Filter
AND
AND

Versions

3.9.0
17
3.11.0
14
3.5.0
12
3.8.0
10
4.0.0
9
3.10.0
8
3.7.0
8
2.7.0
7
2.8.0
7
2.8.1
7
2.8.2
7
2.8.3
7
2.8.4
7
2.8.5
7
2.8.6
7
2.9.0
7
4.1.0
7
2.7.1
6
2.7.2
6
2.8.7
6
2.9.1
6
3.3.0
6
3.4.0
6
2.7.3
5
2.7.4
5
2.7.5
5
2.7.6
5
2.7.7
5
2.7.8
5
2.8.8
5
2.9.2
5
3.1.0
5
2.5.0
4
2.5.1
4
2.7.9
4
4.2.0
4
2.6.0
3
2.6.1
3
2.6.11
3
2.6.2
3
2.6.3
3
2.7.10
3
2.8.10
3
2.8.9
3
2.9.3
3
2.9.4
3
3.0.0
3
3.0.1
3
3.0.2
3
3.1.2
3
3.6.0
3
1.1.1
2
1.5.2
2
1.5.3
2
1.8.1
2
1.8.10
2
1.8.2
2
1.8.3
2
1.8.4
2
1.8.5
2
1.8.7
2
1.8.8
2
1.8.9
2
1.9
2
1.9.1
2
1.9.2
2
1.9.3
2
1.9.4
2
1.9.5
2
1.9.6
2
2.2.0
2
2.3.0
2
2.3.1
2
2.3.2
2
2.3.3
2
2.3.4
2
2.3.5
2
2.3.6
2
2.3.7
2
2.3.8
2
2.4.0
2
2.4.1
2
2.4.2
2
2.4.3
2
2.4.4
2
2.4.5
2
2.5.2
2
2.5.3
2
2.5.4
2
2.5.5
2
2.5.6
2
2.6.4
2
2.6.5
2
2.7.11
2
2.7.12
2
2.8.11
2
2.9.5
2
3.0.10
2
3.0.3
2
3.1.11
2
3.2.0
2
3.2.8
2
3.3.5
2
3.4.2
2
3.5
2
3.5.14
2
3.7.8
2
3.8.5
2
3.9.2
2
4.1.1
2
1.2.0
1
1.2.1
1
1.3.0
1
1.3.1
1
1.3.2
1
1.3.3
1
1.3.4
1
1.4.1
1
1.6
1
1.6.1
1
1.7
1
1.7.1
1
1.8
1
1.8.11
1
1.8.6
1
1.9.7
1
2.0
1
2.1
1
2.1.0
1
2.1.1
1
2.1.2
1
2.1.3
1
2.2
1
2.2.1
1
2.2.10
1
2.2.11
1
2.2.2
1
2.2.3
1
2.2.4
1
2.2.5
1
2.2.6
1
2.2.7
1
2.2.8
1
2.2.9
1
2.3.10
1
2.3.11
1
2.3.9
1
2.4.10
1
2.4.11
1
2.4.6
1
2.4.7
1
2.4.8
1
2.4.9
1
2.5.7
1
2.5.8
1
2.6.10
1
2.6.6
1
2.6.7
1
2.6.8
1
2.6.9
1
2.7.0-beta
1
2.7.0-rc1
1
2.7.0-rc2
1
2.7.13
1
2.7.15
1
2.8.12
1
2.9.6
1
2.9.7
1
3.0.0-beta
1
3.0.0-rc1
1
3.0.0-rc2
1
3.0.0-rc3
1
3.0.0-rc4
1
3.0.4
1
3.0.5
1
3.1
1
3.1.1
1
3.3
1
3.3.4
1
3.4
1
3.4.1
1
3.6
1
3.7
1
3.8
1
3.8.8
1
3.8.9
1
4.0
1
4.1
1
4.2
1
4.3.0
1
4.4.0
1

composer/moodle/moodlemoodle: CSRF risks due to misuse of confirm_sesskey

high
8.8
First published (updated )
CVE-2024-38276

composer/moodle/moodlemoodle: CSRF risk in analytics management of models

high
8.8
EPSS
0.04%
First published (updated )
CVE-2024-34008

Moodle MoodleMoodle: authenticated remote code execution risk in imscp

high
8.8
First published (updated )
CVE-2023-5540

Moodle MoodleMoodle: authenticated remote code execution risk in lesson

high
8.8
First published (updated )
CVE-2023-5539

Moodle MoodleMoodle: ssrf risk due to insufficient check on the curl blocked hosts

high
7.5
First published (updated )
CVE-2023-35133

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Moodle MoodleMoodle: minor sql injection risk in external wiki method for listing pages

high
7.3
First published (updated )
CVE-2023-30944

Moodle MoodleMoodle: csrf risk in resetting all templates of a database activity

high
8.8
First published (updated )
CVE-2023-28335

Moodle MoodleMoodle: authenticated sql injection via availability check

high
8.8
First published (updated )
CVE-2023-28329

Moodle MoodleIn Moodle, the file repository's URL parsing required additional recursion handling to mitigate the …

high
7.5
First published (updated )
CVE-2021-36395

Moodle MoodleSSRF

high
7.5
First published (updated )
CVE-2021-36396

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Moodle MoodleMoodle: possible to set the preferred "start page" of other users

high
8.2
First published (updated )
CVE-2023-23923

Moodle MoodleXSS

high
7.1
First published (updated )
CVE-2022-40313

Moodle MoodleCSRF

high
8.8
First published (updated )
CVE-2022-2986

Moodle MoodleInput Validation

high
7.2
First published (updated )
CVE-2020-1756

Moodle MoodleIn Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves…

high
8.8
First published (updated )
CVE-2020-14321

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Moodle MoodleIn Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it ca…

high
7.5
First published (updated )
CVE-2020-14322

Moodle MoodleInput Validation, Path Traversal

high
7.5
First published (updated )
CVE-2022-35650

Moodle MoodleSQL Injection

high
8.8
First published (updated )
CVE-2022-0983

Moodle MoodleSQL Injection

high
7.2
First published (updated )
CVE-2021-32474

Moodle MoodleA denial-of-service risk was identified in the draft files area, due to it not respecting user file …

high
7.5
First published (updated )
CVE-2021-32476

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Moodle MoodleCSRF

high
8.8
First published (updated )
CVE-2022-0335

Moodle MoodleCSRF

high
8.8
First published (updated )
CVE-2021-43559

Moodle MoodleCode Injection

high
7.2
First published (updated )
CVE-2021-20187

composer/moodle/moodleA vulnerability was found in Moodle where users with "Log in as" capability in a course context (typ…

high
8.8
First published (updated )
CVE-2020-25629

Moodle MoodleA vulnerability was found in Moodle where the decompressed size of zip files was not checked against…

high
7.5
First published (updated )
CVE-2020-25630

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

redhat/moodleInsufficient capability checks could lead to users with the ability to course restore adding additio…

high
7.5
First published (updated )
CVE-2020-25699

redhat/moodleUsers' enrolment capabilities were not being sufficiently checked when they restored into an existin…

high
7.5
First published (updated )
CVE-2020-25698

composer/moodle/moodleInput Validation

high
8.8
First published (updated )
CVE-2020-10738

Moodle MoodleCSRF

high
8.1
First published (updated )
CVE-2020-1692

Fedoraproject FedoraMoodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are…

high
7.5
First published (updated )
CVE-2012-1170

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Fedoraproject FedoraMoodle before 2.2.2 has users' private files included in course backups

high
7.5
First published (updated )
CVE-2012-1156

Fedoraproject FedoraInput Validation

high
8.2
First published (updated )
CVE-2012-1168

Moodle MoodleInfoleak

high
7.5
First published (updated )
CVE-2012-1155

Moodle MoodleCSRF

high
8.8
First published (updated )
CVE-2019-10186

Moodle MoodleA flaw was found in Moodle before versions 3.7, 3.6.4. A web service fetching messages was not restr…

high
7.5
First published (updated )
CVE-2019-10154

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Moodle MoodleA vulnerability was found in moodle before versions 3.6.3, 3.5.5 and 3.4.8. Users could assign thems…

high
8.8
First published (updated )
CVE-2019-3849

composer/moodle/moodleSSRF

high
7.5
First published (updated )
CVE-2019-6970

Moodle MoodleCSRF

high
8.8
First published (updated )
CVE-2018-16854

Moodle MoodleXSS, Input Validation

high
8.8
First published (updated )
CVE-2018-14631

Moodle MoodleCode Injection, Input Validation

high
8.8
First published (updated )
CVE-2018-14630

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

composer/moodle/moodleInput Validation

high
7.5
First published (updated )
CVE-2018-10891

Moodle MoodleCode Injection

high
8.8
First published (updated )
CVE-2018-1133

Moodle MoodleInput Validation

high
8.1
First published (updated )
CVE-2018-1137

Moodle MoodleA flaw was found in Moodle 3.4 to 3.4.1, and 3.3 to 3.3.4. If a user account using OAuth2 authentica…

high
8.1
First published (updated )
CVE-2018-1082

Moodle MoodleCSRF

high
8.8
First published (updated )
CVE-2016-3734

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Moodle MoodleIn Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or f…

high
7.3
First published (updated )
CVE-2016-7038

Moodle MoodleMalicious File Upload

high
8.8
First published (updated )
CVE-2016-9187

Moodle MoodleMalicious File Upload

high
8.8
First published (updated )
CVE-2016-9186

Moodle MoodleInfoleak, SQL Injection

high
7.5
First published (updated )
CVE-2016-7919

Moodle MoodleCSRF

high
8.8
First published (updated )
CVE-2016-2157

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203