yaws

9 results · Feed

• Unscored —
  CVE-2020-24916 EPSS 17%

  CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection.

  yaws yaws Debian Ubuntu
  Sep 9, 2020
• Unscored —
  CVE-2020-24379

  WebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection.

  yaws yaws Debian Ubuntu
  Sep 9, 2020
• Unscored —
  CVE-2016-1000108

  yaws before 2.0.4 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protec…

  yaws yaws Debian Ubuntu
  Dec 10, 2019
• Unscored —
  CVE-2011-4350 Public exploit EPSS 16%

  Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user co…

  yaws yaws yaws Debian
  Nov 26, 2019
• Unscored —
  CVE-2017-10974 Public exploit EPSS 81%

  Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080. NOTE: t…

  yaws Debian
  Jul 7, 2017
• Unscored —
  CVE-2011-5025 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inje…

  yaws Debian
  Dec 29, 2011
• Unscored —
  CVE-2009-4495 Public exploit

  Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to …

  yaws yaws Debian Ubuntu
  Jan 13, 2010
• Unscored —
  CVE-2009-0751 Public exploit EPSS 10%

  Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with…

  yaws Debian
  Mar 2, 2009
• Unscored —
  CVE-2005-2008

  Yaws Webserver 1.55 and earlier allows remote attackers to obtain the source code for yaws scripts via a request to a y…

  yaws Debian
  Jun 20, 2005