The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore/swfstore.swf.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade yahoo-ui | Dec 10, 2025 | Dec 15, 2010 |
| Suse | — | Upgrade moodle-caUpgrade moodle-bgUpgrade moodle-viUpgrade moodle-ukUpgrade moodle-hiUpgrade moodle-slUpgrade moodle-hrUpgrade moodle-thUpgrade moodle-mi_tnUpgrade moodle-euUpgrade moodle-heUpgrade moodle-bsUpgrade moodle-ruUpgrade moodle-ltUpgrade moodle-noUpgrade moodle-koUpgrade moodle-zh_cnUpgrade moodle-etUpgrade moodle-msUpgrade moodle-csUpgrade moodle-plUpgrade moodle-frUpgrade moodle-roUpgrade moodle-ptUpgrade moodle-knUpgrade moodle-beUpgrade moodle-sqUpgrade moodle-isUpgrade moodle-svUpgrade moodle-elUpgrade moodle-afUpgrade moodle-trUpgrade moodle-kmUpgrade moodle-deUpgrade moodle-gaUpgrade moodle-esUpgrade moodle-itUpgrade moodle-idUpgrade moodle-arUpgrade moodle-glUpgrade moodle-lvUpgrade moodle-srUpgrade moodle-jaUpgrade moodle-kaUpgrade moodleUpgrade moodle-fiUpgrade moodle-daUpgrade moodle-tlUpgrade moodle-nnUpgrade moodle-nlUpgrade moodle-faUpgrade moodle-soUpgrade moodle-huUpgrade moodle-de_duUpgrade moodle-sk | Feb 17, 2015 | Nov 7, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub