yaws

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

yaws records in CISA KEV

No yaws vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Yaws 10 records HIGH Webserver 1 record LOW

Records

1 record in Webserver · all components

TI-2005-01899 CVE-2005-2008 · GHSA-fv9j-hq3g-xg3x

Yaws Webserver 1.55 and earlier allows remote attackers to obtain the source code for…

LOW 26

Yaws Webserver 1.55 and earlier allows remote attackers to obtain the source code for yaws scripts via a request to a yaw script with a trailing %00 (null).

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01457 Published 2005-06-20 No fix listed

Open these records in search →

Critical	2
High	1
Medium	8
Low	0
No CVSS	0