Filtered by vendor Centarro
Subscribe
Total
3 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-81159 | 1 Centarro | 1 Commerce Cybersource | 2026-09-16 | N/A | 3.7 LOW |
| Observable Timing Discrepancy vulnerability in Drupal Commerce CyberSource allows Brute Force. This issue affects Commerce CyberSource versions: from 0.0.0 to 1.10.0. | |||||
| CVE-2026-73475 | 1 Centarro | 1 Commerce Paypal | 2026-09-08 | N/A | 9.1 CRITICAL |
| Incorrect Authorization vulnerability in Drupal Commerce PayPal allows Forceful Browsing. This issue affects Commerce PayPal versions: from 0.0.0 to 1.12.0, from 2.0.0 to 2.1.3. | |||||
| CVE-2026-10769 | 1 Centarro | 1 Commerce Core | 2026-08-06 | N/A | 5.4 MEDIUM |
| Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce Core allows Stored XSS. This issue affects Commerce Core versions: from 3.3.0 to 3.3.6. | |||||