Yahoo vulnerabilities

Products

• Messenger 33
• Yui 12
• Serialize-javascript 6
• Toolbar 5
• Elide 3
• Music Jukebox 3
• Yahoo\! Browser 3
• Cmak 2

Newest

• yahoo serialize-javascript Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script at the end of a serialized function body CVE-2026-115897 Fix available 2.1 LowOctober 23, 2026
• yahoo serialize-javascript serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body CVE-2026-115754 Fix available 2.3 LowOctober 23, 2026
• yahoo serialize-javascript Serialize JavaScript: Cross-site scripting (XSS) via unescaped </script> in serialized function bodies CVE-2026-97711 Fix available 2.3 LowSeptember 29, 2026
• yahoo cmak CMAK through 3.0.0.6 Feature Gate Bypass via HTML Form Routes CVE-2026-92778 5.3 MediumSeptember 16, 2026
• yahoo cmak CMAK through 3.0.0.6 Cross-Site Request Forgery via Missing CSRF Filter CVE-2026-92751 7.2 HighSeptember 16, 2026
• yahoo elide Elide 7.1.17 - Permission Bypass in Sort Expression Validation CVE-2026-57954 5.3 MediumJune 29, 2026
• yahoo serialize, serialize-javascript +1 more Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects CVE-2026-34043 Fix available 5.9 MediumMarch 27, 2026
• elide SQL Injection in elide-datastore-aggregation CVE-2022-24827 Fix available 8.1 HighApril 8, 2022
• verizon serialize-javascript Insecure serialization leading to RCE in serialize-javascript CVE-2020-7660 Fix available 8.1 HighJune 1, 2020
• elide Read permissions not enforced for client provided filter expressions in Elide http client CVE-2020-5289 Fix available 6.8 MediumMarch 30, 2020
• verison media athenz Athenz vulnerable to Open Redirect CVE-2019-6035 Fix available 6.1 MediumDecember 26, 2019
• verizon serialize-javascript Affected versions of serialize-javascript are vulnerable to Cross-site Scripting (XSS) CVE-2019-16769 Fix available 4.2 MediumDecember 5, 2019
• yahoo toolbar, yahoo japan corporation installer of yahoo! toolbar (for internet explorer) +1 more Untrusted search path vulnerability in Installer of Yahoo! Toolbar (for Internet explorer) v8.0.0... CVE-2017-2253 7.8 HighJuly 14, 2017
• yahoo messenger Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote... CVE-2014-7216 9.3 HighSeptember 11, 2015
• yahoo ybox The Yahoo! Japan Box (aka jp.co.yahoo.android.ybox) application 1.5.1 for Android does not verify... CVE-2014-5881 5.4 MediumSeptember 11, 2014
• yahoo toolbar Cross-site scripting (XSS) vulnerability in clickstream.js in Y! Toolbar plugin for FireFox 3.1.0... CVE-2013-6853 4.3 MediumJanuary 26, 2014
• yahoo yui Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI... CVE-2013-6780 4.3 MediumNovember 13, 2013
• yahoo japan shopping The Yahoo! Japan Shopping application 1.4 and earlier for Android does not verify X.509... CVE-2013-4700 5.8 MediumAugust 21, 2013
• yahoo yafuoku\! The Yahoo! Japan Yafuoku! application 4.3.0 and earlier for iOS and Android does not verify X.509... CVE-2013-4699 5.8 MediumAugust 21, 2013
• moodle, yahoo yui +1 more YUI Cross-site Scripting (XSS) vulnerability CVE-2013-4942 Fix available 4.3 MediumJuly 26, 2013
• moodle, yahoo yui +1 more YUI Cross-site Scripting (XSS) vulnerability CVE-2013-4941 Fix available 4.3 MediumJuly 26, 2013
• moodle, yahoo yui +1 more YUI Cross-site Scripting (XSS) vulnerability CVE-2013-4940 Fix available 4.3 MediumJuly 26, 2013
• moodle, yahoo yui +1 more Cross-Site Scripting in yui CVE-2013-4939 Fix available 4.3 MediumJuly 26, 2013
• yahoo tumblr The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote... CVE-2013-4873 5.0 MediumJuly 18, 2013
• yahoo yahoo\! browser The Yahoo! Browser application 1.4.4 and earlier for Android allows remote attackers to spoof the... CVE-2013-2316 5.8 MediumJune 3, 2013
• yahoo yahoo\! browser The Yahoo! Browser application before 1.4.3 for Android allows remote attackers to spoof the... CVE-2013-2307 5.8 MediumApril 26, 2013
• mozilla bugzilla, yahoo yui +1 more Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0... CVE-2012-5883 4.3 MediumNovember 16, 2012
• yahoo yui Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0... CVE-2012-5882 4.3 MediumNovember 16, 2012
• yahoo yui Cross-site scripting in yui 2.4.0 CVE-2012-5881 Fix available 4.3 MediumNovember 16, 2012
• yahoo toolbar Yahoo! Toolbar 1.0.0.5 and earlier for Chrome and Safari allows remote attackers to modify the... CVE-2012-2647 5.8 MediumJuly 31, 2012
• yahoo yahoo\! browser The Yahoo! Japan Yahoo! Browser application 1.2.0 and earlier for Android does not properly... CVE-2012-2645 4.3 MediumJuly 16, 2012
• yahoo messenger Integer overflow in the CYImage::LoadJPG method in YImage.dll in Yahoo! Messenger before 11.5.0... CVE-2012-0268 5.1 MediumJanuary 19, 2012
• yahoo yui Cross-site scripting (XSS) vulnerability in the addItem method in the Menu widget in YUI before 2... CVE-2010-4710 4.3 MediumJanuary 28, 2011
• yahoo yui Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0... CVE-2010-4209 4.3 MediumNovember 7, 2010
• yahoo yui Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0... CVE-2010-4208 4.3 MediumNovember 7, 2010
• yahoo yui Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0... CVE-2010-4207 4.3 MediumNovember 7, 2010
• yahoo messenger An ActiveX control in YahooBridgeLib.dll for Yahoo! Messenger 9.0.0.2162, and possibly other 9.0... CVE-2009-4171 Public exploit 4.3 MediumDecember 2, 2009
• yahoo assistant The ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier allows remote attackers... CVE-2008-2111 Public exploit 9.3 HighMay 7, 2008
• yahoo music jukebox Buffer overflow in the MediaGrid ActiveX control (mediagrid.dll) in Yahoo! Music Jukebox 2.2.2.56... CVE-2008-0625 Public exploit 4.3 MediumFebruary 6, 2008
• yahoo music jukebox Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox 2.2.2.56... CVE-2008-0624 Public exploit 4.3 MediumFebruary 6, 2008
• yahoo music jukebox Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music... CVE-2008-0623 Public exploit 4.3 MediumFebruary 6, 2008
• yahoo toolbar Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo! Toolbar... CVE-2007-6535 6.8 MediumDecember 27, 2007
• yahoo toolbar Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo!... CVE-2007-6228 Public exploit 6.8 MediumDecember 4, 2007
• yahoo messenger Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll... CVE-2007-5017 Public exploit 5.0 MediumSeptember 20, 2007
• yahoo messenger Yahoo! Messenger 8.1.0.209 and 8.1.0.402 allows remote attackers to cause a denial of service ... CVE-2007-4635 Public exploit 5.0 MediumAugust 31, 2007
• yahoo messenger Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo!... CVE-2007-4515 Public exploit EPSS 33.0% 9.3 HighAugust 31, 2007
• yahoo messenger Heap-based buffer overflow in Kakadu kdu_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote... CVE-2007-4391 Public exploit 9.3 HighAugust 17, 2007
• yahoo widgets Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets)... CVE-2007-4034 Public exploit EPSS 13.0% 9.3 HighJuly 27, 2007
• yahoo messenger Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users to... CVE-2007-3928 7.6 HighJuly 21, 2007
• yahoo messenger Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users, who are... CVE-2007-3638 Public exploit 6.0 MediumJuly 10, 2007
• Show olderLoading…