344 matches found
EUVD-2022-2388
Malicious code in bioql PyPI...
EUVD-2022-4155
Malicious code in bioql PyPI...
EUVD-2022-2916
Malicious code in bioql PyPI...
EUVD-2022-3621
Malicious code in bioql PyPI...
EUVD-2025-17007
Malicious code in bioql PyPI...
EUVD-2025-10695
Malicious code in bioql PyPI...
EUVD-2023-1313
Malicious code in bioql PyPI...
EUVD-2023-0322
Malicious code in bioql PyPI...
EUVD-2022-3177
Malicious code in bioql PyPI...
EUVD-2022-4471
Malicious code in bioql PyPI...
EUVD-2022-5469
Malicious code in bioql PyPI...
Yii Framework Installed (Linux / Unix)
Binary data yiiframeworknixinstalled.nbin...
CVE-2025-48493
The Yii 2 Redis extension provides the redis key-value store support for the Yii framework 2.0. On failing connection, the extension writes commands sequence to logs. Prior to version 2.0.20, AUTH parameters are written in plain text exposing username and password. That might be an issue if...
CVE-2025-48493
The Yii 2 Redis extension provides the redis key-value store support for the Yii framework 2.0. On failing connection, the extension writes commands sequence to logs. Prior to version 2.0.20, AUTH parameters are written in plain text exposing username and password. That might be an issue if...
Yii 2 Redis may expose AUTH parameters in logs in case of connection failure
Impact On failing connection extension writes commands sequence to logs. AUTH parameters are written in plain text exposing username and password. That might be an issue if attacker has access to logs...
CVE-2025-48493 Yii 2 Redis may expose AUTH paramters in logs in case of connection failure
The Yii 2 Redis extension provides the redis key-value store support for the Yii framework 2.0. On failing connection, the extension writes commands sequence to logs. Prior to version 2.0.20, AUTH parameters are written in plain text exposing username and password. That might be an issue if...
CVE-2025-48493 Yii 2 Redis may expose AUTH paramters in logs in case of connection failure
The Yii 2 Redis extension provides the redis key-value store support for the Yii framework 2.0. On failing connection, the extension writes commands sequence to logs. Prior to version 2.0.20, AUTH parameters are written in plain text exposing username and password. That might be an issue if...
CVE-2025-48493
The vulnerability CVE-2025-48493 affects the Yii 2 Redis extension (yii2-redis) used with Yii Framework 2.0. Prior to version 2.0.20, AUTH credentials are logged in plain text when a connection fails, exposing usernames and passwords to anyone with access to the logs. The issue is mitigated by up...
CVE-2025-48493 Yii 2 Redis may expose AUTH paramters in logs in case of connection failure
The Yii 2 Redis extension provides the redis key-value store support for the Yii framework 2.0. On failing connection, the extension writes commands sequence to logs. Prior to version 2.0.20, AUTH parameters are written in plain text exposing username and password. That might be an issue if...
PT-2025-23939 · Yii · Yii 2 Redis Extension
Name of the Vulnerable Software and Affected Versions: Yii 2 Redis extension versions prior to 2.0.20 Description: The issue concerns the logging of commands when a connection fails in the Yii 2 Redis extension. Specifically, prior to version 2.0.20, AUTH parameters are written in plain text,...