Dec 2022
- H
Improper AuthorizationCVE-2022-34256
Affects magento/community-edition | Versions <2.3.7-p4>=2.4.0, <2.4.3-p3>=2.4.4, <2.4.4-p1
Has fix
ComposerPublished 8 Dec 2022
- C
Improper Input ValidationCVE-2022-24093
Affects magento/community-edition | Versions <2.3.7-p3>=2.4.3, <2.4.3-p2
Has fix
ComposerPublished 8 Dec 2022
- M
Improper Access ControlCVE-2022-35689
Affects magento/community-edition | Versions <2.4.4-p2>=2.4.5, <2.4.5-p1
Has fix
ComposerPublished 8 Dec 2022
- H
Improper Input ValidationCVE-2022-34255
Affects magento/community-edition | Versions <2.3.7-p4>=2.4.0, <2.4.3-p3>=2.4.4, <2.4.4-p1
Has fix
ComposerPublished 8 Dec 2022
- H
Path TraversalCVE-2022-34254
Affects magento/community-edition | Versions <2.3.7-p4>=2.4.0, <2.4.3-p3>=2.4.4, <2.4.4-p1
Has fix
ComposerPublished 8 Dec 2022
- C
XML InjectionCVE-2022-34253
Affects magento/community-edition | Versions <2.3.7-p4>=2.4.0, <2.4.3-p3>=2.4.4, <2.4.4-p1
Has fix
ComposerPublished 8 Dec 2022
- C
Improper Input ValidationCVE-2022-24087
Affects magento/community-edition | Versions >=0.0.0
Has fix
ComposerPublished 20 Feb 2022
- H
Improper Input ValidationCVE-2022-24086
Affects magento/community-edition | Versions >=2.3.3-p1, <2.3.7-p3>=2.4.0, <2.4.3-p2
Has fix
ComposerPublished 14 Feb 2022
- M
Cross-site Request Forgery (CSRF)CVE-2021-39864
Affects magento/community-edition | Versions <2.3.7-p2>=2.4.0, <2.4.3-p1
Has fix
ComposerPublished 13 Oct 2021
- M
Security BypassCVE-2021-36012
Affects magento/community-edition | Versions >=2.4.0, <2.4.2-p2<2.3.7-p1
Has fix
ComposerPublished 12 Sept 2021