yaws vulnerabilities (Debian)
9 vulnerabilities.
-
yawsDebian CGI implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to OS command injection. 9.8 Critical -
yawsDebian WebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection. 9.8 Critical -
yawsDebian yaws before 2.0.4 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and... 6.1 Medium -
yawsDebian Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote... 6.5 Medium -
yawsDebian Yaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../... 7.5 High -
yawsDebian Multiple cross-site scripting (XSS) vulnerabilities in the wiki application in Yaws 1.88 allow... 4.3 Medium -
yawsDebian Yaws 1.85 writes data to a log file without sanitizing non-printable characters, which might... 5.0 Medium -
yawsDebian Yaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and... 5.0 Medium -
yawsDebian Yaws Webserver 1.55 and earlier allows remote attackers to obtain the source code for yaws... 5.0 Medium