p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de magento/core

Vulnérabilité publiée pour magento/core au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.

RSS ↗ JSON ↗
Filtrer les vulnérabilités
Effacer les filtres

Vulnérabilités : 24

  1. CVE-2020-9664

    Critique · CVSS 9.8EPSS 8,38%Aucun correctif publié

    CVE-2020-9664

    Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a php object injection vulnerability. Successful exploitation could lead to arbitrary code execution.

    magento/corePHP
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  2. CVE-2020-9665

    Moyenne · CVSS 6.1EPSS 1,43%Aucun correctif publié

    CVE-2020-9665

    Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

    magento/corePHP
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  3. CVE-2020-9577

    Moyenne · CVSS 6.1EPSS 1,5%Correctif disponible

    CVE-2020-9577

    Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure .

    magento/corePHP
    • Mettez à jour vers 1.9.4.5
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  4. CVE-2020-9576

    Critique · CVSS 9.8EPSS 5,72%Correctif disponible

    CVE-2020-9576

    Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

    magento/corePHP
    • Mettez à jour vers 1.9.4.5
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  5. CVE-2020-9588

    Élevée · CVSS 7.2EPSS 2,92%Correctif disponible

    CVE-2020-9588

    Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass.

    magento/corePHP
    • Mettez à jour vers 1.9.4.5
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  6. CVE-2020-9578

    Critique · CVSS 9.8EPSS 5,72%Correctif disponible

    CVE-2020-9578

    Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

    magento/corePHP
    • Mettez à jour vers 1.9.4.5
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  7. CVE-2020-9631

    Critique · CVSS 9.8EPSS 7,4%Correctif disponible

    CVE-2020-9631

    Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

    magento/corePHP
    • Mettez à jour vers 1.9.4.5
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  8. CVE-2020-9630

    Critique · CVSS 9.8EPSS 3,95%Correctif disponible

    CVE-2020-9630

    Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a business logic error vulnerability. Successful exploitation could lead to privilege escalation.

    magento/corePHP
    • Mettez à jour vers 1.9.4.5
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  9. CVE-2020-9591

    Élevée · CVSS 7.5EPSS 3,43%Correctif disponible

    CVE-2020-9591

    Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a defense-in-depth security mitigation vulnerability. Successful exploitation could lead to unauthorized access to admin panel.

    magento/corePHP
    • Mettez à jour vers 1.9.4.5
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  10. CVE-2020-9632

    Critique · CVSS 9.8EPSS 7,4%Correctif disponible

    CVE-2020-9632

    Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

    magento/corePHP
    • Mettez à jour vers 1.9.4.5
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  11. CVE-2020-9580

    Critique · CVSS 9.8EPSS 5,04%Correctif disponible

    CVE-2020-9580

    Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

    magento/corePHP
    • Mettez à jour vers 1.9.4.5
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  12. CVE-2020-9581

    Moyenne · CVSS 6.1EPSS 1,5%Correctif disponible

    CVE-2020-9581

    Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

    magento/corePHP
    • Mettez à jour vers 1.9.4.5
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  13. CVE-2020-9582

    Critique · CVSS 9.8EPSS 5,72%Correctif disponible

    CVE-2020-9582

    Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

    magento/corePHP
    • Mettez à jour vers 1.9.4.5
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  14. CVE-2020-9583

    Critique · CVSS 9.8EPSS 5,72%Correctif disponible

    CVE-2020-9583

    Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

    magento/corePHP
    • Mettez à jour vers 1.9.4.5
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  15. CVE-2020-9587

    Élevée · CVSS 7.5EPSS 5,01%Correctif disponible

    CVE-2020-9587

    Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypass vulnerability. Successful exploitation could lead to potentially unauthorized product discounts.

    magento/corePHP
    • Mettez à jour vers 1.9.4.5
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  16. CVE-2020-9584

    Moyenne · CVSS 5.4EPSS 1,17%Correctif disponible

    CVE-2020-9584

    Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

    magento/corePHP
    • Mettez à jour vers 1.9.4.5
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  17. CVE-2020-9579

    Critique · CVSS 9.8EPSS 5,04%Correctif disponible

    CVE-2020-9579

    Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

    magento/corePHP
    • Mettez à jour vers 1.9.4.5
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  18. CVE-2020-9585

    Critique · CVSS 9.8EPSS 4,95%Correctif disponible

    CVE-2020-9585

    Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a defense-in-depth security mitigation vulnerability. Successful exploitation could lead to arbitrary code execution.

    magento/corePHP
    • Mettez à jour vers 1.9.4.5
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  19. CVE-2020-3719

    Élevée · CVSS 7.5EPSS 3,16%Correctif disponible

    CVE-2020-3719

    Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have an sql injection vulnerability. Successful exploitation could lead to sensitive information disclosure.

    magento/corePHP
    • Mettez à jour vers 1.9.4.4
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

  20. CVE-2020-3715

    Moyenne · CVSS 6.1EPSS 1,84%Correctif disponible

    CVE-2020-3715

    Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

    magento/corePHP
    • Mettez à jour vers 1.9.4.4
    Publication Mise à jour
    Avis original 1 ↗Avis original 2 ↗

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →