moodle vulnerabilities (Mageia)

108 vulnerabilities.

• moodle Mageia Moodle sensitive information disclosure CVE-2016-2190 Fix available 5.3 MediumMarch 25, 2016
• moodle Mageia Moodle External function mod_assign_save_submission does not check due dates CVE-2016-2159 Fix available 4.3 MediumMarch 25, 2016
• moodle Mageia Moodle allows attackers to obtain sensitive category-detail information CVE-2016-2158 Fix available 4.3 MediumMarch 25, 2016
• moodle Mageia Moodle cross-site request forgery (CSRF) vulnerability CVE-2016-2157 Fix available 8.8 HighMarch 25, 2016
• moodle Mageia Moodle provides calendar-event data without considering whether an activity is hidden CVE-2016-2156 Fix available 4.3 MediumMarch 25, 2016
• moodle Mageia Moodle allows attackers to modify "Exclude grade" settings CVE-2016-2155 Fix available 4.3 MediumMarch 25, 2016
• moodle Mageia Moodle allows attackers to discover hidden course names CVE-2016-2154 Fix available 4.3 MediumMarch 25, 2016
• moodle Mageia Moodle Reflected XSS in mod_data advanced search CVE-2016-2153 Fix available 6.1 MediumMarch 25, 2016
• moodle Mageia Moodle XSS from profile fields from external db CVE-2016-2152 Fix available 6.1 MediumMarch 25, 2016
• moodle Mageia Moodle allows attackers to discover student e-mail addresses CVE-2016-2151 Fix available 4.3 MediumMarch 25, 2016
• moodle Mageia Moodle Cross-site scripting (XSS) vulnerability in course management search CVE-2016-0725 Fix available 6.1 MediumJanuary 20, 2016
• moodle Mageia Moodle sensitive information disclosure CVE-2016-0724 Fix available 4.3 MediumJanuary 20, 2016
• moodle Mageia Moodle allows attackers to bypass intended access restrictions CVE-2015-5342 Fix available 4.3 MediumDecember 5, 2015
• moodle Mageia Moodle allows attackers to read SCORM contents CVE-2015-5341 Fix available 4.3 MediumDecember 5, 2015
• moodle Mageia Moodle sensitive information disclosure CVE-2015-5340 Fix available 4.3 MediumDecember 5, 2015
• moodle Mageia Moodle does not properly implement group-based access restrictions CVE-2015-5339 Fix available 4.3 MediumDecember 5, 2015
• moodle Mageia Moodle multiple cross-site request forgery (CSRF) vulnerabilities CVE-2015-5338 Fix available 8.8 HighDecember 5, 2015
• moodle Mageia Moodle XSS Vulnerability CVE-2015-5337 Fix available 6.1 MediumDecember 5, 2015
• moodle Mageia Moodle multiple cross-site scripting (XSS) vulnerabilities CVE-2015-5336 Fix available 5.4 MediumDecember 5, 2015
• moodle Mageia Moodle cross-site request forgery (CSRF) vulnerability CVE-2015-5335 Fix available 4.3 MediumDecember 5, 2015
• moodle Mageia Atto in Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 allows remote attackers to cause a... CVE-2015-5332 6.8 MediumDecember 5, 2015
• moodle Mageia Moodle cross-site scripting (XSS) vulnerability CVE-2015-5269 Fix available 5.4 MediumSeptember 23, 2015
• moodle Mageia Moodle mishandles group-based authorization checks CVE-2015-5268 Fix available 4.3 MediumSeptember 23, 2015
• moodle Mageia Moodle uses predictable password-recovery tokens CVE-2015-5267 Fix available 7.5 HighSeptember 23, 2015
• moodle Mageia Moodle allows attackers to obtain manager privileges CVE-2015-5266 Fix available 6.8 MediumSeptember 23, 2015
• moodle Mageia Moodle allows attackers to delete files CVE-2015-5265 Fix available 4.3 MediumSeptember 23, 2015
• moodle Mageia Moodle allows attackers to enter additional answer attempts CVE-2015-5264 Fix available 5.4 MediumSeptember 23, 2015
• moodle Mageia Moodle multiple cross-site scripting (XSS) vulnerabilities CVE-2015-3275 Fix available 6.1 MediumAugust 3, 2015
• moodle Mageia Moodle cross-site scripting (XSS) vulnerability CVE-2015-3274 Fix available 6.1 MediumAugust 3, 2015
• moodle Mageia Moodle open redirect vulnerability CVE-2015-3272 Fix available 7.4 HighAugust 3, 2015
• moodle Mageia Moodle allows attackers to bypass file-management restrictions CVE-2015-3181 Fix available 4.0 MediumMay 18, 2015
• moodle Mageia Moodle allows attackers to obtain sensitive course-structure information CVE-2015-3180 Fix available 4.0 MediumMay 18, 2015
• moodle Mageia Moodle allows attackers to bypass intended login restrictions CVE-2015-3179 Fix available 3.5 LowMay 18, 2015
• moodle Mageia Moodle cross-site scripting (XSS) vulnerability CVE-2015-3178 Fix available 3.5 LowMay 18, 2015
• moodle Mageia Moodle allows attackers obtain full-name information CVE-2015-3176 Fix available 4.3 MediumMay 18, 2015
• moodle Mageia Moodle Arbitrary Redirect CVE-2015-3175 Fix available 5.8 MediumMay 18, 2015
• moodle Mageia Moodle does not set the RISK_XSS bit for graders CVE-2015-3174 Fix available 3.5 LowMay 18, 2015
• moodle Mageia Moodle cross-site scripting (XSS) vulnerability CVE-2015-2273 Fix available 3.5 LowMarch 18, 2015
• moodle Mageia Moodle allows attackers to bypass a forced-password-change requirement CVE-2015-2272 Fix available 4.0 MediumMarch 18, 2015
• moodle Mageia Moodle does not consider the moodle/tag:flag capability CVE-2015-2271 Fix available 4.0 MediumMarch 18, 2015
• moodle Mageia Moodle allows attackers to obtain sensitive course information CVE-2015-2270 Fix available 4.3 MediumMarch 18, 2015
• moodle Mageia Moodle XSS Vulnerability CVE-2015-2269 Public exploitFix available 3.5 LowMarch 18, 2015
• moodle Mageia Moodle allows attackers to cause a denial of service CVE-2015-2268 Fix available 6.8 MediumMarch 18, 2015
• moodle Mageia Moodle allows attackers to extract archives to arbitrary directories CVE-2015-2267 Fix available 4.0 MediumMarch 18, 2015
• moodle Mageia Moodle allows attackers to obtain sensitive personal-contact and unread-message-count information CVE-2015-2266 Fix available 4.0 MediumMarch 18, 2015
• moodle Mageia Moodle directory traversal vulnerability CVE-2015-1493 Fix available 6.8 MediumFebruary 9, 2015
• moodle Mageia Moodle cross-site request forgery (CSRF) vulnerability CVE-2015-0218 Fix available 6.8 MediumJanuary 20, 2015
• moodle Mageia Moodle allows attackers to cause a denial of service CVE-2015-0217 Fix available 6.8 MediumJanuary 20, 2015
• moodle Mageia Moodle allows attackers to obtain sensitive calendar-event information CVE-2015-0215 Fix available 4.0 MediumJanuary 20, 2015
• moodle Mageia Moodle allows attackers to bypass a messaging-disabled setting CVE-2015-0214 Fix available 4.0 MediumJanuary 20, 2015
• Show olderLoading…