PkgSeer

Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
openmage/magento-lts Magento LTS vulnerable to Stored XSS via TinyMCE WYSIWYG Editor High Risk 7.5 2 years ago 16 hours ago
openmage/magento-lts Magento LTS vulnerable to stored Cross-site Scripting (XSS) in admin system configs Medium Risk 4.1 2 years ago 2 months ago
openmage/magento-lts DoS vulnerability in MaliciousCode filter Medium Risk 4.9 3 years ago 2 months ago
openmage/magento-lts Fix for arbitrary file deletion in customer media allows for remote code execution High Risk 7.2 3 years ago 4 months ago
openmage/magento-lts Fix for arbitrary command execution in custom layout update through blocks High Risk 7.2 3 years ago 4 months ago
openmage/magento-lts Fix for authenticated remote code execution through layout update High Risk 8.8 3 years ago 4 months ago
openmage/magento-lts Backport for CVE-2021-21024 Blind SQLi from Magento 2 Critical 9.1 5 years ago 4 months ago
openmage/magento-lts Layout XML Arbitrary Code Fix High Risk 8.0 5 years ago 4 months ago
openmage/magento-lts Fixes a bug in Zend Framework's Stream HTTP Wrapper Critical 9.8 5 years ago 4 months ago
openmage/magento-lts DataFlow upload remote code execution vulnerability High Risk 7.2 3 years ago 4 months ago
openmage/magento-lts magento-lts Reset Password not protected against well-timed CSRF Medium Risk 4.3 3 years ago 4 months ago
openmage/magento-lts Data Flow Sanitation Issue Fix High Risk 8.0 5 years ago 4 months ago
openmage/magento-lts RCE via PHP Object injection via SOAP Requests High Risk 8.0 6 years ago 4 months ago
openmage/magento-lts Observable Timing Discrepancy in OpenMage LTS High Risk 8.0 6 years ago 4 months ago
openmage/magento-lts Magento LTS: Reflected XSS - Import -> Data Flow (profiles) Medium Risk 6.0 6 months ago 6 months ago
openmage/magento-lts Magento LTS Vulnerable to Open Redirect via Unvalidated `uenc` Parameter in `stockAction()` Medium Risk 6.1 6 months ago 6 months ago
openmage/magento-lts Magento LTS has Weak API Session ID — Predictable MD5 of Time-Derived Inputs Critical 9.5 6 months ago 6 months ago
openmage/magento-lts OpenMage LTS: Cross-user wishlist import leads to private option & file disclosure Medium Risk 5.4 6 months ago 6 months ago
openmage/magento-lts OpenMage LTS: Customer File Upload Extension Blocklist Bypass → Remote Code Execution High Risk 8.8 6 months ago 6 months ago
openmage/magento-lts OpenMage LTS has a Path Traversal Filter Bypass in Dataflow Module Medium Risk 4.9 6 months ago 6 months ago
openmage/magento-lts OpenMage LTS: Phar Deserialization leads to Remote Code Execution High Risk 8.1 6 months ago 6 months ago
openmage/magento-lts Magento's X-Original-Url header can expose admin url Medium Risk 5.3 9 months ago 9 months ago
openmage/magento-lts OpenMage vulnerable to XSS in Admin Notifications Medium Risk 6.0 1 year ago 1 year ago
openmage/magento-lts Magento LTS vulnerable to stored XSS in theme config fields Low Risk 2.9 1 year ago 1 year ago
openmage/magento-lts Magento LTS vulnerable to stored XSS in admin file form Medium Risk 5.4 2 years ago 1 year ago
openmage/magento-lts Magento LTS's guest order "protect code" can be brute-forced too easily High Risk 7.5 3 years ago 2 years ago
Data courtesy of OSV.dev
Page 1