https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 15:38:47 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-07276 cnvd-2018-07276 https://cve.radiocsirt.org/vuln/cnvd-2018-07276 https://cve.radiocsirt.org/vuln/euvd-2026-63537 EUVD-2026-63537 https://cve.radiocsirt.org/vuln/euvd-2026-63537 https://cve.radiocsirt.org/vuln/fkie_cve-2018-8073 <p>Yii 2.x before 2.0.15 allows remote attackers to execute arbitrary LUA code via a variant of the CVE-2018-7269 attack in conjunction with the Redis extension.</p> <p>Yii 2.x before 2.0.15 allows remote attackers to execute arbitrary LUA code via a variant of the CVE-2018-7269 attack in conjunction with the Redis extension.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-8073 https://cve.radiocsirt.org/vuln/ghsa-4hx3-m8w5-g5qh <p><strong>Affected:</strong> Packagist: yiisoft/yii2-redis</p> <p>Potential remote code execution in LUA context of the redis server via methods `yii\redis\ActiveRecord::findOne()` and `yii\redis\ActiveRecord::findAll()` in yiisoft/yii2-redis. Attackers could probably manipulate data on the redis server.</p> <p><strong>Affected:</strong> Packagist: yiisoft/yii2-redis</p> <p>Potential remote code execution in LUA context of the redis server via methods `yii\redis\ActiveRecord::findOne()` and `yii\redis\ActiveRecord::findAll()` in yiisoft/yii2-redis. Attackers could probably manipulate data on the redis server.</p> https://cve.radiocsirt.org/vuln/ghsa-4hx3-m8w5-g5qh https://cve.radiocsirt.org/vuln/gsd-2018-8073 gsd-2018-8073 https://cve.radiocsirt.org/vuln/gsd-2018-8073