Filter
AND
-Infinity
0
Trending
Software
composer/moodle/moodleMoodle: idor when accessing the cohorts report
4.3
EPSS
0.03%
First published (updated )
composer/moodle/moodleMoodle: idor in messaging web service allows access to some user details
4.3
EPSS
0.03%
First published (updated )
composer/moodle/moodleMoodle: ajax section delete does not respect course_can_delete_section()
4.3
EPSS
0.03%
First published (updated )
composer/moodle/moodleMoodle: reflected xss risk in policy tool
5.4
EPSS
0.03%
First published (updated )
composer/moodle/moodleMoodle: idor in web service allows users enrolled in a course to access some details of other users
4.3
EPSS
0.03%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/moodle/moodleMoodle: idor in moodle rss block allows unauthorized access to rss feeds
4.3
EPSS
0.03%
First published (updated )
composer/moodle/moodleMoodle: moodle allows course self-enrolment before completing mfa
4.3
EPSS
0.03%
First published (updated )
MoodleMoodle: moodle assignment submission search leaks anonymous student identities
4.3
EPSS
0.03%
First published (updated )
composer/moodle/moodleMoodle: partial data exposure in moodle before completing multi-factor authentication
4.3
EPSS
0.04%
First published (updated )
composer/moodle/moodleMoodle: hidden grades shown to users without permission on some grade reports
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/moodle/moodleMoodle: xss risk when restoring malicious course backup file
6.1
First published (updated )
composer/moodle/moodleMoodle: can create global glossary without being admin
5.3
First published (updated )
composer/moodle/moodleMoodle: matrix user/power level management not always working as expected with suspended users
5.3
First published (updated )
composer/moodle/moodleMoodle: authorization headers preserved between "emulated redirects"
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/moodle/moodleMoodle: lack of access control when using external methods for quiz overrides
5.3
First published (updated )
composer/moodle/moodleMoodle: user information visibility control issues in gradebook reports
5.3
First published (updated )
composer/moodle/moodleMoodle: some users can delete audiences of other reports
6.5
EPSS
0.05%
First published (updated )
composer/moodle/moodleMoodle: idor when fetching report schedules
4.3
EPSS
0.05%
First published (updated )
composer/moodle/moodleMoodle: users' names returned in messaging error message
4.3
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/moodle/moodleMoodle: idor in edit/delete rss feed
6.5
EPSS
0.05%
First published (updated )
composer/moodle/moodlemoodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_data backup
6.5
EPSS
0.04%
First published (updated )
composer/moodle/moodlemoodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_wiki backup
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/moodle/moodlemoodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_workshop backup
5.9
First published (updated )
composer/moodle/moodlemoodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_feedback backup
6.5
EPSS
0.04%
First published (updated )
composer/moodle/moodleMsa-24-0003: h5p attempts report did not respect activity group settings
5.3
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.