Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 06:27:43 +0000 certfr-2019-avi-295 — De multiples vulnérabilités ont été découvertes dans les produits Magento. Certaines d'entre elles permettent à un atta… https://cve.radiocsirt.org/vuln/certfr-2019-avi-295 certfr-2019-avi-295 https://cve.radiocsirt.org/vuln/certfr-2019-avi-295 cnvd-2019-39392 https://cve.radiocsirt.org/vuln/cnvd-2019-39392 cnvd-2019-39392 https://cve.radiocsirt.org/vuln/cnvd-2019-39392 EUVD-2026-51737 https://cve.radiocsirt.org/vuln/euvd-2026-51737 EUVD-2026-51737 https://cve.radiocsirt.org/vuln/euvd-2026-51737 fkie_cve-2019-7923 https://cve.radiocsirt.org/vuln/fkie_cve-2019-7923 <p>A server-side request forgery (SSRF) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by authenticated user with admin privileges to manipulate shipment settings to execute arbitrary code.</p> <p>A server-side request forgery (SSRF) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by authenticated user with admin privileges to manipulate shipment settings to execute arbitrary code.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-7923 GHSA-hvcp-jvx5-4pmp — Magento 2 Community Edition SSRF vulnerability https://cve.radiocsirt.org/vuln/ghsa-hvcp-jvx5-4pmp <p><strong>Affected:</strong> Packagist: magento/community-edition</p> <p>A server-side request forgery (SSRF) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by authenticated user with admin privileges to manipulate shipment settings to execute arbitrary code.</p> <p><strong>Affected:</strong> Packagist: magento/community-edition</p> <p>A server-side request forgery (SSRF) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by authenticated user with admin privileges to manipulate shipment settings to execute arbitrary code.</p> https://cve.radiocsirt.org/vuln/ghsa-hvcp-jvx5-4pmp gsd-2019-7923 https://cve.radiocsirt.org/vuln/gsd-2019-7923 gsd-2019-7923 https://cve.radiocsirt.org/vuln/gsd-2019-7923