Search vulnerabilities

Results 425,948

CVE-2020-9587

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypass vulnerability. Successful exploitation could lead to potentially unauthorized product discounts.

CVSS 3.1 · 7.5 High EPSS 5.0% KEV · Not listed
Vendors
Products
CVE-2020-9585

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a defense-in-depth security mitigation vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 9.8 Critical EPSS 5.1% KEV · Not listed
Vendors
Products
CVE-2020-9584

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

CVSS 3.1 · 5.4 Medium EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2020-9583

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 9.8 Critical EPSS 5.9% KEV · Not listed
Vendors
Products
CVE-2020-9582

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 9.8 Critical EPSS 5.9% KEV · Not listed
Vendors
Products
CVE-2020-9581

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

CVSS 3.1 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2020-9580

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 9.8 Critical EPSS 5.2% KEV · Not listed
Vendors
Products
CVE-2020-9579

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 9.8 Critical EPSS 5.2% KEV · Not listed
Vendors
Products
CVE-2020-9578

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 9.8 Critical EPSS 5.9% KEV · Not listed
Vendors
Products
CVE-2020-9577

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure .

CVSS 3.1 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2020-9576

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 9.8 Critical EPSS 5.9% KEV · Not listed
Vendors
Products
CVE-2020-9575

Adobe Illustrator versions 24.1.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .

CVSS 3.1 · 7.8 High EPSS 3.0% KEV · Not listed
Vendors
Products
CVE-2020-9574

Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .

CVSS 3.1 · 7.8 High EPSS 3.5% KEV · Not listed
Vendors
Products
CVE-2020-9573

Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 7.8 High EPSS 3.5% KEV · Not listed
Vendors
Products
CVE-2020-9572

Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 7.8 High EPSS 3.4% KEV · Not listed
Vendors
Products
CVE-2020-9571

Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS 3.1 · 7.8 High EPSS 3.5% KEV · Not listed
Vendors
Products
CVE-2020-9570

Adobe Illustrator versions 24.0.2 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code execution .

CVSS 3.1 · 7.8 High EPSS 3.5% KEV · Not listed
Vendors
Products
CVE-2020-9558

Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

CVSS 3.1 · 3.3 Low EPSS 2.1% KEV · Not listed
Vendors
Products
CVE-2020-9557

Adobe Bridge versions 10.0.1 and earlier version have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.

CVSS 3.1 · 5.5 Medium EPSS 2.6% KEV · Not listed
Vendors
Products