Security advisories

critical2022-05-24

CVE-2021-36033-Magento XML Injection vulnerability in the Widgets Module

View chart →

magento/magento2 · GHSA-p746-qw73-qmmx

high2022-05-24

CVE-2021-36029-Magento improper authorization vulnerability

View chart →

magento/magento2 · GHSA-m8wx-whpp-q283

critical2022-05-24

CVE-2021-36025-Magento is affected by an improper input validation vulnerability while saving a customer's details

View chart →

magento/magento2 · GHSA-gvfx-9m9v-h839

high2022-05-24

CVE-2021-36031-Magento Path Traversal vulnerability via the `theme[preview_image]` parameter

View chart →

magento/magento2 · GHSA-7w95-qwhh-q9p3

high2022-05-24

CVE-2021-36032-Magento is affected by an improper input validation vulnerability

View chart →

magento/magento2 · GHSA-5vw8-r55w-f4q4

critical2022-05-24

CVE-2021-36028-Magento has an XML Injection vulnerability

View chart →

magento/magento2 · GHSA-5pjj-7fq8-9gpf

medium2022-05-24

CVE-2021-36038-Magento discloses sensitive information via the Multishipping Module

View chart →

magento/magento2 · GHSA-wgpr-9675-8r67

medium2022-05-24

CVE-2021-36037-Magento is affected by an improper authorization vulnerability

View chart →

magento/magento2 · GHSA-vrq2-w7r7-3fp2

high2022-05-24

CVE-2021-36041-Magento vulnerable to file upload attack

View chart →

magento/magento2 · GHSA-mx5m-j5xr-jg8c

high2022-05-24

CVE-2021-36034-Magento affected by remote code execution via a file upload

View chart →

magento/magento2 · GHSA-j46h-qjjv-cxfj

critical2022-05-24

CVE-2021-36042-Magento executes code via the API File Option Upload Extension

View chart →

magento/magento2 · GHSA-6cwv-wj7v-73xp

medium2022-05-24

CVE-2021-36039-Magento discloses sensitive information

View chart →

magento/magento2 · GHSA-3g7m-g8qm-x6j5

high2022-05-24

CVE-2021-36043-Magento affected by a blind SSRF vulnerability in the bundled dotmailer extension

View chart →

magento/magento2 · GHSA-36xq-7w8w-xp68

critical2022-05-24

CVE-2021-36040-Magento has a file extension restrictions bypass

View chart →

magento/magento2 · GHSA-2pq5-gpqf-g4r3

high2022-05-24

CVE-2021-36044-Magento affected by a server-side denial-of-service using a GraphQL field

View chart →

magento/magento2 · GHSA-wr57-3h2f-3q95

high2022-05-24

CVE-2021-21678-Jenkins SAML Plugin allows bypassing CSRF protection for any URL

View chart →

jenkinsci/saml-plugin · GHSA-r5w3-pfq8-3r82

high2022-05-24

CVE-2021-21679-Jenkins Azure AD Plugin allows bypassing CSRF protection for any URL

View chart →

jenkinsci/azure-ad-plugin · GHSA-x77r-7m5w-pqq2

high2022-05-24

CVE-2021-21680-XXE vulnerability in Jenkins Nested View Plugin

View chart →

jenkinsci/nested-view-plugin · GHSA-5wc4-w63v-97c3

medium2022-05-24

CVE-2021-21681-Password stored in plain text by Jenkins Nomad Plugin

View chart →

jenkinsci/nomad-plugin · GHSA-5c2c-cvg6-ghjm

high2022-05-24

CVE-2021-21677-RCE vulnerability in Jenkins Code Coverage API Plugin

View chart →

jenkinsci/code-coverage-api-plugin · GHSA-58pr-hprx-7hg6