https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T11:24:30.178055+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2019-avi-492 certfr-2019-avi-492 — De multiples vulnérabilités ont été découvertes dans les produits Magento. Certaines d'entre elles permettent à un atta… 2026-10-25T11:24:30.245331+00:00 certfr-2019-avi-492 https://cve.radiocsirt.org/vuln/cnvd-2019-40730 cnvd-2019-40730 2026-10-25T11:24:30.245372+00:00 cnvd-2019-40730 https://cve.radiocsirt.org/vuln/euvd-2026-51922 EUVD-2026-51922 2026-10-25T11:24:30.245389+00:00 EUVD-2026-51922 https://cve.radiocsirt.org/vuln/fkie_cve-2019-8140 fkie_cve-2019-8140 2026-10-25T11:24:30.245401+00:00

An unrestricted file upload vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can manipulate the Synchronization feature in the Media File Storage of the database to transform uploaded JPEG file into a PHP file.

 https://cve.radiocsirt.org/vuln/ghsa-7pr3-34rg-g53m GHSA-7pr3-34rg-g53m — Magento Unrestricted file upload vulnerability 2026-10-25T11:24:30.245428+00:00

Affected: Packagist: magento/community-edition

An unrestricted file upload vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can manipulate the Synchronization feature in the Media File Storage of the database to transform uploaded JPEG file into a PHP file.

 https://cve.radiocsirt.org/vuln/gsd-2019-8140 gsd-2019-8140 2026-10-25T11:24:30.245452+00:00 gsd-2019-8140