https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:42:14 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-42743 EUVD-2026-42743 https://cve.radiocsirt.org/vuln/euvd-2026-42743 https://cve.radiocsirt.org/vuln/fkie_cve-2020-15227 <p>Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Nette is a PHP/Composer MVC Framework.</p> <p>Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Nette is a PHP/Composer MVC Framework.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-15227 https://cve.radiocsirt.org/vuln/ghsa-8gv3-3j7f-wg94 <p><strong>Affected:</strong> Packagist: nette/application</p> <p>Packages nette/application versions prior to 2.2.10, 2.3.14, 2.4.16, 3.0.6 and nette/nette versions prior to 2.0.19 and 2.1.13 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE.</p> <p>Reported by Cyku Hong from DEVCORE (https://devco.re)</p> <p>### Impact Code injection, possible remote code execution.</p> <p>### Patches Fixed in nette/application 2.2.10, 2.3.14, 2.4.16, 3.0.6 and nette/nette 2.0.19 and 2.1.13</p> <p><strong>Affected:</strong> Packagist: nette/application</p> <p>Packages nette/application versions prior to 2.2.10, 2.3.14, 2.4.16, 3.0.6 and nette/nette versions prior to 2.0.19 and 2.1.13 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE.</p> <p>Reported by Cyku Hong from DEVCORE (https://devco.re)</p> <p>### Impact Code injection, possible remote code execution.</p> <p>### Patches Fixed in nette/application 2.2.10, 2.3.14, 2.4.16, 3.0.6 and nette/nette 2.0.19 and 2.1.13</p> https://cve.radiocsirt.org/vuln/ghsa-8gv3-3j7f-wg94 https://cve.radiocsirt.org/vuln/gsd-2020-15227 gsd-2020-15227 https://cve.radiocsirt.org/vuln/gsd-2020-15227 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-15227 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: php-nette, Ubuntu:18.04:LTS: php-nette</p> <p>Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Nette is a PHP/Composer MVC Framework.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: php-nette, Ubuntu:18.04:LTS: php-nette</p> <p>Nette versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, 3.0.6 are vulnerable to an code injection attack by passing specially formed parameters to URL that may possibly leading to RCE. Nette is a PHP/Composer MVC Framework.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-15227