Skip to content
Noroxi

yahoo records

67 published records for vendor yahoo.

Researcher profile

Entered KEV
0 · 0%
Weaponized
2 · 3%
Pre-auth RCE
20
With a fix record
9%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

Bug bounty scope

The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.

All records

67 records
  • CVE-2007-3147
    49Plan

    Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to

    CriticalCVSS 9.3WeaponizedEPSS 40%

    yahoo · messengerJun 11, 2007

  • CVE-2007-4515
    47Plan

    Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1

    CriticalCVSS 9.3WeaponizedEPSS 33%

    yahoo · messengerAug 31, 2007

  • CVE-2007-4034
    41Plan

    Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before 2007.7.13.3 (2007062

    CriticalCVSS 9.3Proof of conceptEPSS 13%

    yahoo · widgetsJul 27, 2007

  • CVE-2007-3148
    41Plan

    Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to

    CriticalCVSS 9.3Proof of conceptEPSS 12%

    yahoo · messengerJun 11, 2007

  • CVE-2007-4391
    40Plan

    Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service (applic

    CriticalCVSS 9.3Proof of conceptEPSS 9%

    yahoo · messengerAug 17, 2007

  • CVE-2007-1680
    40Plan

    Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control (yacscom.dll) in Yahoo! Messenger befor

    CriticalCVSS 9.3No exploitEPSS 8%

    yahoo · messengerApr 5, 2007

  • CVE-2014-7216
    39Monitor

    Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote attackers to cause a denial of service (crash)

    CriticalCVSS 9.3No exploitEPSS 7%

    yahoo · messengerSep 11, 2015

  • CVE-2006-6603
    39Monitor

    Buffer overflow in the YMMAPI.YMailAttach ActiveX control (ymmapi.dll) before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to exec

    CriticalCVSS 9.3No exploitEPSS 7%

    yahoo · messengerDec 15, 2006

  • CVE-2008-2111
    39Monitor

    The ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified ve

    CriticalCVSS 9.3Proof of conceptEPSS 5%

    yahoo · yahoo assistantMay 7, 2008

  • CVE-2002-0320
    32Monitor

    Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long

    HighCVSS 7.5No exploitEPSS 7%

    yahoo · messengerJun 25, 2002

  • CVE-2007-3928
    32Monitor

    Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users to execute arbitrary code via a long e-mail address

    HighCVSS 7.6No exploitEPSS 6%

    yahoo · messengerJul 20, 2007

  • CVE-2002-1665
    31Monitor

    Buffer overflow in Yahoo! Messenger before February 2002 allows remote attackers to cause a denial of service (crash) and possibly execute a

    HighCVSS 7.5No exploitEPSS 4%

    yahoo · messengerDec 31, 2002

  • CVE-2005-0737
    31Monitor

    Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode.

    HighCVSS 7.5Proof of conceptEPSS 4%

    yahoo · messengerMay 2, 2005

  • CVE-2002-0032
    31Monitor

    Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ym

    HighCVSS 7.5No exploitEPSS 4%

    yahoo · messengerJul 26, 2002

  • CVE-2004-0043
    31Monitor

    Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to cause a denial of service (crash) and possibly

    HighCVSS 7.5No exploitEPSS 4%

    yahoo · messengerFeb 3, 2004

  • CVE-2017-2253
    31Monitor

    Untrusted search path vulnerability in Installer of Yahoo! Toolbar (for Internet explorer) v8.0.0.6 and earlier, with its timestamp prior to

    HighCVSS 7.8No exploitEPSS 1%

    yahoo · toolbarJul 17, 2017

  • CVE-2002-0322
    30Monitor

    Yahoo! Messenger 4.0 sends user passwords in cleartext, which could allow remote attackers to gain privileges of other users via sniffing.

    HighCVSS 7.5No exploitEPSS 2%

    yahoo · messengerJun 25, 2002

  • CVE-2026-34043
    30Monitor

    Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects

    HighCVSS 7.5No exploitEPSS 1%

    yahoo · serializeMar 30, 2026

  • CVE-2007-6228
    28Monitor

    Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo! Toolbar 1.4.1 allows remote attackers to caus

    MediumCVSS 6.8Proof of conceptEPSS 2%

    yahoo · toolbarDec 4, 2007

  • CVE-2007-6535
    28Monitor

    Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo! Toolbar might allow attackers to execute arbitrary c

    MediumCVSS 6.8No exploitEPSS 2%

    yahoo · toolbarDec 27, 2007

  • CVE-2002-1664
    26Monitor

    Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensit

    MediumCVSS 6.4No exploitEPSS 3%

    yahoo · messengerDec 31, 2002

  • CVE-2007-3638
    25Monitor

    Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users, who are listed in an address book, to execute arbit

    MediumCVSS 6.0Proof of conceptEPSS 2%

    yahoo · messengerJul 9, 2007

  • CVE-2019-6035
    24Monitor

    Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phish

    MediumCVSS 6.1No exploitEPSS 1%

    yahoo · athenzDec 26, 2019

  • CVE-2013-2316
    23Monitor

    The Yahoo! Browser application 1.4.4 and earlier for Android allows remote attackers to spoof the address bar via vectors related to URL dis

    MediumCVSS 5.8No exploitEPSS 2%

    yahoo · yahoo\! browserJun 3, 2013

  • CVE-2013-2307
    23Monitor

    The Yahoo! Browser application before 1.4.3 for Android allows remote attackers to spoof the address bar via a crafted web site.

    MediumCVSS 5.8No exploitEPSS 1%

    yahoo · yahoo\! browserApr 26, 2013