Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Magento Subscribe
Filtered by product Advanced Newsletter
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-1634 1 Magento 1 Advanced Newsletter 2020-03-10 10.0 HIGH 9.8 CRITICAL
SQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via the /store/advancednewsletter/index/subscribeajax/an_category_id/ PATH_INFO.