Most recent entries from all

bdu:2024-06818

2026-10-07T11:34:22.403591+00:00

bdu:2024-06818

certfr-2024-avi-0678 — De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaqu…

2026-10-07T11:34:22.403629+00:00

certfr-2024-avi-0678

cnvd-2024-44532

2026-10-07T11:34:22.403649+00:00

cnvd-2024-44532

EUVD-2026-158464

2026-10-07T11:34:22.403662+00:00

EUVD-2026-158464

fkie_cve-2024-39403

2026-10-07T11:34:22.403673+00:00

Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Confidentiality impact is high due to the attacker being able to exfiltrate sensitive information.

GHSA-mmp7-8cg4-9wrg — Magento Stored Cross-Site Scripting (XSS) vulnerability

2026-10-07T11:34:22.403705+00:00

Affected: Packagist: magento/project-community-edition, Packagist: magento/community-edition

Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Confidentiality impact is high due to the attacker being able to exfiltrate sensitive information.

WID-SEC-W-2024-1840 — Adobe Magento: Mehrere Schwachstellen

2026-10-07T11:34:22.403737+00:00

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Adobe Magento ausnutzen, um seine Rechte zu erweitern, beliebigen Code auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen oder vertrauliche Informationen offenzulegen.