SUSE CVE-2010-4569

Cross-site scripting XSS vulnerability in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote attackers to inject arbitrary web script or HTML via the real name field of a user account, related to the AutoComplete widget in YUI...

SUSE CVE-2010-4570

Cross-site scripting XSS vulnerability in the duplicate-detection functionality in Bugzilla 3.7.1, 3.7.2, 3.7.3, and 4.0rc1 allows remote attackers to inject arbitrary web script or HTML via the summary field, related to the DataTable widget in YUI...

SUSE CVE-2012-5881

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207...

SUSE CVE-2012-5882

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader.swf, a similar issue to CVE-2010-4208...

CVE-2022-48197

Reflected cross-site scripting XSS exists in Sandbox examples in the YUI2 repository. The download distributions, TreeView component and the YUI Javascript library overall are not affected. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2022-48197

Reflected cross-site scripting XSS exists in Sandbox examples in the YUI2 repository. The download distributions, TreeView component and the YUI Javascript library overall are not affected. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

UBUNTU-CVE-2022-48197

Reflected cross-site scripting XSS exists in Sandbox examples in the YUI2 repository. The download distributions, TreeView component and the YUI Javascript library overall are not affected. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

Denial Of Service (DoS)

moodle/moodle is vulnerable to denial of service. The vulnerability exists because the yuicombo.php does not properly limit the path length, allowing an attacker to crash the application by loading a large number of files...

Cross-site scripting in yui 2.4.0

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207...

GHSA-JJG9-MF63-VQRP Cross-site scripting in yui 2.4.0

Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207...

YUI Cross-site Scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in flashuploader.swf in the Uploader component in Yahoo! YUI 3.5.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitra...

@kitinggan/didactic-eureka (1.1.4), @qsb-cli-test/command (1.0.10) +37 more potentially affected by CVE-2013-4942 via yui (>=3.5.0, <=3.9.1)

yui NPM version =3.5.0, =1.0.8, =1.0.8, =1.0.6, =1.0.6, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.1.1, =0.1.4 and more Source cves: CVE-2013-4942 Source advisory: OSV:GHSA-9WW8-J8J2-3788...

GHSA-9WW8-J8J2-3788 YUI Cross-site Scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in flashuploader.swf in the Uploader component in Yahoo! YUI 3.5.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitra...

@kitinggan/didactic-eureka (1.1.4), @qsb-cli-test/command (1.0.10) +37 more potentially affected by CVE-2013-4941 via yui (>=3.5.0, <=3.9.1)

yui NPM version =3.5.0, =1.0.8, =1.0.8, =1.0.6, =1.0.6, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.1.1, =0.1.4 and more Source cves: CVE-2013-4941 Source advisory: OSV:GHSA-64R3-582J-FRQM...

YUI Cross-site Scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML...

YUI Cross-site Scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary we...

GHSA-X5HJ-47VV-53P8 YUI Cross-site Scripting (XSS) vulnerability

Cross-site scripting XSS vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers to inject arbitrary web script or HTML...

@kitinggan/didactic-eureka (1.1.4), @qsb-cli-test/command (1.0.10) +44 more potentially affected by CVE-2013-4940 via yui (>=3.5.0, <=3.10.3)

yui NPM version =3.5.0, =1.0.8, =1.0.8, =1.0.6, =1.0.6, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.1.1, =0.1.4 and more Source cves: CVE-2013-4940 Source advisory: OSV:GHSA-X5HJ-47VV-53P8...

PT-2022-8564 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions prior to 3.9.1 Moodle versions prior to 3.8.4 Moodle versions prior to 3.7.7 Moodle versions prior to 3.5.13 Description: The issue is related to the yui combo component, which does not limit the amount of files it can load,...

@kitinggan/didactic-eureka (1.1.4), @qsb-cli-test/command (1.0.10) +37 more potentially affected by CVE-2013-4939 via yui (>=3.5.0, <=3.9.1)

yui NPM version =3.5.0, =1.0.8, =1.0.8, =1.0.6, =1.0.6, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.1.1, =0.1.4 and more Source cves: CVE-2013-4939 Source advisory: OSV:GHSA-MJ87-8XF8-FP4W...