Skip to content
OpenAdvisories

Package · Debian

yaws

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Unscored —
    CVE-2011-4350 Public exploit EPSS 16%

    Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user co…

    yaws yaws yaws Debian
  • Unscored —
    CVE-2017-10974 Public exploit EPSS 81%

    Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080. NOTE: t…

    yaws Debian
  • Unscored —
    CVE-2011-5025 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inje…

    yaws Debian
  • Unscored —
    CVE-2009-4495 Public exploit

    Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to …

    yaws yaws Debian Ubuntu
  • Unscored —
    CVE-2009-0751 Public exploit EPSS 10%

    Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with…

    yaws Debian