Vulnerability index

Browse CVEs

6 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

MEDIUM 5.5 CVE-2020-12872 yaws_config.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by ones that allow Sweet32 attacks, if running on an E… Yaws after 2.0.6 Fix from $1,6002020-05-15 HIGH 7.5 CVE-2017-10974EPSS 81% Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080. NOTE: this CVE is only about use of a… Yaws No fix yet Fix from $1,9502017-07-07 MEDIUM 5.0 CVE-2010-4181EPSS 8% Directory traversal vulnerability in Yaws 1.89 allows remote attackers to read arbitrary files via ..\ (dot dot backslash) and other sequences. Yaws No fix yet Fix from $1,6002010-11-04 MEDIUM 5.0 CVE-2009-4495EPSS 9% Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or po… Yaws No fix yet Fix from $1,6002010-01-13 MEDIUM 5.0 CVE-2009-0751EPSS 10% Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and crash) via a request with a large number of headers. Yaws after 1.79 Fix from $1,6002009-03-02 MEDIUM 5.0 CVE-2005-2008 Yaws Webserver 1.55 and earlier allows remote attackers to obtain the source code for yaws scripts via a request to a yaw script with a trailing %00 … Webserver Patch available Fix from $1,6002005-06-17