yabb yabb

Name: yabb yabb
Brand: yabb

productUS

cpe:2.3:a:yabb:yabb:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical8high18medium0low

updated 2026-10-28

vulnerabilities (27)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2002-0955US	high7.5	8.55% (95th)	Exploit	no fix	2002-10-04	= 1_gold_sp_1
CVE-2000-0853US	medium5.0	7.57% (95th)	Exploit	no fix	2000-11-14	= 2000-09-01
CVE-2000-1176US	high7.5	5.72% (93rd)	Exploit	no fix	2001-01-09	= 2000-09-11
CVE-2002-1845US	medium4.3	3.95% (90th)	Exploit	no fix	2002-12-31	2 versions
CVE-2002-0117US	high7.5	2.84% (87th)	Exploit	no fix	2002-03-25	4 versions
CVE-2004-0344US	medium6.4	2.16% (82nd)	Exploit	no fix	2004-11-23	2 versions
CVE-2004-1827US	medium4.3	2.06% (81st)	Exploit	no fix	2004-03-15	2 versions
CVE-2006-4157US	medium6.8	1.95% (80th)	Exploit	no fix	2006-08-16	5 versions
CVE-2004-0343US	high10.0	1.84% (79th)	Exploit	no fix	2004-11-23	3 versions
CVE-2002-2296US	medium4.3	1.44% (73rd)	Exploit	no fix	2002-12-31	= 1_gold_-_sp_1
CVE-2005-0741US	medium4.3	1.43% (73rd)	Exploit	no fix	2005-03-08	= 2.0_rc1
CVE-2004-0291US	medium5.0	1.42% (73rd)	Exploit	no fix	2004-11-23	2 versions
CVE-2007-3208US	high10.0	5.86% (93rd)	—	no fix	2007-06-14	= 2.1
CVE-2004-2403US	high10.0	2.80% (86th)	—	no fix	2004-12-31	10 versions
CVE-2013-2057US	critical9.8	2.14% (82nd)	—	no fix	2020-02-11	≤ 2.5.2
CVE-2004-2139US	high7.5	2.09% (82nd)	—	no fix	2004-12-31	2 versions
CVE-2004-1982US	medium5.0	1.46% (73rd)	—	no fix	2004-05-03	2 versions
CVE-2007-3295US	medium6.5	1.42% (73rd)	—	no fix	2007-06-20	4 versions
CVE-2003-1277US	medium4.3	1.30% (70th)	—	no fix	2003-12-31	= 1.5.0
CVE-2005-0785US	medium4.3	1.27% (70th)	—	no fix	2005-05-02	= 2.0_rc1
CVE-2004-2402US	medium4.3	1.26% (69th)	—	no fix	2004-12-31	10 versions
CVE-2006-3275US	high7.5	1.21% (68th)	—	no fix	2006-06-28	4 versions
CVE-2005-2296US	medium5.0	1.19% (68th)	—	no fix	2005-07-18	= 1.5.5c
CVE-2005-4426US	medium4.0OT elevated	1.10% (66th)	—	no fix	2005-12-20	12 versions
CVE-2003-0275US	medium5.1	1.06% (64th)	—	no fix	2003-06-16	= 1.5.2
CVE-2002-1846US	medium5.0OT elevated	1.05% (64th)	—	no fix	2002-12-31	2 versions
CVE-2004-2140US	medium5.0	1.04% (64th)	—	no fix	2004-12-31	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')11 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-93Improper Neutralization of CRLF Sequences ('CRLF Injection')2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-287Improper Authentication1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE27 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan