Filtered by vendor Magentocommerce
Subscriptions
Filtered by product Magento
Subscriptions
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2011-5240 | 1 Magentocommerce | 1 Magento | 2025-04-11 | N/A |
Magento 1.5 and 1.6.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. | ||||
CVE-2012-6091 | 1 Magentocommerce | 1 Magento | 2024-11-21 | 7.5 High |
Zend_XmlRpc Class in Magento before 1.7.0.2 contains an information disclosure vulnerability. |
Page 1 of 1.