Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 16:04:39 +0000 certfr-2019-avi-295 — De multiples vulnérabilités ont été découvertes dans les produits Magento. Certaines d'entre elles permettent à un atta… https://cve.radiocsirt.org/vuln/certfr-2019-avi-295 certfr-2019-avi-295 https://cve.radiocsirt.org/vuln/certfr-2019-avi-295 cnvd-2019-39394 https://cve.radiocsirt.org/vuln/cnvd-2019-39394 cnvd-2019-39394 https://cve.radiocsirt.org/vuln/cnvd-2019-39394 EUVD-2026-51667 https://cve.radiocsirt.org/vuln/euvd-2026-51667 EUVD-2026-51667 https://cve.radiocsirt.org/vuln/euvd-2026-51667 fkie_cve-2019-7871 https://cve.radiocsirt.org/vuln/fkie_cve-2019-7871 <p>A security bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 that could be abused to execute arbitrary PHP code. An authenticated user can bypass security protections that prevent arbitrary PHP script upload via form data injection.</p> <p>A security bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 that could be abused to execute arbitrary PHP code. An authenticated user can bypass security protections that prevent arbitrary PHP script upload via form data injection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-7871 GHSA-v527-6h5r-cfg8 — Magento 2 Community Edition Unsafe File Upload https://cve.radiocsirt.org/vuln/ghsa-v527-6h5r-cfg8 <p><strong>Affected:</strong> Packagist: magento/community-edition</p> <p>A security bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 that could be abused to execute arbitrary PHP code. An authenticated user can bypass security protections that prevent arbitrary PHP script upload via form data injection.</p> <p><strong>Affected:</strong> Packagist: magento/community-edition</p> <p>A security bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 that could be abused to execute arbitrary PHP code. An authenticated user can bypass security protections that prevent arbitrary PHP script upload via form data injection.</p> https://cve.radiocsirt.org/vuln/ghsa-v527-6h5r-cfg8 gsd-2019-7871 https://cve.radiocsirt.org/vuln/gsd-2019-7871 gsd-2019-7871 https://cve.radiocsirt.org/vuln/gsd-2019-7871