https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 08:24:00 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-10817 bdu:2025-10817 https://cve.radiocsirt.org/vuln/bdu:2025-10817 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0678 certfr-2025-avi-0678 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0678 https://cve.radiocsirt.org/vuln/euvd-2026-272242 EUVD-2026-272242 https://cve.radiocsirt.org/vuln/euvd-2026-272242 https://cve.radiocsirt.org/vuln/fkie_cve-2025-49557 <p>Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high. Exploitation of this issue requires user interaction in that a victim must browse to the page containing the vulnerable field. Scope is changed.</p> <p>Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high. Exploitation of this issue requires user interaction in that a victim must browse to the page containing the vulnerable field. Scope is changed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-49557 https://cve.radiocsirt.org/vuln/ghsa-8mq8-c243-2335 <p><strong>Affected:</strong> Packagist: magento/community-edition, Packagist: magento/project-community-edition</p> <p>Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. These scripts may be used to escalate privileges within the application or compromise sensitive user data. Exploitation of this issue requires user interaction in that a victim must browse to the page containing the vulnerable field. Scope is changed.</p> <p><strong>Affected:</strong> Packagist: magento/community-edition, Packagist: magento/project-community-edition</p> <p>Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form fields. These scripts may be used to escalate privileges within the application or compromise sensitive user data. Exploitation of this issue requires user interaction in that a victim must browse to the page containing the vulnerable field. Scope is changed.</p> https://cve.radiocsirt.org/vuln/ghsa-8mq8-c243-2335 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1791 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe Magento ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und erhöhte Berechtigungen zu erlangen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Adobe Magento ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und erhöhte Berechtigungen zu erlangen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1791