Filter
AND
AND
Moodle MoodleInsufficient capability checks made it possible to fetch other users' calendar action events.
5.3
First published (updated )
Moodle MoodleAn authentication bypass risk was identified in the external database authentication functionality, …
6.5
First published (updated )
Moodle MoodleInsufficient capability checks made it possible for teachers to download users outside of their cour…
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleA session hijack risk was identified in the Shibboleth authentication plugin.
4.3
First published (updated )
Moodle MoodleInsufficient escaping of the LaTeX preamble made it possible for site administrators to read files a…
4.9
First published (updated )
Moodle MoodleIn Moodle, insufficient capability checks meant message deletions were not limited to the current us…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleIn Moodle, the file repository's URL parsing required additional recursion handling to mitigate the …
7.5
First published (updated )
Moodle MoodleIn Moodle, in some circumstances, email notifications of messages could have the link back to the or…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Moodle MoodleIn Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin.
9.8
First published (updated )
Moodle MoodleIn Moodle, insufficient capability checks made it possible to remove other users' calendar URL subsc…
5.3
First published (updated )
Moodle MoodleA denial-of-service risk was identified in the draft files area, due to it not respecting user file …
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/moodle/moodleOS Command Injection, Command Injection
9.1
First published (updated )
Moodle MoodleWhen creating a user account, it was possible to verify the account without having access to the ver…
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.