Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • H
Cross-site Request Forgery (CSRF)CVE-2021-21027
Affects magento/community-edition | Versions <2.3.6-p1>=2.4.0, <2.4.2
Has fix
ComposerPublished 10 Feb 2021
  • M
Access Restriction BypassCVE-2021-21022
Affects magento/community-edition | Versions <2.3.6-p1>=2.4.0, <2.4.2
Has fix
ComposerPublished 10 Feb 2021
  • H
Improper Input ValidationCVE-2021-21018
Affects magento/community-edition | Versions <2.3.6-p1>=2.4.0, <2.4.2
Has fix
ComposerPublished 10 Feb 2021
  • L
Improper AuthorizationCVE-2021-21026
Affects magento/community-edition | Versions <2.3.6-p1>=2.4.0, <2.4.2
Has fix
ComposerPublished 10 Feb 2021
  • M
Cross-site Scripting (XSS)CVE-2021-21023
Affects magento/community-edition | Versions <2.3.6-p1>=2.4.0, <2.4.2
Has fix
ComposerPublished 10 Feb 2021
  • L
SQL InjectionCVE-2021-21024
Affects magento/community-edition | Versions <2.3.6-p1>=2.4.0, <2.4.2
Has fix
ComposerPublished 10 Feb 2021
  • H
Access Restriction BypassCVE-2021-21025
Affects magento/community-edition | Versions <2.3.6-p1>=2.4.0, <2.4.2
Has fix
ComposerPublished 10 Feb 2021
  • M
Session FixationCVE-2021-21032
Affects magento/community-edition | Versions <2.3.6-p1>=2.4.0, <2.4.2
Has fix
ComposerPublished 10 Feb 2021
  • M
Insecure Direct Object ReferenceCVE-2019-8235
Affects magento/community-edition | Versions >=2.1.0, <2.1.17>=2.2.0, <2.2.8>=2.3.0, <2.3.1
Has fix
ComposerPublished 25 Aug 2020
  • C
Remote Code Execution (RCE)CVE-2019-8144
Affects magento/community-edition | Versions >=2.3.0, <2.3.3
Has fix
ComposerPublished 25 Aug 2020
  • M
Observable Timing DiscrepancyCVE-2020-9690
Affects magento/community-edition | Versions <2.3.5-p2
Has fix
ComposerPublished 29 Jul 2020
  • C
Cross-site Scripting (XSS)CVE-2020-9691
Affects magento/community-edition | Versions <2.3.5-p2
Has fix
ComposerPublished 29 Jul 2020
  • H
Security BypassCVE-2020-9692
Affects magento/community-edition | Versions <2.3.5-p2
Has fix
ComposerPublished 29 Jul 2020
  • H
Directory TraversalCVE-2020-9689
Affects magento/community-edition | Versions <2.3.5-p2
Has fix
ComposerPublished 29 Jul 2020
  • H
Cross-site Scripting (XSS)CVE-2020-3715
Affects magento/community-edition | Versions <1.9.4.4
Has fix
ComposerPublished 29 May 2020
  • H
SQL InjectionCVE-2020-3719
Affects magento/community-edition | Versions <1.9.4.4
Has fix
ComposerPublished 29 May 2020
  • H
Arbitrary Code ExecutionCVE-2020-3718
Affects magento/community-edition | Versions <1.9.4.4
Has fix
ComposerPublished 29 May 2020
  • H
Directory TraversalCVE-2020-3717
Affects magento/community-edition | Versions <1.9.4.4
Has fix
ComposerPublished 29 May 2020
  • H
Cross-site Scripting (XSS)CVE-2020-3758
Affects magento/community-edition | Versions <1.9.4.4
Has fix
ComposerPublished 29 May 2020
  • H
Deserialization of Untrusted DataCVE-2020-3716
Affects magento/community-edition | Versions <1.9.4.4
Has fix
ComposerPublished 29 May 2020
  • H
Security BypassCVE-2020-9632
Affects magento/community-edition | Versions <1.9.4.5
Has fix
ComposerPublished 13 May 2020
  • H
Security BypassCVE-2020-9631
Affects magento/community-edition | Versions <1.9.4.5
Has fix
ComposerPublished 13 May 2020
  • M
Privilege EscalationCVE-2020-9630
Affects magento/community-edition | Versions <1.9.4.4
Has fix
ComposerPublished 10 May 2020
  • H
Authorization BypassCVE-2020-9587
Affects magento/community-edition | Versions >=2.3.5, <2.3.5-p1<2.3.4-p2
Has fix
ComposerPublished 7 May 2020
  • M
Command InjectionCVE-2020-9576
Affects magento/community-edition | Versions >=2.3.5, <2.3.5-p1<2.3.4-p2
Has fix
ComposerPublished 7 May 2020
  • M
Arbitrary Code ExecutionCVE-2020-9585
Affects magento/community-edition | Versions >=2.3.5, <2.3.5-p1<2.3.4-p2
Has fix
ComposerPublished 7 May 2020
  • H
Cross-site Scripting (XSS)CVE-2020-9584
Affects magento/community-edition | Versions >=2.3.5, <2.3.5-p1<2.3.4-p2
Has fix
ComposerPublished 7 May 2020
  • H
Command InjectionCVE-2020-9583
Affects magento/community-edition | Versions >=2.3.5, <2.3.5-p1<2.3.4-p2
Has fix
ComposerPublished 7 May 2020
  • H
Improper AuthorizationCVE-2020-9591
Affects magento/community-edition | Versions >=2.3.5, <2.3.5-p1<2.3.4-p2
Has fix
ComposerPublished 7 May 2020
  • H
Command InjectionCVE-2020-9582
Affects magento/community-edition | Versions >=2.3.5, <2.3.5-p1<2.3.4-p2
Has fix
ComposerPublished 7 May 2020