MA
Product
Magento
221
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 31High 69Medium 112Low 4
Watch
Add Magento to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-8229 | 7.2 | Nov 6 | In Magento prior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit product attributes can execute arbitrary code through… Affected: 1.5.0.0 before 1.9.4.3; 1.9.0.0 before 1.14.4.3 |
| CVE-2019-8151 | 7.2 | Nov 6 | A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1 Affected: 2.2.0 before 2.2.10; 2.2.0 before 2.2.10; 2.3.0 before 2.3.2; 2.3.0 before 2.3.2; 2.3.2; 2.3.2 |
| CVE-2019-8141 | 7.2 | Nov 6 | A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 Affected: 2.1.0 before 2.1.19; 2.1.0 before 2.1.19; 2.2.0 before 2.2.10; 2.2.0 before 2.2.10; 2.3.0 before 2.3.2; 2.3.0 before 2.3.2; +2 more |
| CVE-2019-8125 | 7.2 | Nov 5 | A remote code execution vulnerability exists in Magento 1 prior to 1.9.x and 1.14.x Affected: 1.5.0.0 before 1.9.4.3; 1.9.0.0 before 1.14.4.3 |
| CVE-2019-8119 | 7.2 | Nov 5 | A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 Affected: 2.1.0 before 2.1.19; 2.1.0 before 2.1.19; 2.2.0 before 2.2.10; 2.2.0 before 2.2.10; 2.3.0 through 2.3.2; 2.3.0 through 2.3.2 |
| CVE-2019-8114 | 7.2 | Nov 5 | A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1 Affected: before 1.9.4.3; before 1.14.4.3; 2.2.0 before 2.2.10; 2.2.0 before 2.2.10; 2.3.0 through 2.3.2; 2.3.0 through 2.3.2; +2 more |
| CVE-2019-8091 | 7.2 | Nov 5 | A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3 Affected: 1.5.0.0 before 1.9.4.3; 1.9.0.0 before 1.14.4.3 |
| CVE-2019-7942 | 7.2 | Aug 2 | A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 Affected: 2.1.0 before 2.1.18; 2.2.0 before 2.2.9; 2.3.0 before 2.3.2 |
| CVE-2019-7932 | 7.2 | Aug 2 | A remote code execution vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to… Affected: before 1.9.4.2; before 1.14.4.2; 2.1.0 before 2.1.18; 2.2.0 before 2.2.9; 2.3.0 before 2.3.2 |
| CVE-2019-7930 | 7.2 | Aug 2 | A file upload restriction bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 Affected: 2.1.0 before 2.1.18; 2.2.0 before 2.2.9; 2.3.0 before 2.3.2 |
| CVE-2019-7923 | 7.2 | Aug 2 | A server-side request forgery (SSRF) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 Affected: 2.1.0 before 2.1.18; 2.2.0 before 2.2.9; 2.3.0 before 2.3.2 |
| CVE-2019-7913 | 7.2 | Aug 2 | A server-side request forgery (SSRF) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 Affected: 2.1.0 before 2.1.18; 2.2.0 before 2.2.9; 2.3.0 before 2.3.2 |
| CVE-2019-7912 | 7.2 | Aug 2 | A file upload filter bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 Affected: 2.1.0 before 2.1.18; 2.2.0 before 2.2.9; 2.3.0 before 2.3.2 |
| CVE-2019-7911 | 7.2 | Aug 2 | A server-side request forgery (SSRF) vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2… Affected: 2.1.0 before 2.1.18; 2.2.0 before 2.2.9; 2.3.0 before 2.3.2 |
| CVE-2019-7903 | 7.2 | Aug 2 | A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 Affected: 2.1.0 before 2.1.18; 2.2.0 before 2.2.9; 2.3.0 before 2.3.2 |
| CVE-2019-7896 | 7.2 | Aug 2 | A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 Affected: 2.1.0 before 2.1.18; 2.2.0 before 2.2.9; 2.3.0 before 2.3.2 |
| CVE-2019-7895 | 7.2 | Aug 2 | A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 Affected: 2.1.0 before 2.1.18; 2.2.0 before 2.2.9; 2.3.0 before 2.3.2 |
| CVE-2019-7892 | 7.2 | Aug 2 | A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 Affected: 2.1.0 before 2.1.18; 2.2.0 before 2.2.9; 2.3.0 before 2.3.2 |
| CVE-2020-24400 | 7.1 | Nov 9 | Magento versions 2.4.0 and 2.3.5 (and earlier) are affected by an SQL Injection vulnerability that could lead to sensitive information disclosure Affected: before 2.3.5; before 2.3.5; 2.3.5; 2.3.5; 2.4.0; 2.4.0 |