.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

magento/core vulnerabilities

24 known advisories · Dependencies not checked

SEVERITYADVISORYPUBLISHED

Some details missing

CriticalMagento php object injection vulnerabilityGHSA-337c-3rch-q35jCVE-2020-9664Affected <=1.9.4.5OSV source ↗4 years ago

CriticalMagento business logic error vulnerabilityGHSA-5j4w-v87m-8r65BIT-magento-2020-9630CVE-2020-9630Affected <1.9.4.5Fixed in 1.9.4.5OSV source ↗4 years ago

CriticalMagento security mitigation bypass vulnerabilityGHSA-6w29-x5j4-qhrwBIT-magento-2020-9632CVE-2020-9632Affected <1.9.4.5Fixed in 1.9.4.5OSV source ↗4 years ago

CriticalMagento security mitigation bypass vulnerabilityGHSA-gffx-9f36-r8wpBIT-magento-2020-9631CVE-2020-9631Affected <1.9.4.5Fixed in 1.9.4.5OSV source ↗4 years ago

CriticalMagento Defense-in-depth security mitigation vulnerabilityGHSA-55gv-hfg3-hwjqBIT-magento-2020-9585CVE-2020-9585Affected <1.9.4.5Fixed in 1.9.4.5OSV source ↗4 years ago

CriticalMagento command injection vulnerabilityGHSA-c3m4-hxv9-4mxjBIT-magento-2020-9582CVE-2020-9582Affected <1.9.4.5Fixed in 1.9.4.5OSV source ↗4 years ago

CriticalMagento command injection vulnerabilityGHSA-c55h-7q4j-g6rqBIT-magento-2020-9583CVE-2020-9583Affected <1.9.4.5Fixed in 1.9.4.5OSV source ↗4 years ago

CriticalMagento command injection vulnerabilityGHSA-4f7x-gjqc-qqpgBIT-magento-2020-9576CVE-2020-9576Affected <1.9.4.5Fixed in 1.9.4.5OSV source ↗4 years ago

CriticalMagento command injection vulnerabilityGHSA-724x-gqhv-9c5xBIT-magento-2020-9578CVE-2020-9578Affected <1.9.4.5Fixed in 1.9.4.5OSV source ↗4 years ago

CriticalMagento Security mitigation bypass vulnerabilityGHSA-j2jp-58gv-g2pgBIT-magento-2020-9580CVE-2020-9580Affected <1.9.4.5Fixed in 1.9.4.5OSV source ↗4 years ago

CriticalMagento Security mitigation bypass vulnerabilityGHSA-vrp3-wc28-qg2hBIT-magento-2020-9579CVE-2020-9579Affected <1.9.4.5Fixed in 1.9.4.5OSV source ↗4 years ago

HighMagento arbitrary PHP code execution via the productData parameterGHSA-j4fq-3fm7-wh5vCVE-2015-6497Affected <1.9.2.1Fixed in 1.9.2.1OSV source ↗4 years ago

HighMagento defense-in-depth security mitigation vulnerabilityGHSA-w7rh-9w5v-rwqjBIT-magento-2020-9591CVE-2020-9591Affected <1.9.4.5Fixed in 1.9.4.5OSV source ↗4 years ago

HighMagento authorization bypass vulnerabilityGHSA-8wm7-h2qh-ff4cBIT-magento-2020-9587CVE-2020-9587Affected <1.9.4.5Fixed in 1.9.4.5OSV source ↗4 years ago

HighMagento sql injection vulnerabilityGHSA-rr59-pjwj-6grjBIT-magento-2020-3719CVE-2020-3719Affected <1.9.4.4Fixed in 1.9.4.4OSV source ↗4 years ago

HighMagento Signature verification bypassGHSA-j2r4-2cr6-h3r3BIT-magento-2020-9588CVE-2020-9588Affected <1.9.4.5Fixed in 1.9.4.5OSV source ↗4 years ago

HighMagento Remote code execution through catalog attribute setsGHSA-qpc8-m2xm-9w75CVE-2019-8231Affected <1.9.4.3Fixed in 1.9.4.3OSV source ↗4 years ago

HighMagento Remote code execution through support/output path modificationGHSA-qp43-2vhf-cj8gCVE-2019-8230Affected <1.9.4.3Fixed in 1.9.4.3OSV source ↗4 years ago

MediumMagento stored cross-site scripting vulnerabilityGHSA-xc4p-j89c-p7x5CVE-2020-9665Affected <=1.9.4.5OSV source ↗4 years ago

MediumMagento stored cross-site scripting vulnerabilityGHSA-2w2x-7qgj-4x78BIT-magento-2020-9581CVE-2020-9581Affected <1.9.4.5Fixed in 1.9.4.5OSV source ↗4 years ago

MediumMagento stored cross-site scripting vulnerabilityGHSA-689w-2f93-2x67BIT-magento-2020-9577CVE-2020-9577Affected <1.9.4.5Fixed in 1.9.4.5OSV source ↗4 years ago

MediumMagento stored cross-site scripting vulnerabilityGHSA-mgg3-v948-2vgrBIT-magento-2020-3715CVE-2020-3715Affected <1.9.4.4Fixed in 1.9.4.4OSV source ↗4 years ago

MediumMagento Stored cross-site scriptingGHSA-45h4-6gcj-6hwvBIT-magento-2020-9584CVE-2020-9584Affected <1.9.4.5Fixed in 1.9.4.5OSV source ↗4 years ago

MediumMagento XSS VulnerabilityGHSA-j49x-jjmj-9fqjCVE-2019-8227Affected <1.9.4.3Fixed in 1.9.4.3OSV source ↗4 years ago