https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 07:29:31 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-01767 bdu:2023-01767 https://cve.radiocsirt.org/vuln/bdu:2023-01767 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0227 certfr-2023-avi-0227 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0227 https://cve.radiocsirt.org/vuln/euvd-2026-220861 EUVD-2026-220861 https://cve.radiocsirt.org/vuln/euvd-2026-220861 https://cve.radiocsirt.org/vuln/fkie_cve-2023-22247 <p>Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an XML Injection vulnerability that could lead to arbitrary file system read. An unauthenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.</p> <p>Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an XML Injection vulnerability that could lead to arbitrary file system read. An unauthenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-22247 https://cve.radiocsirt.org/vuln/ghsa-2444-8gj8-6fmx <p><strong>Affected:</strong> Packagist: magento/community-edition, Packagist: magento/project-community-edition</p> <p>Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an XML Injection vulnerability that could lead to arbitrary file system read. An unauthenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.</p> <p><strong>Affected:</strong> Packagist: magento/community-edition, Packagist: magento/project-community-edition</p> <p>Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an XML Injection vulnerability that could lead to arbitrary file system read. An unauthenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.</p> https://cve.radiocsirt.org/vuln/ghsa-2444-8gj8-6fmx https://cve.radiocsirt.org/vuln/gsd-2023-22247 gsd-2023-22247 https://cve.radiocsirt.org/vuln/gsd-2023-22247 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0652 <p>Ein Angreifer kann mehrere Schwachstellen in Adobe Magento ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Adobe Magento ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0652