Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 17:31:02 +0000 bdu:2022-01395 https://cve.radiocsirt.org/vuln/bdu:2022-01395 bdu:2022-01395 https://cve.radiocsirt.org/vuln/bdu:2022-01395 certfr-2021-avi-609 — De multiples vulnérabilités ont été découvertes dans Magento. Certaines d'entre elles permettent à un attaquant de prov… https://cve.radiocsirt.org/vuln/certfr-2021-avi-609 certfr-2021-avi-609 https://cve.radiocsirt.org/vuln/certfr-2021-avi-609 cnvd-2021-90925 https://cve.radiocsirt.org/vuln/cnvd-2021-90925 cnvd-2021-90925 https://cve.radiocsirt.org/vuln/cnvd-2021-90925 EUVD-2026-179926 https://cve.radiocsirt.org/vuln/euvd-2026-179926 EUVD-2026-179926 https://cve.radiocsirt.org/vuln/euvd-2026-179926 fkie_cve-2021-36042 https://cve.radiocsirt.org/vuln/fkie_cve-2021-36042 <p>Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability in the API File Option Upload Extension. An attacker with Admin privileges can achieve unrestricted file upload which can result in remote code execution.</p> <p>Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability in the API File Option Upload Extension. An attacker with Admin privileges can achieve unrestricted file upload which can result in remote code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-36042 GHSA-6cwv-wj7v-73xp — Magento executes code via the API File Option Upload Extension https://cve.radiocsirt.org/vuln/ghsa-6cwv-wj7v-73xp <p><strong>Affected:</strong> Packagist: magento/project-community-edition, Packagist: magento/community-edition</p> <p>Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability in the API File Option Upload Extension. An attacker with Admin privileges can achieve unrestricted file upload which can result in remote code execution.</p> <p><strong>Affected:</strong> Packagist: magento/project-community-edition, Packagist: magento/community-edition</p> <p>Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability in the API File Option Upload Extension. An attacker with Admin privileges can achieve unrestricted file upload which can result in remote code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-6cwv-wj7v-73xp gsd-2021-36042 https://cve.radiocsirt.org/vuln/gsd-2021-36042 gsd-2021-36042 https://cve.radiocsirt.org/vuln/gsd-2021-36042