Skip to contentMoodle vulnerabilities
Newest
- moodleMoodle Blind SQL injection possible via MNet authenticationCVE-2021-32474Fix available7.2 High
- moodleMoodle Information Disclosure vulnerabilityCVE-2021-32473Fix available5.3 Medium
- moodleMoodle stored Cross-site ScriptingCVE-2021-32475Fix available5.4 Medium
- moodleMoodle Exposure of Sensitive Information to an Unauthorized ActorCVE-2021-32477Fix available4.3 Medium
- moodleMoodle reflected XSSCVE-2021-32478Fix available6.1 Medium
- moodleMoodle denial-of-service risk in the draft files areaCVE-2021-32476Fix available7.5 High
- moodleMoodle Exposure of Sensitive Information to an Unauthorized ActorCVE-2021-32472Fix available4.3 Medium
- moodleCross Site Request Forgery in MoodleCVE-2022-0335Fix available8.8 High
- moodleInsufficient user authorization in MoodleCVE-2022-0334Fix available4.3 Medium
- moodleInsufficient user authorization in MoodleCVE-2022-0333Fix available3.8 Low
- moodleSQL injection in MoodleCVE-2022-0332Public exploitFix availableEPSS 32.1%9.8 Critical
- moodleMoodle Improper AuthenticationCVE-2021-40691Fix available4.3 Medium
- moodleMoodle Exposure of Sensitive Information to an Unauthorized ActorCVE-2021-40695Fix available4.3 Medium
- moodleMoodle type juggling vulnerabilityCVE-2021-40693Fix available6.5 Medium
- moodleMoodle Incorrect AuthorizationCVE-2021-40692Fix available4.3 Medium
- moodleMoodle Improper Encoding or Escaping of OutputCVE-2021-40694Fix available4.9 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle Insecure direct object reference (IDOR) in a calendar web serviceCVE-2021-43560Fix available5.3 Medium
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreMoodle contains CSRF vulnerabilityCVE-2021-43559Fix available8.8 High
- moodle, fedoraproject extra packages for enterprise linux, fedora +2 moreCross-site Scripting in moodleCVE-2021-43558Fix available6.1 Medium
- moodleMoodle vulnerable to RCE via unsafe deserializationCVE-2021-3943Fix available9.8 Critical
- moodleMoodle command execution vulnerability exists in the default legacy spellchecker pluginCVE-2021-21809Public exploitFix availableEPSS 24.2%8.2 High
- moodleMoodle Cross Site Scripting (XSS)CVE-2021-32244Fix available5.4 Medium
- moodleA vulnerability was found in Moodle where javaScript injection was possible in some Mustache...CVE-2019-148276.1 Medium
- moodleA vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier...CVE-2019-148316.1 Medium
- moodleA vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier...CVE-2019-14830Public exploit6.1 Medium
- moodleA vulnerability was found in Moodle affection 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and...CVE-2019-148294.3 Medium
- moodleA vulnerability was found in Moodle affecting 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and...CVE-2019-148284.3 Medium
- moodle, fedoraproject fedora +1 moreMissing permission check in MoodleCVE-2021-20283Fix available4.3 Medium
- moodle, fedoraproject fedora +1 moreMoodle Bypass email verification secret when confirming account registrationCVE-2021-20282Fix available5.3 Medium
- moodle, fedoraproject fedora +1 moreMoodle allowed some users without permission to view other users' full namesCVE-2021-20281Fix available5.3 Medium
- moodle, fedoraproject fedora +1 moreCross-site scripting (XSS) and Server side request forgery (SSRF) in moodleCVE-2021-20280Fix available5.4 Medium
- moodle, fedoraproject fedora +1 moreMoodle contains Stored XSS via ID number user profile fieldCVE-2021-20279Fix available5.4 Medium
- moodleMoodle Client side denial of service via personal messageCVE-2021-20185Fix available5.3 Medium
- moodleMoodle Grade information disclosure in grade's external fetch functionsCVE-2021-20184Fix available4.3 Medium
- moodleMoodle Cross-site ScriptingCVE-2021-20186Fix available5.4 Medium
- moodleMoodle Vulnerable to Reflected Cross-site ScriptingCVE-2021-20183Fix available5.4 Medium
- moodleMoodle Arbitrary PHP code execution by site admins via Shibboleth configurationCVE-2021-20187Fix available7.2 High
- moodleMoodle stored Cross-site Scripting (XSS)CVE-2020-25627Public exploitFix available6.1 Medium
- moodleCross site-scripting (XSS) moodleCVE-2020-25628Fix available6.1 Medium
- moodleMoodle incorrect access controlCVE-2020-25629Fix available8.8 High
- moodleMoodle Denial of ServiceCVE-2020-25630Fix available7.5 High
- moodleMoodle Cross-site Scripting (XSS)CVE-2020-25631Fix available6.1 Medium
- moodle, fedoraproject fedora +1 moreSQL Injection in moodleCVE-2020-25700Fix available6.5 Medium
- moodle, fedoraproject fedora +1 moreCross-site Scripting (XSS) in moodleCVE-2020-25702Fix available6.1 Medium
- moodle, fedoraproject fedora +1 moreExposure of Sensitive Information to an Unauthorized Actor in MoodleCVE-2020-25703Fix available5.3 Medium
- moodle, fedoraproject fedora +1 morePrivilage Escalation in moodleCVE-2020-25701Fix available5.3 Medium
- moodle, fedoraproject fedora +1 moreImproper Access Control in moodleCVE-2020-25698Fix available7.5 High
- moodle, fedoraproject fedora +1 morePrivilage Escalation in moodleCVE-2020-25699Fix available7.5 High
- [unknown] moodleMoodle vulnerable to RCECVE-2020-10738Fix available7.5 High
- [unknown] moodleMoodle Oauth 2 Insufficiently Protects Against CompromiseCVE-2019-14880Fix available4.8 Medium
- Show moreLoading…