Skip to contentMoodle vulnerabilities
Newest
- moodleMoodle multiple cross-site request forgery (CSRF) vulnerabilitiesCVE-2014-7836Fix available6.8 Medium
- moodleMoodle allows attackers to upload files containing JavaScriptCVE-2014-7835Fix available2.1 Low
- moodleMoodle does not verify group permissionsCVE-2014-7834Fix available4.0 Medium
- moodleMoodle allows attackers to obtain sensitive informationCVE-2014-7833Fix available4.0 Medium
- moodleMoodle allows attackers to bypass the mod/lti:view capability requirementCVE-2014-7832Fix available4.0 Medium
- moodleMoodle cross-site scripting (XSS) vulnerabilityCVE-2014-7830Fix available3.5 Low
- moodleMoodle allows discovery of an author's usernameCVE-2014-3617Fix available4.0 Medium
- moodleMoodle does not enforce the moodle/site:accessallgroups capability requirementCVE-2014-3553Fix available4.9 Medium
- moodleThe Shibboleth authentication plugin in auth/shibboleth/index.php in Moodle through 2.3.11, 2.4.x...CVE-2014-35526.0 Medium
- moodleMoodle multiple cross-site scripting (XSS) vulnerabilitiesCVE-2014-3551Public exploitFix available3.5 Low
- moodleMultiple cross-site scripting (XSS) vulnerabilities in admin/tool/task/scheduledtasks.php in...CVE-2014-35504.3 Medium
- moodleCross-site scripting (XSS) vulnerability in the get_description function in lib/classes/event...CVE-2014-35494.3 Medium
- moodleMoodle multiple cross-site scripting (XSS) vulnerabilitiesCVE-2014-3548Fix available4.3 Medium
- moodleMoodle multiple cross-site scripting (XSS) vulnerabilitiesCVE-2014-3547Fix available4.3 Medium
- moodleMoodle allows attackers to obtain username and course informationCVE-2014-3546Fix available5.0 Medium
- moodleMoodle remote code execution via quiz questionsCVE-2014-3545Fix available6.0 Medium
- moodleMoodle cross-site scripting (XSS) vulnerabilityCVE-2014-3544Public exploitFix available3.5 Low
- moodleMoodle Arbitrary File Read via XML External Entity vulnerabilityCVE-2014-3543Fix available4.3 Medium
- moodleMoodle allows remote attackers to read arbitrary filesCVE-2014-3542Fix available4.3 Medium
- moodleMoodle vulnerable to PHP object injection attacksCVE-2014-3541Fix available7.5 High
- moodleMoodle does not check for the moodle/course:viewhiddencourses capabilityCVE-2014-0217Fix available4.3 Medium
- moodleMoodle cross-site scripting (XSS) vulnerabilityCVE-2014-0218Fix available4.3 Medium
- moodleMoodle does not properly restrict file accessCVE-2014-0216Fix available5.0 Medium
- moodleMoodle Reveals Student Information Meant To Be AnonymousCVE-2014-0215Fix available4.0 Medium
- moodleMoodle creates a MoodleMobile web-service token with an infinite lifetimeCVE-2014-0214Fix available6.8 Medium
- moodleMoodle multiple cross-site request forgery (CSRF) vulnerabilitiesCVE-2014-0213Fix available6.8 Medium
- moodleMoodle attackers to modify grade metadataCVE-2014-2572Fix available4.0 Medium
- moodleMoodle cross-site scripting (XSS) vulnerabilityCVE-2014-2571Fix available3.5 Low
- moodleMoodle allows attackers to modify the visibility of a badgeCVE-2014-0129Fix available4.0 Medium
- moodleMoodle's time-validation implementation allows bypassing intended restrictionsCVE-2014-0127Fix available4.9 Medium
- moodleMoodle cross-site request forgery (CSRF) vulnerabilityCVE-2014-0126Fix available6.8 Medium
- moodleMoodle places a session key in a URLCVE-2014-0125Fix available5.8 Medium
- moodleMoodle allows attackers to obtain sensitive informationCVE-2014-0124Fix available4.0 Medium
- moodleMoodle does not properly restrict accessCVE-2014-0123Fix available4.9 Medium
- moodleMoodle allows bypass of intended access restrictionsCVE-2014-0122Fix available4.9 Medium
- flowplayer flash, moodle +1 moreMoodle cross-site scripting (XSS) vulnerabilitiesCVE-2013-7341Fix available4.3 Medium
- moodle, fedoraproject fedora +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in user/profile/index.php in Moodle...CVE-2014-00106.8 Medium
- moodlecourse/loginas.php in Moodle through 2.2.11, 2.3.x before 2.3.11, 2.4.x before 2.4.8, 2.5.x...CVE-2014-00095.5 Medium
- moodlelib/adminlib.php in Moodle through 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x...CVE-2014-00084.0 Medium
- moodleCross-site scripting (XSS) vulnerability in mod/quiz/report/responses/responses_table.php in...CVE-2013-45253.5 Low
- moodleDirectory traversal vulnerability in repository/filesystem/lib.php in Moodle through 2.2.11, 2.3...CVE-2013-45246.8 Medium
- moodleCross-site scripting (XSS) vulnerability in message/lib.php in Moodle through 2.2.11, 2.3.x...CVE-2013-45233.5 Low
- moodleMoodle vulnerable to Exposure of Sensitive Information to an Unauthorized ActorCVE-2013-4522Fix available5.0 Medium
- moodleMoodle Authenticated Spelling Binary Remote Code ExecutionCVE-2013-3630Public exploitFix availableEPSS 41.7%4.6 Medium
- moodlebadges/external.php in Moodle 2.5.x before 2.5.2 does not properly handle an object obtained by...CVE-2013-56747.5 High
- moodleMultiple cross-site scripting (XSS) vulnerabilities in Moodle through 2.2.11, 2.3.x before 2.3.9,...CVE-2013-4341Public exploitEPSS 21.9%4.3 Medium
- moodleMoodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x before 2.4.6, and 2.5.x before 2.5.2 does not...CVE-2013-43137.5 High
- moodlerepository/s3/S3.php in the Amazon S3 library in Moodle through 2.2.11, 2.3.x before 2.3.9, 2.4.x...CVE-2012-60875.8 Medium
- moodle, yahoo yui +1 moreYUI Cross-site Scripting (XSS) vulnerabilityCVE-2013-4942Fix available4.3 Medium
- moodle, yahoo yui +1 moreYUI Cross-site Scripting (XSS) vulnerabilityCVE-2013-4941Fix available4.3 Medium
- Show moreLoading…