Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Yii
CRITICAL 9.1
CVE-2024-4990EPSS 80%
In yiisoft/yii2 version 2.0.48, the base Component class contains a vulnerability where the `__set()` magic method does not validate that the value p…
No fix yet
Fix from $2,300
2025-03-20
Yii
MEDIUM 6.1
CVE-2022-31454
Yii 2 v2.0.45 was discovered to contain a cross-site scripting (XSS) vulnerability via the endpoint /books. NOTE: this is disputed by the vendor beca…
No fix yet
Fix from $1,600
2023-07-28
Yiiframework
HIGH 7.5
CVE-2014-4672
The CDetailView widget in Yii PHP Framework 1.1.14 allows remote attackers to execute arbitrary PHP scripts via vectors related to the value property.
Mitigation only
Fix from $1,950
2014-07-03