https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T23:59:46.789527+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-24379 CVE-2020-24379 2026-10-09T23:59:46.826954+00:00

WebDAV implementation in Yaws web server versions 1.81 to 2.0.7 is vulnerable to XXE injection.

 https://cve.radiocsirt.org/vuln/usn-4569-1 USN-4569-1 — yaws vulnerabilities 2026-10-09T23:59:46.827031+00:00

Affected: Ubuntu:18.04:LTS: yaws

It was discovered that Yaws did not properly sanitize XML input. A remote attacker could use this vulnerability to execute an XML External Entity (XXE) injection attack. (CVE-2020-24379)

It was discovered that Yaws mishandled certain input when running CGI scripts. A remote attacker could use this vulnerability to execute arbitrary commands. (CVE-2020-24916)