Skip to content
OpenAdvisories

Package · Ubuntu

yaws

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Unscored —
    CVE-2020-24916 EPSS 17%

    CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection.

    yaws yaws Debian Ubuntu
  • Unscored —
    CVE-2020-24379

    WebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection.

    yaws yaws Debian Ubuntu
  • Unscored —
    CVE-2020-12872

    yaws_config.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by ones that allow Sweet…

    erlang yaws Debian Ubuntu
  • Unscored —
    CVE-2016-1000108

    yaws before 2.0.4 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protec…

    yaws yaws Debian Ubuntu
  • Unscored —
    CVE-2009-4495 Public exploit

    Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to …

    yaws yaws Debian Ubuntu