Filter
-Infinity
0
Trending
Yii FrameworkYiiframework Yii Improper Protection of Alternate Path Vulnerability
First published (updated )
Yii Frameworkyiisoft/yii before v1.1.27 vulnerable to Remote Code Execution if the application calls `unserialize()` on arbitrary user input
9.8
First published (updated )
composer/yiisoft/yii2Unsafe Reflection in base Component class in yiisoft/yii2
9.1
EPSS
0.03%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Yii Framework 2yiisoft Yii2 SortableIterator.php getIterator deserialization
9.8
EPSS
0.04%
First published (updated )
Yii Framework 2yiisoft Yii2 MockClass.php generate deserialization
9.8
EPSS
0.03%
First published (updated )
composer/yiisoft/yii2-authclientThe Oauth2 PKCE implementation is vulnerable
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/yiisoft/yii2Yii 2.x through 2.0.15.1 actively converts a wildcard CORS policy into reflecting an arbitrary Origi…
5.9
First published (updated )
composer/yiisoft/yiiUnsafe deserialization of user data in yiisoft/yii
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/yiisoft/yii2Unsafe deserialization in Yii 2
10
First published (updated )
Yii FrameworkUse of Predictable Algorithm in Random Number Generator in yiisoft/yii2
8.1
First published (updated )
Yii FrameworkUse of Predictable Algorithm in Random Number Generator in yiisoft/yii2
8.1
First published (updated )
composer/yiisoft/yii2-authclientyii2-authclient vulnerable to possible timing attack on string comparison in OAuth1, OAuth2 and OpenID Connect implementation
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.