Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2022-50943 |
|
Cross-Site Scripting (XSS) in moodle (CVE-2022-50943)
cross-site scripting in moodle (CVE-2022-50943). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-15110 |
|
Information Disclosure in moodle (CVE-2017-15110)
vulnerability in moodle (CVE-2017-15110). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-12157 |
|
Information Disclosure in moodle (CVE-2017-12157)
vulnerability in moodle (CVE-2017-12157). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-12156 |
|
Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback.
Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback.
|
| CVE-2017-7532 |
|
In Moodle 3.x, course creators are able to change system default settings for courses.
In Moodle 3.x, course creators are able to change system default settings for courses.
|
| CVE-2017-7531 |
|
In Moodle 3.3, the course overview block reveals activities in hidden courses.
In Moodle 3.3, the course overview block reveals activities in hidden courses.
|
| CVE-2017-2642 |
|
Moodle 3.x has user fullname disclosure on the user preferences page.
Moodle 3.x has user fullname disclosure on the user preferences page.
|
| CVE-2017-7491 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2017-7491)
vulnerability in csrf (CVE-2017-7491). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-7490 |
|
Vulnerability in moodle (CVE-2017-7490)
vulnerability in moodle (CVE-2017-7490). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-7489 |
|
Privilege Escalation in moodle (CVE-2017-7489)
vulnerability in moodle (CVE-2017-7489). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-3734 |
|
Cross-Site Request Forgery (CSRF) in csrf (CVE-2016-3734)
vulnerability in csrf (CVE-2016-3734). Successful exploitation can lead to full system takeover.
|
| CVE-2016-3733 |
|
Vulnerability in moodle (CVE-2016-3733)
vulnerability in moodle (CVE-2016-3733). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-3732 |
|
Information Disclosure in moodle (CVE-2016-3732)
vulnerability in moodle (CVE-2016-3732). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-3731 |
|
Information Disclosure in moodle (CVE-2016-3731)
vulnerability in moodle (CVE-2016-3731). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-3729 |
|
Vulnerability in moodle (CVE-2016-3729)
vulnerability in moodle (CVE-2016-3729). Data can be tampered with by attackers.
|
| CVE-2017-7298 |
|
Cross-Site Scripting (XSS) in moodle (CVE-2017-7298)
cross-site scripting in moodle (CVE-2017-7298). Risk of unauthorized operations or information disclosure.
|
| CVE-2017-2645 |
|
In Moodle 3.x, XSS can occur via attachments to evidence of prior learning.
In Moodle 3.x, XSS can occur via attachments to evidence of prior learning.
|
| CVE-2017-2644 |
|
In Moodle 3.x, XSS can occur via evidence of prior learning.
In Moodle 3.x, XSS can occur via evidence of prior learning.
|
| CVE-2017-2643 |
|
In Moodle 3.2.x, global search displays user names for unauthenticated users.
In Moodle 3.2.x, global search displays user names for unauthenticated users.
|
| CVE-2017-2641 |
|
In Moodle 2.x and 3.x, SQL injection can occur via user preferences.
In Moodle 2.x and 3.x, SQL injection can occur via user preferences.
|
| CVE-2017-2578 |
|
In Moodle 3.x, there is XSS in the assignment submission page.
In Moodle 3.x, there is XSS in the assignment submission page.
|
| CVE-2017-2576 |
|
In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums.
In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums.
|
| CVE-2016-8644 |
|
In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.
In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.
|
| CVE-2016-8643 |
|
In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services.
In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services.
|
| CVE-2016-8642 |
|
In Moodle 2.x and 3.x, the question engine allows access to files that should not be available.
In Moodle 2.x and 3.x, the question engine allows access to files that should not be available.
|
| CVE-2016-7038 |
|
Vulnerability in moodle (CVE-2016-7038)
vulnerability in moodle (CVE-2016-7038). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-5014 |
|
Information Disclosure in moodle (CVE-2016-5014)
vulnerability in moodle (CVE-2016-5014). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-5013 |
|
Vulnerability in moodle (CVE-2016-5013)
vulnerability in moodle (CVE-2016-5013). Risk of unauthorized operations or information disclosure.
|
| CVE-2016-5012 |
|
In Moodle 3.x, glossary search displays entries without checking user permissions to view them.
In Moodle 3.x, glossary search displays entries without checking user permissions to view them.
|