Known vulnerabilities in Yaws

Software: Yaws
Software CPE: cpe:2.3:a:yaws_hyber_org:yaws:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 6
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Yaws Yaws is affected by 6 known vulnerabilities: 1 high, 4 medium, 1 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU47119 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-24379
CWE-611 Medium
No
No
2.0.8 09.09.2020 SB2020092709
SB2020092710
SB2020101710
and 1 more
#VU47120 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-24916
CWE-78 High
No
No
2.0.8 09.09.2020 SB2020092709
SB2020092710
SB2020101710
and 1 more
#VU47118 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-12872
CWE-327 Medium
No
No
2.0.7 15.05.2020 SB2020051524
SB2020092710
#VU35034 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2011-4350
CWE-22 Medium
Available
No
- 26.11.2019 SB2019112635
#VU38724 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2017-10974
CWE-22 Medium
Available
No
- 07.07.2017 SB2017070714
#VU44424 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-5025
CWE-79 Low
Available
No
1.89 29.12.2011 SB2011122902