The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to charts/assets/charts.swf.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade yahoo-ui | Dec 10, 2025 | Dec 15, 2010 |
| Suse | — | Upgrade moodle-caUpgrade moodle-gaUpgrade moodle-tlUpgrade moodle-idUpgrade moodle-deUpgrade moodle-hrUpgrade moodle-daUpgrade moodle-msUpgrade moodle-slUpgrade moodle-skUpgrade moodle-knUpgrade moodle-itUpgrade moodle-faUpgrade moodle-noUpgrade moodle-mi_tnUpgrade moodle-euUpgrade moodle-hiUpgrade moodle-svUpgrade moodle-arUpgrade moodle-srUpgrade moodle-soUpgrade moodle-huUpgrade moodle-ltUpgrade moodle-nnUpgrade moodle-ruUpgrade moodle-heUpgrade moodle-elUpgrade moodle-glUpgrade moodle-isUpgrade moodle-de_duUpgrade moodle-plUpgrade moodle-afUpgrade moodle-zh_cnUpgrade moodle-bsUpgrade moodle-ptUpgrade moodle-bgUpgrade moodleUpgrade moodle-thUpgrade moodle-viUpgrade moodle-kmUpgrade moodle-fiUpgrade moodle-csUpgrade moodle-jaUpgrade moodle-koUpgrade moodle-roUpgrade moodle-trUpgrade moodle-kaUpgrade moodle-sqUpgrade moodle-nlUpgrade moodle-beUpgrade moodle-lvUpgrade moodle-etUpgrade moodle-ukUpgrade moodle-esUpgrade moodle-fr | Feb 17, 2015 | Nov 7, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub