Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
VULNERABILITYAFFECTSTYPEPUBLISHED
  • H
Cross-site Scripting (XSS)
magento/community-edition>=2.2, <2.2.10>=2.3, <2.3.2-p2Composer15 Oct 2019
  • H
Cross-site Scripting (XSS)
magento/community-edition>=2.2, <2.2.10>=2.3, <2.3.2-p2Composer15 Oct 2019
  • H
Cross-site Scripting (XSS)
magento/community-edition>=2.2, <2.2.10>=2.3, <2.3.2-p2Composer15 Oct 2019
  • H
Cross-site Scripting (XSS)
magento/community-edition>=2.2, <2.2.10>=2.3, <2.3.2-p2Composer15 Oct 2019
  • H
Cross-site Scripting (XSS)
magento/community-edition>=2.2, <2.2.10>=2.3, <2.3.2-p2Composer15 Oct 2019
  • H
Cross-site Scripting (XSS)
magento/community-edition>=2.2, <2.2.10>=2.3, <2.3.2-p2Composer15 Oct 2019
  • H
Cross-site Scripting (XSS)
magento/community-edition>=2.2, <2.2.10>=2.3, <2.3.2-p2Composer15 Oct 2019
  • H
Cross-site Scripting (XSS)
magento/community-edition>=2.2, <2.2.10>=2.3, <2.3.2-p2Composer15 Oct 2019
  • H
Cross-site Scripting (XSS)
magento/community-edition>=2.2, <2.2.10>=2.3, <2.3.2-p2Composer15 Oct 2019
  • H
Cross-site Scripting (XSS)
magento/community-edition>=2.2, <2.2.10>=2.3, <2.3.2-p2Composer15 Oct 2019
  • H
Cross-site Scripting (XSS)
magento/community-edition>=2.2, <2.2.10>=2.3, <2.3.2-p2Composer15 Oct 2019
  • H
Cross-site Scripting (XSS)
magento/community-edition>=2.2, <2.2.10>=2.3, <2.3.2-p2Composer15 Oct 2019
  • H
Cross-site Scripting (XSS)
magento/community-edition>=2.2, <2.2.10>=2.3, <2.3.2-p2Composer15 Oct 2019
  • H
Cross-site Scripting (XSS)
magento/community-edition>=2.2, <2.2.10>=2.3, <2.3.2-p2Composer15 Oct 2019
  • H
Server-side Request Forgery (SSRF)
magento/community-edition>=2.2, <2.2.10>=2.3, <2.3.2-p2Composer15 Oct 2019
  • C
Remote Code Execution (RCE)
magento/community-edition>=2.2.0, <2.2.10>=2.3.0, <2.3.2-p2Composer15 Oct 2019
  • C
Remote Code Execution (RCE)
magento/community-edition>=2.2.0, <2.2.10>=2.3.0, <2.3.2-p2Composer11 Oct 2019
  • C
Remote Code Execution (RCE)
magento/community-edition>=2.2.0, <2.2.10>=2.3.0, <2.3.2-p2Composer11 Oct 2019
  • C
Remote Code Execution (RCE)
magento/community-edition>=2.1.0, <2.1.19>=2.2.0, <2.2.10>=2.3.0, <2.3.2-p2Composer11 Oct 2019
  • C
Remote Code Execution (RCE)
magento/community-edition>=2.2.0, <2.2.10>=2.3.0, <2.3.2-p2Composer11 Oct 2019
  • C
Remote Code Execution (RCE)
magento/community-edition>=2.2.0, <2.2.10>=2.3.0, <2.3.2-p2Composer11 Oct 2019
  • M
Information Exposure
magento/community-edition>=2.1.0, <2.1.18>=2.2.0, <2.2.9>=2.3.0, <2.3.2Composer12 Aug 2019
  • L
Session Fixation
magento/community-edition>=2.1.0, <2.1.18>=2.2.0, <2.2.9>=2.3.0, <2.3.2Composer12 Aug 2019
  • H
Security Bypass (PHP script injection)
magento/community-edition>=2.1.0, <2.1.18>=2.2.0, <2.2.9>=2.3.0, <2.3.2Composer12 Aug 2019
  • M
Resource Injection
magento/community-edition>=2.1.0, <2.1.18>=2.2.0, <2.2.9>=2.3.0, <2.3.2Composer12 Aug 2019
  • H
Information Exposure
magento/community-edition>=2.1.0, <2.1.18>=2.2.0, <2.2.9>=2.3.0, <2.3.2Composer12 Aug 2019
  • M
Security Bypass (IDOR)
magento/community-edition>=2.1.0, <2.1.18>=2.2.0, <2.2.9>=2.3.0, <2.3.2Composer12 Aug 2019
  • M
Inadequate Encryption Strength
magento/community-edition>=2.1.0, <2.1.18>=2.2.0, <2.2.9>=2.3.0, <2.3.2Composer12 Aug 2019
  • M
Inadequate Encryption Strength
magento/community-edition>=2.1.0, <2.1.18>=2.2.0, <2.2.9>=2.3.0, <2.3.2Composer12 Aug 2019
  • L
Inadequate Encryption Strength
magento/community-edition>=2.1.0, <2.1.18>=2.2.0, <2.2.9>=2.3.0, <2.3.2Composer12 Aug 2019