Yahoo YUI 2.8.1
Approved changes feed: RSS · Atom
cpe:2.3:a:yahoo:yui:2.8.1:*:*:*:*:*:*:*
part: a version: 2.8.1 update: *
| Vendor | Yahoo (0dc01c4f-a37d-56de-8e72-74e1c6cb3fab) |
|---|---|
| Product | Yui (50079668-00f8-57fe-9771-118caa7636db) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/yui/yui3 |
purl2cpe | 2026-06-01 10:17:01.176826 |
pkg:npm/yui |
purl2cpe | 2026-06-01 10:17:01.176827 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-6780 |
vulnerable | 2026-06-08 05:05:06.936723 |
Details available
Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via the allowedDomain parameter.
Published: 2013-11-13T15:00:00.000Z
Updated: 2024-08-06T17:46:23.463Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5883 |
vulnerable | 2026-06-08 05:02:58.541491 |
Details available
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.9.0, as used in Bugzilla 3.7.x and 4.0.x before 4.0.9, 4.1.x and 4.2.x before 4.2.4, and 4.3.x and 4.4.x before 4.4rc1, allows remote attackers to inject arbitrary web script or HTML via vectors related to swfstore.swf, a similar issue to CVE-2010-4209.
Published: 2012-11-16T11:00:00.000Z
Updated: 2024-08-06T21:21:27.140Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5882 |
vulnerable | 2026-06-08 05:02:58.534002 |
Details available
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.5.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to uploader.swf, a similar issue to CVE-2010-4208.
Published: 2012-11-16T11:00:00.000Z
Updated: 2024-08-06T21:21:28.339Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5881 |
vulnerable | 2026-06-08 05:02:58.530872 |
Details available
Cross-site scripting (XSS) vulnerability in the Flash component infrastructure in YUI 2.4.0 through 2.9.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to charts.swf, a similar issue to CVE-2010-4207.
Published: 2012-11-16T11:00:00.000Z
Updated: 2024-08-06T21:21:27.714Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4710 |
vulnerable | 2026-06-08 04:56:30.406316 |
Details available
Cross-site scripting (XSS) vulnerability in the addItem method in the Menu widget in YUI before 2.9.0 allows remote attackers to inject arbitrary web script or HTML via a field that is added to a menu, related to documentation that specifies this field as a text field rather than an HTML field, a similar issue to CVE-2010-4569 and CVE-2010-4570.
Published: 2011-01-28T20:29:00.000Z
Updated: 2024-08-07T03:55:35.210Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4209 |
vulnerable | 2026-06-08 04:55:19.460655 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4208 |
vulnerable | 2026-06-08 04:55:19.460122 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4207 |
vulnerable | 2026-06-08 04:55:19.458869 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.