Most recent entries from all

bdu:2025-05399

2026-10-07T00:27:11.279083+00:00

bdu:2025-05399

certfr-2025-avi-0122 — De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaqu…

2026-10-07T00:27:11.279134+00:00

certfr-2025-avi-0122

cnvd-2025-03636

2026-10-07T00:27:11.279161+00:00

cnvd-2025-03636

EUVD-2026-230129

2026-10-07T00:27:11.279181+00:00

EUVD-2026-230129

fkie_cve-2025-24436

2026-10-07T00:27:11.279197+00:00

Adobe Commerce versions 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11, 2.4.8-beta1 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerability to view select information. Exploitation of this issue does not require user interaction.

GHSA-ghpr-6qhr-rpp8 — Magento Improper Access Control vulnerability

2026-10-07T00:27:11.279262+00:00

Affected: Packagist: magento/community-edition, Packagist: magento/project-community-edition

Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.

WID-SEC-W-2025-0337 — Adobe Magento: Mehrere Schwachstellen

2026-10-07T00:27:11.279318+00:00

Ein Angreifer kann diese Schwachstellen ausnutzen, um sich erweiterte Rechte zu verschaffen, Sicherheitsmaßnahmen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen und beliebigen Code auszuführen.