Skip to contentMoodle vulnerabilities
Newest
- moodleMoodle sensitive information disclosureCVE-2015-5340Fix available4.3 Medium
- moodleMoodle does not properly implement group-based access restrictionsCVE-2015-5339Fix available4.3 Medium
- moodleMoodle multiple cross-site request forgery (CSRF) vulnerabilitiesCVE-2015-5338Fix available8.8 High
- moodleMoodle XSS VulnerabilityCVE-2015-5337Fix available6.1 Medium
- moodleMoodle multiple cross-site scripting (XSS) vulnerabilitiesCVE-2015-5336Fix available5.4 Medium
- moodleMoodle cross-site request forgery (CSRF) vulnerabilityCVE-2015-5335Fix available4.3 Medium
- moodleAtto in Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 allows remote attackers to cause a...CVE-2015-53326.8 Medium
- moodleMoodle cross-site scripting (XSS) vulnerabilityCVE-2015-5269Fix available5.4 Medium
- moodleMoodle mishandles group-based authorization checksCVE-2015-5268Fix available4.3 Medium
- moodleMoodle uses predictable password-recovery tokensCVE-2015-5267Fix available7.5 High
- moodleMoodle allows attackers to obtain manager privilegesCVE-2015-5266Fix available6.8 Medium
- moodleMoodle allows attackers to delete filesCVE-2015-5265Fix available4.3 Medium
- moodleMoodle allows attackers to enter additional answer attemptsCVE-2015-5264Fix available5.4 Medium
- moodleMoodle multiple cross-site scripting (XSS) vulnerabilitiesCVE-2015-3275Fix available6.1 Medium
- moodleMoodle cross-site scripting (XSS) vulnerabilityCVE-2015-3274Fix available6.1 Medium
- moodleMoodle open redirect vulnerabilityCVE-2015-3272Fix available7.4 High
- moodleMoodle 2.8.x before 2.8.6 does not consider the tool/monitor:subscribe capability before entering...CVE-2015-31773.5 Low
- moodleMoodle does not set the RISK_XSS bit for gradersCVE-2015-0216Fix available3.5 Low
- moodleMoodle allows attackers to bypass file-management restrictionsCVE-2015-3181Fix available4.0 Medium
- moodleMoodle allows attackers to obtain sensitive course-structure informationCVE-2015-3180Fix available4.0 Medium
- moodleMoodle allows attackers to bypass intended login restrictionsCVE-2015-3179Fix available3.5 Low
- moodleMoodle cross-site scripting (XSS) vulnerabilityCVE-2015-3178Fix available3.5 Low
- moodleMoodle allows attackers obtain full-name informationCVE-2015-3176Fix available4.3 Medium
- moodleMoodle Arbitrary RedirectCVE-2015-3175Fix available5.8 Medium
- moodleMoodle does not set the RISK_XSS bit for gradersCVE-2015-3174Fix available3.5 Low
- moodleMoodle cross-site scripting (XSS) vulnerabilityCVE-2015-2273Fix available3.5 Low
- moodleMoodle allows attackers to bypass a forced-password-change requirementCVE-2015-2272Fix available4.0 Medium
- moodleMoodle does not consider the moodle/tag:flag capabilityCVE-2015-2271Fix available4.0 Medium
- moodleMoodle allows attackers to obtain sensitive course informationCVE-2015-2270Fix available4.3 Medium
- moodleMoodle XSS VulnerabilityCVE-2015-2269Public exploitFix available3.5 Low
- moodleMoodle allows attackers to cause a denial of serviceCVE-2015-2268Fix available6.8 Medium
- moodleMoodle allows attackers to extract archives to arbitrary directoriesCVE-2015-2267Fix available4.0 Medium
- moodleMoodle allows attackers to obtain sensitive personal-contact and unread-message-count informationCVE-2015-2266Fix available4.0 Medium
- moodleMoodle directory traversal vulnerabilityCVE-2015-1493Fix available6.8 Medium
- moodleMoodle cross-site request forgery (CSRF) vulnerabilityCVE-2015-0218Fix available6.8 Medium
- moodleMoodle allows attackers to cause a denial of serviceCVE-2015-0217Fix available6.8 Medium
- moodleMoodle allows attackers to obtain sensitive calendar-event informationCVE-2015-0215Fix available4.0 Medium
- moodleMoodle allows attackers to bypass a messaging-disabled settingCVE-2015-0214Fix available4.0 Medium
- moodleMoodle multiple cross-site request forgery (CSRF) vulnerabilitiesCVE-2015-0213Fix available6.8 Medium
- moodleMoodle cross-site scripting (XSS) vulnerabilityCVE-2015-0212Fix available3.5 Low
- moodleMoodle allows attackers to obtain sensitive informationCVE-2015-0211Fix available4.0 Medium
- moodleMoodle allows attackers to trigger the generation of arbitrary messagesCVE-2014-9060Fix available5.0 Medium
- moodleMoodle does not provide charset information in HTTP headersCVE-2014-9059Fix available4.3 Medium
- moodleMoodle exposes hidden grades to studentsCVE-2014-7831Fix available4.0 Medium
- moodleMoodle allows attacks to obtain sensitive informationCVE-2014-7848Fix available5.0 Medium
- moodleMoodle allows attackers to cause a denial of serviceCVE-2014-7847Fix available5.0 Medium
- moodleMoodle does not consider the moodle/tag:edit capability before adding a tagCVE-2014-7846Fix available4.0 Medium
- moodleMoodle Temporary Passwords are Brute Force-ableCVE-2014-7845Fix available7.5 High
- moodleMoodle has multiple cross-site request forgery (CSRF) vulnerabilities in the Forum moduleCVE-2014-7838Fix available6.8 Medium
- moodleMoodle allows attackers to remove wiki pagesCVE-2014-7837Fix available5.5 Medium
- Show moreLoading…