Skip to contentMoodle vulnerabilities
Newest
- moodleMoodle SSRF VulnerabilityCVE-2018-1042Public exploitFix availableEPSS 16.2%6.5 Medium
- moodleMoodle Exposure of Sensitive Information to an Unauthorized ActorCVE-2017-15110Fix available4.3 Medium
- moodleMoodle sensitive information disclosureCVE-2017-12157Fix available4.3 Medium
- moodleMoodle XSS VulnerabilityCVE-2017-12156Fix available6.1 Medium
- moodleMoodle Improper Privilege ManagementCVE-2017-7532Fix available6.5 Medium
- moodleMoodle Information DisclosureCVE-2017-7531Fix available4.3 Medium
- moodleMoodle User fullname disclosure on user preferences pageCVE-2017-2642Fix available6.5 Medium
- moodleMoodle Cross-Site Request Forgery (CSRF)CVE-2017-7491Fix available4.3 Medium
- moodleMoodle Unauthorized searching of arbitrary blogs by typing full urlCVE-2017-7490Fix available5.3 Medium
- moodleMoodle External blog editing takeoverCVE-2017-7489Fix available6.3 Medium
- moodleMoodle Cross-site request forgery (CSRF) vulnerabilityCVE-2016-3734Fix available8.8 High
- moodleMoodle Improper Access ControlCVE-2016-3733Fix available4.3 Medium
- moodleMoodle sensitive information disclosureCVE-2016-3732Fix available4.3 Medium
- moodleMoodle 3.0 through 3.0.3, 2.9 through 2.9.5, and 2.8 through 2.8.11 allows remote attackers to...CVE-2016-37315.3 Medium
- moodleMoodle Improper Access ControlCVE-2016-3729Fix available6.5 Medium
- moodleMoodle Cross-site Scripting in the Course summary filter of the Add a new courseCVE-2017-72985.4 Medium
- moodleMoodle XSS in attachments to evidence of prior learningCVE-2017-2645Fix available6.1 Medium
- moodleMoodle XSS VulnerabilityCVE-2017-2644Fix available6.1 Medium
- moodleMoodle Global search displays user names for unauthenticated usersCVE-2017-2643Fix available5.3 Medium
- moodleMoodle SQL injection via user preferencesCVE-2017-2641Public exploitFix availableEPSS 14.5%9.8 Critical
- moodleMoodle Cross-site Scripting in assignment submission pageCVE-2017-2578Fix available6.1 Medium
- moodleMoodle Incorrect sanitation of attributes in forumsCVE-2017-2576Fix available5.3 Medium
- moodleIn Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.CVE-2016-86445.3 Medium
- moodleIn Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services.CVE-2016-86434.3 Medium
- moodleMoodle Unauthenticated AccessCVE-2016-8642Fix available5.3 Medium
- moodleMoodle Weak Password Recovery Mechanism for Forgotten PasswordCVE-2016-7038Fix available7.3 High
- moodleMoodle sensitive information disclosureCVE-2016-5014Fix available5.4 Medium
- moodleMoodle Does Not Escape Characters In Email HeadersCVE-2016-5013Fix available5.4 Medium
- moodleMoodle Glossary search displays entries without checking user permissions to view themCVE-2016-5012Fix available5.3 Medium
- moodleMoodle XSS VulnerabilityCVE-2016-91886.1 Medium
- moodleMoodle Unrestricted file upload vulnerabilityCVE-2016-91878.8 High
- moodleUnrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in...CVE-2016-91868.8 High
- moodle** DISPUTED ** Moodle 3.1.2 allows remote attackers to obtain sensitive information via...CVE-2016-7919Disputed7.5 High
- moodleMoodle sensitive information disclosureCVE-2016-2190Fix available5.3 Medium
- moodleMoodle External function mod_assign_save_submission does not check due datesCVE-2016-2159Fix available4.3 Medium
- moodleMoodle allows attackers to obtain sensitive category-detail informationCVE-2016-2158Fix available4.3 Medium
- moodleMoodle cross-site request forgery (CSRF) vulnerabilityCVE-2016-2157Fix available8.8 High
- moodleMoodle provides calendar-event data without considering whether an activity is hiddenCVE-2016-2156Fix available4.3 Medium
- moodleMoodle allows attackers to modify "Exclude grade" settingsCVE-2016-2155Fix available4.3 Medium
- moodleMoodle allows attackers to discover hidden course namesCVE-2016-2154Fix available4.3 Medium
- moodleMoodle Reflected XSS in mod_data advanced searchCVE-2016-2153Fix available6.1 Medium
- moodleMoodle XSS from profile fields from external dbCVE-2016-2152Fix available6.1 Medium
- moodleMoodle allows attackers to discover student e-mail addressesCVE-2016-2151Fix available4.3 Medium
- moodleMoodle improper access controlCVE-2015-5331Fix available4.3 Medium
- moodleThe Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to...CVE-2015-52724.3 Medium
- moodlemod/forum/post.php in Moodle 2.9.x before 2.9.1 does not consider the mod/forum:canposttomygroups...CVE-2015-32734.3 Medium
- moodle, fedoraproject fedora +1 moreMoodle Cross-site scripting (XSS) vulnerability in course management searchCVE-2016-0725Fix available6.1 Medium
- moodle, fedoraproject fedora +1 moreMoodle sensitive information disclosureCVE-2016-0724Fix available4.3 Medium
- moodleMoodle allows attackers to bypass intended access restrictionsCVE-2015-5342Fix available4.3 Medium
- moodleMoodle allows attackers to read SCORM contentsCVE-2015-5341Fix available4.3 Medium
- Show moreLoading…