Vulnerability index

Browse CVEs

15 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Yahoo Ybox MEDIUM 5.4
CVE-2014-5881

The Yahoo! Japan Box (aka jp.co.yahoo.android.ybox) application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows m…

Mitigation only
Fix from $1,600 2014-09-11
Toolbar MEDIUM 6.8
CVE-2007-6535

Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo! Toolbar might allow attackers to execute arbitrary code via a…

Mitigation only
Fix from $1,600 2007-12-27
Toolbar MEDIUM 6.8
CVE-2007-6228

Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo! Toolbar 1.4.1 allows remote attackers to cause a denia…

No fix yet
Fix from $1,600 2007-12-04
Messenger MEDIUM 5.0
CVE-2007-5017

Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll in Yahoo! Messenger 8.1.0.421 allows remote attacke…

No fix yet
Fix from $1,600 2007-09-20
Messenger MEDIUM 5.0
CVE-2007-4635

Yahoo! Messenger 8.1.0.209 and 8.1.0.402 allows remote attackers to cause a denial of service (application crash) via certain file-transfer packets, …

No fix yet
Fix from $1,600 2007-08-31
Messenger HIGH 9.3
CVE-2007-4391EPSS 9%

Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service (application cra…

Mitigation only
Fix from $1,950 2007-08-17
Messenger MEDIUM 6.0
CVE-2007-3638

Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users, who are listed in an address book, to execute arbitrary code…

No fix yet
Fix from $1,600 2007-07-10
Ui Library MEDIUM 5.0
CVE-2007-2385

The Yahoo! UI framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows remote attackers…

Mitigation only
Fix from $1,600 2007-04-30
Messenger MEDIUM 5.0
CVE-2007-0868

Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attackers to cause a denial of servi…

No fix yet
Fix from $1,600 2007-02-09
Messenger MEDIUM 5.0
CVE-2006-3298

Yahoo! Messenger 7.5.0.814 and 7.0.438 allows remote attackers to cause a denial of service (crash) via messages that contain non-ASCII characters, w…

No fix yet
Fix from $1,600 2006-06-29
Messenger MEDIUM 5.0
CVE-2005-1618

The YMSGR URL handler in Yahoo! Messenger 5.x through 6.0 allows remote attackers to cause a denial of service (disconnect) via a room login or a roo…

Mitigation only
Fix from $1,600 2005-05-16
Messenger HIGH 7.5
CVE-2005-0737

Buffer overflow in Yahoo! Messenger allows remote attackers to execute arbitrary code via the offline mode.

No fix yet
Fix from $1,950 2005-05-02
Messenger MEDIUM 5.8
CVE-2002-2361

The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs v…

Mitigation only
Fix from $1,600 2002-12-31
Messenger HIGH 7.5
CVE-2002-0322

Yahoo! Messenger 4.0 sends user passwords in cleartext, which could allow remote attackers to gain privileges of other users via sniffing.

Mitigation only
Fix from $1,950 2002-06-25
Pager MEDIUM 5.0
CVE-2000-0047

Buffer overflow in Yahoo Pager/Messenger client allows remote attackers to cause a denial of service via a long URL within a message.

Mitigation only
Fix from $1,600 1999-10-01