CRITICAL9.8CVE-2020-24916CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection. from 0, < 2.0.8+dfsg-1
from 0, < 2.0.8+dfsg-1
from 0, < 2.0.4+dfsg-1+deb9u1
CRITICAL9.8yaws - security update
from 0, < 2.0.6+dfsg-1+deb10u1
HIGH7.5Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../ to port 8080.
from 0, < 1.91-2
MEDIUM6.5Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed.
from 0, < 1.91-2
MEDIUM6.1yaws before 2.0.4 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications f…
from 0, < 2.0.3-2
—Multiple cross-site scripting (XSS) vulnerabilities in the wiki application in Yaws 1.88 allow remote attackers to inject arbitrary web scr…
from 0, < 1.92-1
—Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's ti…
from 0
—yaws - denial of service
from 0, < 1.80-1
—yaws - denial of service
from 0, < 1.65-4etch1
—Yaws Webserver 1.55 and earlier allows remote attackers to obtain the source code for yaws scripts via a request to a yaw script with a tra…
from 0, < 1.56-1