Yaws Web Server 漏洞

时间轴

版本

1.912
1.852
2.0.02
2.0.12
2.0.22

修正

Official Fix2
Temporary Fix0
Workaround0
Unavailable0
Not Defined6

易受攻击性

High0
Functional0
Proof-of-Concept4
Unproven0
Not Defined4

访问向量

Not Defined0
Physical0
Local0
Adjacent0
Network8

身份验证

Not Defined0
High0
Low0
None8

用户交互

Not Defined0
Required0
None8

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤64
≤72
≤80
≤92
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤52
≤64
≤70
≤80
≤92
≤100

VulDB

≤10
≤20
≤30
≤40
≤50
≤66
≤70
≤82
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤82
≤90
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k2
<2k2
<5k4
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k8
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Versions (39): 1.50, 1.51, 1.52, 1.53, 1.54, 1.55, 1.56, 1.57, 1.58, 1.61, 1.62, 1.63, 1.64, 1.65, 1.66, 1.67, 1.68, 1.70, 1.71, 1.72, 1.73, 1.74, 1.75, 1.76, 1.77, 1.78, 1.79, 1.85, 1.88, 1.89, 1.91, 2, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7

软件类型: Web Server

已发布BaseTemp漏洞0day今天易修正CTICVE
2020-09-098.58.5Yaws Web Server CGI 权限升级$0-$5k$0-$5kNot DefinedNot Defined0.05CVE-2020-24916
2020-09-098.58.5Yaws Web Server WebDAV XML External Entity$0-$5k$0-$5kNot DefinedNot Defined0.05CVE-2020-24379
2017-07-076.45.8Yaws Web Server Port 8080 Service 目录遍历$0-$5k$0-$5kProof-of-ConceptNot Defined0.03CVE-2017-10974
2011-12-294.34.3Yaws Web Server 跨网站脚本$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2011-5025
2010-11-015.35.0Yaws Web Server 目录遍历$0-$5k$0-$5kProof-of-ConceptNot Defined0.00CVE-2010-4181
2010-01-135.35.3Yaws Web Server Terminal 权限升级$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2009-4495
2009-03-025.34.8Yaws Web Server 拒绝服务$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.00CVE-2009-0751

更多条目由 Yaws

◂ 上一步一览下一步 ▸

Might our Artificial Intelligence support you?

Check our Alexa App!