https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 21:33:56 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-08215 bdu:2024-08215 https://cve.radiocsirt.org/vuln/bdu:2024-08215 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0848 certfr-2024-avi-0848 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0848 https://cve.radiocsirt.org/vuln/cnvd-2024-41454 cnvd-2024-41454 https://cve.radiocsirt.org/vuln/cnvd-2024-41454 https://cve.radiocsirt.org/vuln/euvd-2026-194632 EUVD-2026-194632 https://cve.radiocsirt.org/vuln/euvd-2026-194632 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45117 <p>Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An admin attacker could exploit this vulnerability to read files from the system outside of the intended directories via PHP filter chain and also can have a low-availability impact on the service. Exploitation of this issue does not require user interaction and scope is changed.</p> <p>Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An admin attacker could exploit this vulnerability to read files from the system outside of the intended directories via PHP filter chain and also can have a low-availability impact on the service. Exploitation of this issue does not require user interaction and scope is changed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-45117 https://cve.radiocsirt.org/vuln/ghsa-3fr3-gcqh-3m2g <p><strong>Affected:</strong> Packagist: magento/community-edition</p> <p>Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An admin attacker could exploit this vulnerability to read files from the system outside of the intended directories via PHP filter chain and also can have a low-availability impact on the service. Exploitation of this issue does not require user interaction and scope is changed.</p> <p><strong>Affected:</strong> Packagist: magento/community-edition</p> <p>Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An admin attacker could exploit this vulnerability to read files from the system outside of the intended directories via PHP filter chain and also can have a low-availability impact on the service. Exploitation of this issue does not require user interaction and scope is changed.</p> https://cve.radiocsirt.org/vuln/ghsa-3fr3-gcqh-3m2g https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3117 <p>Ein Angreifer kann mehrere Schwachstellen in Adobe Magento ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Daten zu verändern, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen preiszugeben.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Adobe Magento ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Daten zu verändern, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen preiszugeben.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3117