Login Request a demo
YU
Product
Yui
by Yahoo · last CVE Nov 13, 2013
12
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 0High 0Medium 0Low 0
Severity
All severities12Critical0High0Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Yui to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2013-6780
–
2%
Nov 13
Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML…
Affected: 2.5.0; 2.5.1; 2.5.2; 2.6.0; 2.7.0; 2.8.0; +3 more
CVE-2013-4942
–
1%
Jul 29
Cross-site scripting (XSS) vulnerability in flashuploader.swf in the Uploader component in Yahoo! YUI 3.5.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11,…
Affected: 3.5.0; 3.5.1; 3.6.0; 3.7.0; 3.7.1; 3.7.2; +8 more
CVE-2013-4941
–
1%
Jul 29
Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x…
Affected: 3.0.0; 3.1.0; 3.1.1; 3.1.2; 3.2.0; 3.3.0; +16 more
CVE-2013-4940
–
1%
Jul 29
Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8,…
Affected: 3.0.0; 3.1.0; 3.1.1; 3.1.2; 3.2.0; 3.3.0; +16 more
CVE-2013-4939
–
1%
Jul 29
Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.0.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x…
Affected: 3.0.0; 3.1.0; 3.1.1; 3.1.2; 3.2.0; 3.3.0; +16 more
CVE-2012-5883
–
2%
Nov 16
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.9.0, as used in Bugzilla 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before…
Affected: 2.8.0; 2.8.1; 2.8.1; 2.8.2; 2.9.0; 2.9.0; +1 more
CVE-2012-5882
–
2%
Nov 16
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via…
Affected: 2.4.0; 2.4.1; 2.5.0; 2.5.1; 2.5.2; 2.6.0; +8 more
CVE-2012-5881
–
2%
Nov 16
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via…
Affected: 2.4.0; 2.4.1; 2.5.0; 2.5.1; 2.5.2; 2.6.0; +8 more
CVE-2010-4710
–
2%
Jan 28
Cross-site scripting (XSS) vulnerability in the addItem method in the Menu widget in YUI before 2.9.0 allows remote attackers to inject arbitrary web script or HTML via a field…
Affected: through 2.8.2; 2.2.0; 2.2.2; 2.3.0; 2.3.1; 2.4.0; +9 more
CVE-2010-4207
–
5%
Nov 7
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers…
Affected: 2.4.0; 2.5.0; 2.5.1; 2.5.2; 2.6.0; 2.7.0; +2 more
CVE-2010-4209
–
5%
Nov 7
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers…
Affected: 2.8.0; 2.8.1
CVE-2010-4208
–
5%
Nov 7
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers…
Affected: 2.5.0; 2.5.1; 2.5.2; 2.6.0; 2.7.0; 2.8.0; +1 more
Showing 12