Filter
AND

Software

composer/moodle/moodlemoodle: CSRF risks due to misuse of confirm_sesskey

8.8
First published (updated )

composer/moodle/moodlemoodle: CSRF risk in analytics management of models

8.8
EPSS
0.04%
First published (updated )

composer/moodle/moodleMsa-24-0005: csrf risk in language import utility

8.8
EPSS
0.04%
First published (updated )

composer/moodle/moodleMsa-24-0001: denial of service risk in file picker unzip functionality

7.5
EPSS
0.04%
First published (updated )

redhat/moodleMoodle: authenticated remote code execution risk in imscp

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/moodleMoodle: authenticated remote code execution risk in lesson

8.8
First published (updated )

redhat/moodleMoodle: ssrf risk due to insufficient check on the curl blocked hosts

7.5
First published (updated )

redhat/moodleMoodle: minor sql injection risk in external wiki method for listing pages

7.3
First published (updated )

MoodleMoodle: csrf risk in resetting all templates of a database activity

8.8
First published (updated )

MoodleMoodle: authenticated sql injection via availability check

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

MoodleIn Moodle, the file repository's URL parsing required additional recursion handling to mitigate the …

7.5
First published (updated )

MoodleSSRF

7.5
First published (updated )

redhat/moodleMoodle: possible to set the preferred "start page" of other users

8.2
First published (updated )

MoodleSeverity/Risk: Serious Versions affected: 4.0 to 4.0.3, 3.11 to 3.11.9, 3.9 to 3.9.16 and earlier …

First published (updated )

composer/moodle/moodleXSS

7.1
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

MoodleXSS

First published (updated )

composer/moodle/moodleCSRF

8.8
First published (updated )

MoodleInput Validation

7.2
First published (updated )

MoodleIn Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves…

8.8
First published (updated )

MoodleIn Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it ca…

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/moodle/moodleInput Validation, Path Traversal

7.5
First published (updated )

redhat/moodleSQL Injection

8.8
First published (updated )

composer/moodle/moodleSQL Injection

7.2
First published (updated )

composer/moodle/moodleA denial-of-service risk was identified in the draft files area, due to it not respecting user file …

7.5
First published (updated )

MoodleCSRF

8.8
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

MoodleCSRF

8.8
First published (updated )

composer/moodle/moodleCode Injection

7.2
First published (updated )

composer/moodle/moodleA vulnerability was found in Moodle where users with "Log in as" capability in a course context (typ…

8.8
First published (updated )

composer/moodle/moodleA vulnerability was found in Moodle where the decompressed size of zip files was not checked against…

7.5
First published (updated )

redhat/moodleInsufficient capability checks could lead to users with the ability to course restore adding additio…

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203