Vulnerabilities (CVE)

Filtered by vendor Yiiframework Subscribe
Filtered by product Yii
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-3689 1 Yiiframework 1 Yii 2022-04-25 5.0 MEDIUM 7.5 HIGH
yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator
CVE-2018-8074 1 Yiiframework 1 Yii 2018-04-20 6.8 MEDIUM 8.1 HIGH
Yii 2.x before 2.0.15 allows remote attackers to inject unintended search conditions via a variant of the CVE-2018-7269 attack in conjunction with the Elasticsearch extension.