Filter
AND
-Infinity
0
Trending
Software
composer/moodle/moodleMoodle: authenticated remote code execution risk in the moodle lms equella repository
8.8
EPSS
0.17%
First published (updated )
MoodleA remote code execution risk was identified in the Moodle LMS EQUELLA repository. By default this wa…
7
First published (updated )
composer/moodle/moodleMoodle: authenticated remote code execution risk in the moodle lms dropbox repository
8.8
EPSS
0.17%
First published (updated )
MoodleA remote code execution risk was identified in the Moodle LMS Dropbox repository. By default this wa…
7
First published (updated )
composer/moodle/moodleMoodle: csrf risk in brickfield tool's analysis request action
8.8
EPSS
0.02%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
MoodleMoodle: user dos and name disclosure via idor in moodle mfa email factor revoke action
7.1
EPSS
0.06%
First published (updated )
MoodleMoodle: unauthenticated rest api user data exposure
7.5
First published (updated )
MoodleOn certain Moodle sites, it was possible to retrieve user data, including names, contact information…
7
First published (updated )
composer/moodle/moodleMoodle: lfi vulnerability when restoring malformed block backups
7.5
First published (updated )
composer/moodle/moodleMoodle: csrf risk in feedback non-respondents report
8.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/moodle/moodleMoodle: idor in badges allows deletion of arbitrary badges
7.5
First published (updated )
composer/moodle/moodleMoodle: cache poisoning via injection into storage
7.7
First published (updated )
composer/moodle/moodleMoodle: remote code execution via calculated question types
8.1
First published (updated )
composer/moodle/moodlemoodle: CSRF risks due to misuse of confirm_sesskey
8.8
First published (updated )
composer/moodle/moodlemoodle: HTTP authorization header is preserved between "emulated redirects"
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/moodle/moodlemoodle: CSRF risk in analytics management of models
8.8
EPSS
0.04%
First published (updated )
composer/moodle/moodleMsa-24-0005: csrf risk in language import utility
8.8
EPSS
0.04%
First published (updated )
composer/moodle/moodleMsa-24-0001: denial of service risk in file picker unzip functionality
7.5
EPSS
0.04%
First published (updated )
redhat/moodleMoodle: authenticated remote code execution risk in imscp
8.8
EPSS
1.83%
First published (updated )
redhat/moodleMoodle: authenticated remote code execution risk in lesson
8.8
EPSS
1.83%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/moodleMoodle: ssrf risk due to insufficient check on the curl blocked hosts
7.5
First published (updated )
redhat/moodleMoodle: minor sql injection risk in external wiki method for listing pages
7.3
First published (updated )
MoodleMoodle: csrf risk in resetting all templates of a database activity
8.8
First published (updated )
MoodleMoodle: authenticated sql injection via availability check
8.8
First published (updated )
MoodleIn Moodle, the file repository's URL parsing required additional recursion handling to mitigate the …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/moodleMoodle: possible to set the preferred "start page" of other users
8.2
First published (updated )
MoodleSeverity/Risk: Serious Versions affected: 4.0 to 4.0.3, 3.11 to 3.11.9, 3.9 to 3.9.16 and earlier …
7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.