İçeriğe atla
Noroxi

yahoo kayıtları

yahoo üreticisine ait 67 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
2 · %3
Pre-auth RCE
20
Düzeltme kaydı olan
%9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 19
  3. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Bug bounty kapsamı

Ürünün üreticisi herkese açık bir programda görünüyor. Eşleşme ad üzerinden yapıldı; kapsam metnini programda doğrulayın.

Tüm kayıtlar

67 kayıt
  • CVE-2007-3147
    49Planlayın

    Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to

    KritikCVSS 9,3SilahlaştırılmışEPSS %40

    yahoo · messenger11 Haz 2007

  • CVE-2007-4515
    47Planlayın

    Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1

    KritikCVSS 9,3SilahlaştırılmışEPSS %33

    yahoo · messenger31 Ağu 2007

  • CVE-2007-4034
    41Planlayın

    Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before 2007.7.13.3 (2007062

    KritikCVSS 9,3Kavram kanıtıEPSS %13

    yahoo · widgets27 Tem 2007

  • CVE-2007-3148
    41Planlayın

    Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to

    KritikCVSS 9,3Kavram kanıtıEPSS %12

    yahoo · messenger11 Haz 2007

  • CVE-2007-4391
    40Planlayın

    Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service (applic

    KritikCVSS 9,3Kavram kanıtıEPSS %9

    yahoo · messenger17 Ağu 2007

  • CVE-2007-1680
    40Planlayın

    Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control (yacscom.dll) in Yahoo! Messenger befor

    KritikCVSS 9,3İstismar yokEPSS %8

    yahoo · messenger5 Nis 2007

  • CVE-2014-7216
    39İzleyin

    Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote attackers to cause a denial of service (crash)

    KritikCVSS 9,3İstismar yokEPSS %7

    yahoo · messenger11 Eyl 2015

  • CVE-2006-6603
    39İzleyin

    Buffer overflow in the YMMAPI.YMailAttach ActiveX control (ymmapi.dll) before 2005.1.1.4 in Yahoo! Messenger allows remote attackers to exec

    KritikCVSS 9,3İstismar yokEPSS %7

    yahoo · messenger15 Ara 2006

  • CVE-2008-2111
    39İzleyin

    The ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified ve

    KritikCVSS 9,3Kavram kanıtıEPSS %5

    yahoo · yahoo assistant7 May 2008

  • CVE-2002-0320
    32İzleyin

    Buffer overflow in Yahoo! Messenger 5.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long

    YüksekCVSS 7,5İstismar yokEPSS %7

    yahoo · messenger25 Haz 2002

  • CVE-2007-3928
    32İzleyin

    Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users to execute arbitrary code via a long e-mail address

    YüksekCVSS 7,6İstismar yokEPSS %6

    yahoo · messenger20 Tem 2007

  • CVE-2002-1665
    31İzleyin

    Buffer overflow in Yahoo! Messenger before February 2002 allows remote attackers to cause a denial of service (crash) and possibly execute a

    YüksekCVSS 7,5İstismar yokEPSS %4

    yahoo · messenger31 Ara 2002

  • CVE-2005-0737
    31İzleyin

    Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode.

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    yahoo · messenger2 May 2005

  • CVE-2002-0032
    31İzleyin

    Yahoo! Messenger 5,0,0,1064 and earlier allows remote attackers to execute arbitrary script as other users via the addview parameter of a ym

    YüksekCVSS 7,5İstismar yokEPSS %4

    yahoo · messenger26 Tem 2002

  • CVE-2004-0043
    31İzleyin

    Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to cause a denial of service (crash) and possibly

    YüksekCVSS 7,5İstismar yokEPSS %4

    yahoo · messenger3 Şub 2004

  • CVE-2017-2253
    31İzleyin

    Untrusted search path vulnerability in Installer of Yahoo! Toolbar (for Internet explorer) v8.0.0.6 and earlier, with its timestamp prior to

    YüksekCVSS 7,8İstismar yokEPSS %1

    yahoo · toolbar17 Tem 2017

  • CVE-2002-0322
    30İzleyin

    Yahoo! Messenger 4.0 sends user passwords in cleartext, which could allow remote attackers to gain privileges of other users via sniffing.

    YüksekCVSS 7,5İstismar yokEPSS %2

    yahoo · messenger25 Haz 2002

  • CVE-2026-34043
    30İzleyin

    Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects

    YüksekCVSS 7,5İstismar yokEPSS %1

    yahoo · serialize30 Mar 2026

  • CVE-2007-6228
    28İzleyin

    Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo! Toolbar 1.4.1 allows remote attackers to caus

    OrtaCVSS 6,8Kavram kanıtıEPSS %2

    yahoo · toolbar4 Ara 2007

  • CVE-2007-6535
    28İzleyin

    Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo! Toolbar might allow attackers to execute arbitrary c

    OrtaCVSS 6,8İstismar yokEPSS %2

    yahoo · toolbar27 Ara 2007

  • CVE-2002-1664
    26İzleyin

    Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensit

    OrtaCVSS 6,4İstismar yokEPSS %3

    yahoo · messenger31 Ara 2002

  • CVE-2007-3638
    25İzleyin

    Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users, who are listed in an address book, to execute arbit

    OrtaCVSS 6,0Kavram kanıtıEPSS %2

    yahoo · messenger9 Tem 2007

  • CVE-2019-6035
    24İzleyin

    Open redirect vulnerability in Athenz v1.8.24 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phish

    OrtaCVSS 6,1İstismar yokEPSS %1

    yahoo · athenz26 Ara 2019

  • CVE-2013-2316
    23İzleyin

    The Yahoo! Browser application 1.4.4 and earlier for Android allows remote attackers to spoof the address bar via vectors related to URL dis

    OrtaCVSS 5,8İstismar yokEPSS %2

    yahoo · yahoo\! browser3 Haz 2013

  • CVE-2013-2307
    23İzleyin

    The Yahoo! Browser application before 1.4.3 for Android allows remote attackers to spoof the address bar via a crafted web site.

    OrtaCVSS 5,8İstismar yokEPSS %1

    yahoo · yahoo\! browser26 Nis 2013