https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 11:55:27 +0000 https://cve.radiocsirt.org/vuln/certfr-2019-avi-492 certfr-2019-avi-492 https://cve.radiocsirt.org/vuln/certfr-2019-avi-492 https://cve.radiocsirt.org/vuln/cnvd-2019-40828 cnvd-2019-40828 https://cve.radiocsirt.org/vuln/cnvd-2019-40828 https://cve.radiocsirt.org/vuln/euvd-2026-51885 EUVD-2026-51885 https://cve.radiocsirt.org/vuln/euvd-2026-51885 https://cve.radiocsirt.org/vuln/fkie_cve-2019-8114 <p>A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to import features can execute arbitrary code via crafted configuration archive file upload.</p> <p>A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to import features can execute arbitrary code via crafted configuration archive file upload.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-8114 https://cve.radiocsirt.org/vuln/ghsa-crv7-r357-gw3w <p><strong>Affected:</strong> Packagist: magento/community-edition, Packagist: magento/project-community-edition</p> <p>A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to import features can execute arbitrary code via crafted configuration archive file upload.</p> <p>As per [the Magento Release 2.3.3](https://web.archive.org/web/20201126132230/https://devdocs.magento.com/guides/v2.3/release-notes/release-notes-2-3-3-commerce.html#new-security-only-patch-available), if you have already implemented the pre-release version of this patch (2.3.2-p1), it is highly recommended to promptly upgrade to 2.3.2-p2.</p> <p><strong>Affected:</strong> Packagist: magento/community-edition, Packagist: magento/project-community-edition</p> <p>A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to import features can execute arbitrary code via crafted configuration archive file upload.</p> <p>As per [the Magento Release 2.3.3](https://web.archive.org/web/20201126132230/https://devdocs.magento.com/guides/v2.3/release-notes/release-notes-2-3-3-commerce.html#new-security-only-patch-available), if you have already implemented the pre-release version of this patch (2.3.2-p1), it is highly recommended to promptly upgrade to 2.3.2-p2.</p> https://cve.radiocsirt.org/vuln/ghsa-crv7-r357-gw3w https://cve.radiocsirt.org/vuln/gsd-2019-8114 gsd-2019-8114 https://cve.radiocsirt.org/vuln/gsd-2019-8114