Yui

CVE-2013-6780 Nov 13, 15:55 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo!. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

CVE-2013-4942 Jul 29, 13:59 LIB MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in flashuploader.swf in the Uploader component in Yahoo!. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

CVE-2013-4941 Jul 29, 13:59 LIB MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo!. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

CVE-2013-4940 Jul 29, 13:59 LIB MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo!. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

CVE-2013-4939 Jul 29, 13:59 npm MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo!. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

CVE-2012-5883 Nov 16, 12:24 MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.9.0, as used in Bugzilla 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

CVE-2012-5882 Nov 16, 12:24 MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

CVE-2012-5881 Nov 16, 12:24 npm MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.