Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

[SECURITY] [DLA 2384-1] yaws security update

🗓️ 26 Sep 2020 16:00:58Reported by DebianType 
debian
 debian🔗 lists.debian.org👁 65 Views

yaws security update for Debian 9 stretc

Related
Packages
ReporterTitlePublishedViews
Family
ArchLinux		[ASA-202009-14] yaws: multiple issues
26 Sep 202000:00
–archlinux
BDU FSTEC		The vulnerability of the Yaws CGI web server lies in the lack of measures to neutralize special elements, which allows attackers to access confidential data, compromise its integrity, and cause service failures.
30 Mar 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of the Yaws WebDAV server implementation lies in the improper restriction of XML links to external objects. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
30 Mar 202100:00
–bdu_fstec
GithubExploit		Exploit for OS Command Injection in Yaws
6 Aug 202009:01
–githubexploit
Check Point Advisories		Arbitrary Code Execution Over HTTP Traffic (CVE-2011-2523; CVE-2019-18345; CVE-2019-19143; CVE-2020-15492; CVE-2020-16210; CVE-2020-21526; CVE-2020-24379; CVE-2020-6142; CVE-2020-8010; CVE-2020-9380)
18 Nov 202000:00
–checkpoint_advisories
Check Point Advisories		HTTP Authenticated OS Command Injection (CVE-2020-17408; CVE-2020-24916; CVE-2020-25079; CVE-2020-3117; CVE-2020-7049)
17 Dec 202000:00
–checkpoint_advisories
CVE		CVE-2020-24379
9 Sep 202018:10
–cve
CVE		CVE-2020-24916
9 Sep 202018:10
–cve
Cvelist		CVE-2020-24379
9 Sep 202018:10
–cvelist
Cvelist		CVE-2020-24916
9 Sep 202018:10
–cvelist
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Debian9amd64erlang-yapp2.0.4+dfsg-1+deb9u1erlang-yapp_2.0.4+dfsg-1+deb9u1_amd64.deb
Debian9arm64erlang-yapp2.0.4+dfsg-1+deb9u1erlang-yapp_2.0.4+dfsg-1+deb9u1_arm64.deb
Debian9armelerlang-yapp2.0.4+dfsg-1+deb9u1erlang-yapp_2.0.4+dfsg-1+deb9u1_armel.deb
Debian9armhferlang-yapp2.0.4+dfsg-1+deb9u1erlang-yapp_2.0.4+dfsg-1+deb9u1_armhf.deb
Debian9i386erlang-yapp2.0.4+dfsg-1+deb9u1erlang-yapp_2.0.4+dfsg-1+deb9u1_i386.deb
Debian9amd64erlang-yaws2.0.4+dfsg-1+deb9u1erlang-yaws_2.0.4+dfsg-1+deb9u1_amd64.deb
Debian9arm64erlang-yaws2.0.4+dfsg-1+deb9u1erlang-yaws_2.0.4+dfsg-1+deb9u1_arm64.deb
Debian9armelerlang-yaws2.0.4+dfsg-1+deb9u1erlang-yaws_2.0.4+dfsg-1+deb9u1_armel.deb
Debian9armhferlang-yaws2.0.4+dfsg-1+deb9u1erlang-yaws_2.0.4+dfsg-1+deb9u1_armhf.deb
Debian9i386erlang-yaws2.0.4+dfsg-1+deb9u1erlang-yaws_2.0.4+dfsg-1+deb9u1_i386.deb
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
26 Sep 2020 16:00Current
10High risk
Vulners AI Score10
CVSS 210
CVSS 3.19.8
EPSS0.17374
yawssecurity updatedebian 9
65