The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.8.1, as used in Bugzilla, Moodle, and other products, allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader/assets/uploader.swf.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade yahoo-ui | Dec 10, 2025 | Dec 15, 2010 |
| Suse | — | Upgrade moodle-faUpgrade moodle-hiUpgrade moodle-ltUpgrade moodle-knUpgrade moodle-sqUpgrade moodle-itUpgrade moodle-zh_cnUpgrade moodle-tlUpgrade moodle-isUpgrade moodle-nlUpgrade moodle-deUpgrade moodle-glUpgrade moodle-koUpgrade moodle-noUpgrade moodle-svUpgrade moodle-de_duUpgrade moodle-ukUpgrade moodle-mi_tnUpgrade moodle-slUpgrade moodle-idUpgrade moodle-heUpgrade moodle-esUpgrade moodle-daUpgrade moodle-bsUpgrade moodle-euUpgrade moodle-huUpgrade moodle-trUpgrade moodle-soUpgrade moodle-arUpgrade moodle-nnUpgrade moodle-viUpgrade moodle-plUpgrade moodle-kaUpgrade moodle-lvUpgrade moodle-skUpgrade moodle-srUpgrade moodle-caUpgrade moodle-frUpgrade moodle-ruUpgrade moodle-etUpgrade moodle-csUpgrade moodle-afUpgrade moodle-bgUpgrade moodle-fiUpgrade moodle-thUpgrade moodle-beUpgrade moodle-msUpgrade moodle-hrUpgrade moodle-kmUpgrade moodle-roUpgrade moodleUpgrade moodle-jaUpgrade moodle-ptUpgrade moodle-elUpgrade moodle-ga | Feb 17, 2015 | Nov 7, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub