Login Request a demo
YA
Product
Yaws
by Yaws · last CVE Sep 9, 2020
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 2High 1Medium 3Low 0
Severity
All severities10Critical2High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Yaws to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2011-4350
6.5
16%
Nov 26
Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed
Affected: 1.91
CVE-2016-1000108
6.1
1%
Dec 10
yaws before 2.0.4 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client…
Affected: before 2.0.4
CVE-2020-12872
5.5
0%
May 15
yaws_config.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by ones that allow Sweet32 attacks, if running on an Erlang/OTP virtual machine with…
Affected: 2.0.2 through 2.0.6
Showing 3