Search for packages
| purl | pkg:composer/magento/core@1.9.4%2B5 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-xc4p-j89c-p7x5
Aliases: CVE-2020-9665 |
Magento stored cross-site scripting vulnerability Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a stored cross-site scripting vulnerability. … | There are no reported fixed by versions. |
|
GHSA-337c-3rch-q35j
Aliases: CVE-2020-9664 |
Magento php object injection vulnerability Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a php object injection vulnerability. … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-55gv-hfg3-hwjq
|
Magento Defense-in-depth security mitigation vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 … |
CVE-2020-9585
|
|
GHSA-8wm7-h2qh-ff4c
|
Magento authorization bypass vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and … |
CVE-2020-9587
|
|
GHSA-j2r4-2cr6-h3r3
|
Magento Signature verification bypass Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and … |
CVE-2020-9588
|
|
GHSA-j2jp-58gv-g2pg
|
Magento Security mitigation bypass vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 … |
CVE-2020-9580
|
|
GHSA-6w29-x5j4-qhrw
|
Magento security mitigation bypass vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 … |
CVE-2020-9632
|
|
GHSA-2w2x-7qgj-4x78
|
Magento stored cross-site scripting vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 … |
CVE-2020-9581
|
|
GHSA-689w-2f93-2x67
|
Magento stored cross-site scripting vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 … |
CVE-2020-9577
|
|
GHSA-c3m4-hxv9-4mxj
|
Magento command injection vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and … |
CVE-2020-9582
|
|
GHSA-724x-gqhv-9c5x
|
Magento command injection vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and … |
CVE-2020-9578
|
|
GHSA-4f7x-gjqc-qqpg
|
Magento command injection vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and … |
CVE-2020-9576
|
|
GHSA-45h4-6gcj-6hwv
|
Magento Stored cross-site scripting Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and … |
CVE-2020-9584
|
|
GHSA-gffx-9f36-r8wp
|
Magento security mitigation bypass vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 … |
CVE-2020-9631
|
|
GHSA-c55h-7q4j-g6rq
|
Magento command injection vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and … |
CVE-2020-9583
|
|
GHSA-5j4w-v87m-8r65
|
Magento business logic error vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 … |
CVE-2020-9630
|
|
GHSA-vrp3-wc28-qg2h
|
Magento Security mitigation bypass vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 … |
CVE-2020-9579
|
|
GHSA-w7rh-9w5v-rwqj
|
Magento defense-in-depth security mitigation vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 … |
CVE-2020-9591
|