Yanf

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Yanf records in CISA KEV

No Yanf vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Yanf · all components

TI-2004-01181 CVE-2004-1303 · GHSA-rjcc-j4fm-c59m

MEDIUM 52

Buffer overflow in the get function in get.c for Yanf 0.4 allows remote malicious web servers to execute arbitrary code via crafted HTTP responses.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06201 Published 2004-12-22 No fix listed