Login Request a demo
WE
Product
Webyast
by Suse · last CVE Dec 23, 2013
4
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 0
Severity
All severities4Critical0High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Webyast to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2013-3709
–
0%
Dec 23
WebYaST 1.3 uses weak permissions for config/initializers/secret_token.rb, which allows local users to gain privileges by reading the Rails secret token from this file
Affected: 1.3
CVE-2013-4547
–
68%
Nov 23
nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI
Affected: 1.3
CVE-2012-0435
–
2%
Jan 26
SUSE WebYaST before 1.2 0.2.63-0.6.1 allows remote attackers to modify the hosts list, and subsequently conduct man-in-the-middle attacks, via a crafted /host request on TCP port…
Affected: 1.2
CVE-2011-4315
–
6%
Dec 8
Heap-based buffer overflow in compression-pointer processing in core/ngx_resolver.c in nginx before 1.0.10 allows remote resolvers to cause a denial of service (daemon crash) or…
Affected: 1.2
Showing 4