Skip to content
OpenAdvisories

Archive

26 July 2013

Vulnerabilities first published on this day (UTC), newest first.

← June 2013 2013 / July /26 August 2013 →
  1. 113
  2. 29
  3. 324
  4. 411
  5. 5 
  6. 65
  7. 7 
  8. 822
  9. 910
  10. 1071
  11. 1110
  12. 128
  13. 133
  14. 14 
  15. 156
  16. 1613
  17. 1777
  18. 1840
  19. 1913
  20. 20 
  21. 212
  22. 225
  23. 2311
  24. 247
  25. 254
  26. 2624
  27. 27 
  28. 288
  29. 2932
  30. 3015
  31. 3143
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium —
    CVE-2013-4940

    YUI Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.10.2, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows remote attackers…

    moodle/moodle yui npm Packagist
  • Medium —
    CVE-2013-4939

    Cross-Site Scripting in yui

    Cross-site scripting (XSS) vulnerability in io.swf in the IO Utility component in Yahoo! YUI 3.0.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows rem…

    yui npm
  • Medium —
    CVE-2013-4941

    YUI Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in uploader.swf in the Uploader component in Yahoo! YUI 3.2.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, allows…

    moodle/moodle yui npm Packagist
  • Medium —
    CVE-2013-4942

    YUI Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in flashuploader.swf in the Uploader component in Yahoo! YUI 3.5.0 through 3.9.1, as used in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.1, and other products, a…

    moodle/moodle yui npm Packagist
  • Medium —
    CVE-2013-3300

    Lift Sensitive Information Disclosure

    The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a < (…

    net.liftweb:lift-webkit_2.9.0-1 net.liftweb:lift-webkit_2.7.7 net.liftweb:lift-webkit_2.8.1 net.liftweb:lift-webkit_2.9.0 Maven