CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

osv_cve•added 2018/01/22 10:29 p.m.•23 views

CVE-2018-6009

In Yii Framework 2.x before 2.0.14, the switchIdentity function in web/User.php did not regenerate the CSRF token upon a change of identity...

8.8CVSS7.1AI score

SaveExploits0References1

NVD•added 2018/01/22 10:29 p.m.•39 views

CVE-2018-6009

In Yii Framework 2.x before 2.0.14, the switchIdentity function in web/User.php did not regenerate the CSRF token upon a change of identity...

8.8CVSS8.7AI score0.00597EPSS

SaveExploits0References1

Cvelist•added 2018/01/22 10:00 p.m.•57 views

CVE-2018-6010

In Yii Framework 2.x before 2.0.14, remote attackers could obtain potentially sensitive information from exception messages, or exploit reflected XSS on the error handler page in non-debug mode. Related to base/ErrorHandler.php, log/Dispatcher.php, and views/errorHandler/exception.php...

7.2AI score0.02883EPSS

SaveExploits0References3

Cvelist•added 2018/01/22 10:00 p.m.•49 views

CVE-2018-6009

In Yii Framework 2.x before 2.0.14, the switchIdentity function in web/User.php did not regenerate the CSRF token upon a change of identity...

8.7AI score0.00597EPSS

SaveExploits0References1

Mend•added 2018/01/22 10:00 p.m.•7 views

CVE-2018-6010

8.7CVSS0.02883EPSS

SaveExploits0References7

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by