Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

yahoo yui vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2010-4710
Cross-site scripting (XSS) vulnerability in the addItem method in the Menu widget in YUI prior to 2.9.0 allows remote malicious users to inject arbitrary web script or HTML via a field that is added to a menu, related to documentation that specifies this field as a text field rat...
Yahoo Yui 2.4.0Yahoo Yui 2.4.1Yahoo Yui 2.5.2Yahoo Yui 2.8.0Yahoo Yui 2.2.0Yahoo Yui 2.2.2Yahoo Yui 2.5.0Yahoo Yui 2.6.0Yahoo Yui 2.3.0Yahoo Yui 2.3.1Yahoo Yui 2.7.0Yahoo Yui 2.8.1Yahoo Yui 2.5.1Yahoo Yui
4.3
CVSSv2
CVE-2012-5882
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 up to and including 2.9.0 allows remote malicious users to inject arbitrary web script or HTML via vectors related to uploader.swf, a similar issue to CVE-2010-4208.
Yahoo Yui 2.7.0Yahoo Yui 2.8.0Yahoo Yui 2.5.2Yahoo Yui 2.6.0Yahoo Yui 2.9.0Yahoo Yui 2.4.0Yahoo Yui 2.4.1Yahoo Yui 2.8.1Yahoo Yui 2.5.0Yahoo Yui 2.5.1Yahoo Yui 2.8.2
4.3
CVSSv2
CVE-2012-5881
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 up to and including 2.9.0 allows remote malicious users to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207.
Yahoo Yui 2.4.0Yahoo Yui 2.8.0Yahoo Yui 2.8.1Yahoo Yui 2.6.0Yahoo Yui 2.7.0Yahoo Yui 2.4.1Yahoo Yui 2.5.0Yahoo Yui 2.8.2Yahoo Yui 2.9.0Yahoo Yui 2.5.1Yahoo Yui 2.5.2
4.3
CVSSv2
CVE-2013-6780
Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 2.5.0 up to and including 2.9.0 allows remote malicious users to inject arbitrary web script or HTML via the allowedDomain parameter.
Yahoo Yui 2.5.0Yahoo Yui 2.5.1Yahoo Yui 2.8.2Yahoo Yui 2.9.0Yahoo Yui 2.6.0Yahoo Yui 2.8.0Yahoo Yui 2.5.2Yahoo Yui 2.7.0Yahoo Yui 2.8.1
4.3
CVSSv2
CVE-2010-4207
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 up to and including 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote malicious users to inject arbitrary web script or HTML via vectors related to charts/assets/charts...
Yahoo Yui 2.7.0Yahoo Yui 2.8.0Yahoo Yui 2.4.0Yahoo Yui 2.8.1Yahoo Yui 2.5.2Yahoo Yui 2.6.0Yahoo Yui 2.5.0Yahoo Yui 2.5.1
4.3
CVSSv2
CVE-2010-4208
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 up to and including 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote malicious users to inject arbitrary web script or HTML via vectors related to uploader/assets/uplo...
Yahoo Yui 2.5.1Yahoo Yui 2.5.2Yahoo Yui 2.8.1Yahoo Yui 2.5.0Yahoo Yui 2.8.0Yahoo Yui 2.6.0Yahoo Yui 2.7.0
4.3
CVSSv2
CVE-2010-4209
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 up to and including 2.8.1, as used in Bugzilla 3.7.1 up to and including 3.7.3 and 4.1, allows remote malicious users to inject arbitrary web script or HTML via vectors related to swfstore...
Yahoo Yui 2.8.1Yahoo Yui 2.8.0
4.3
CVSSv2
CVE-2013-4939
Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.0.0 up to and including 3.9.1, as used in Moodle up to and including 2.1.10, 2.2.x prior to 2.2.11, 2.3.x prior to 2.3.8, 2.4.x prior to 2.4.5, 2.5.x prior to 2.5.1, and other products,...
Yahoo Yui 3.8.0Moodle Moodle 2.3.4Yahoo Yui 3.5.0Moodle Moodle 2.2.2Yahoo Yui 3.8.1Yahoo Yui 3.6.0Yahoo Yui 3.1.0Moodle Moodle 2.3.1Moodle Moodle 2.4.3Moodle Moodle 2.4.1Yahoo Yui 3.7.0Moodle Moodle 2.2.9Moodle Moodle 2.1.2Moodle Moodle 2.4.2Moodle Moodle 2.2.6Yahoo Yui 3.10.0Yahoo Yui 3.2.0Yahoo Yui 3.7.2Moodle Moodle 2.3.6Yahoo Yui 3.9.0Moodle Moodle 2.1.10Moodle Moodle 2.1.8
4.3
CVSSv2
CVE-2013-4940
Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle up to and including 2.1.10, 2.2.x prior to 2.2.11, 2.3.x prior to 2.3.8, 2.4.x prior to 2.4.5, 2.5.x prior to 2.5.1, and other products, allows remote malicious ...
Moodle Moodle 2.1.1Moodle Moodle 2.1.3Yahoo Yui 3.1.2Yahoo Yui 3.3.0Yahoo Yui 3.6.0Yahoo Yui 3.7.1Yahoo Yui 3.10.0Yahoo Yui 3.10.2Moodle Moodle 2.2.0Moodle Moodle 2.2.7Moodle Moodle 2.4.4Moodle Moodle 2.4.2Moodle Moodle 2.3.5Moodle Moodle 2.3.3Moodle Moodle 2.3.4Moodle Moodle 2.1.10Moodle Moodle 2.1.5Moodle Moodle 2.1.4Moodle Moodle 2.1.2Moodle Moodle 2.1.6Yahoo Yui 3.4.0Yahoo Yui 3.4.1
4.3
CVSSv2
CVE-2013-4941
Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 up to and including 3.9.1, as used in Moodle up to and including 2.1.10, 2.2.x prior to 2.2.11, 2.3.x prior to 2.3.8, 2.4.x prior to 2.4.5, 2.5.x prior to 2.5.1, and other produ...
Moodle Moodle 2.1.8Moodle Moodle 2.1.0Moodle Moodle 2.1.9Yahoo Yui 3.0.0Yahoo Yui 3.7.3Yahoo Yui 3.8.0Yahoo Yui 3.8.1Yahoo Yui 3.9.0Moodle Moodle 2.2.6Moodle Moodle 2.2.5Moodle Moodle 2.5.0Moodle Moodle 2.4.0Moodle Moodle 2.1.10Moodle Moodle 2.1.5Moodle Moodle 2.1.4Moodle Moodle 2.1.2Yahoo Yui 3.3.0Yahoo Yui 3.4.0Yahoo Yui 3.4.1Yahoo Yui 3.5.0Yahoo Yui 3.5.1Moodle Moodle 2.2.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581reflected XSSCVE-2024-26925CVE-2024-27956LFICVE-2024-3607CVE-2024-3107CVE-2024-3295SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook