Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Moodle
HIGH 8.8
A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. The "delete related badge" fun…
Moodle
MEDIUM 6.1
A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A URL parameter in the filetyp…
Moodle
MEDIUM 5.3
A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. Insufficient capability checks…
Moodle
CRITICAL 9.8
A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A remote code execution risk w…
Moodle
CRITICAL 9.1
A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10. A specially crafted series of HTTP requests can le…
Moodle
MEDIUM 5.4
Cross Site Scripting (XSS) in Moodle 3.10.3 allows remote attackers to execute arbitrary web script or HTML via the "Description" field.
Moodle
MEDIUM 6.1
A vulnerability was found in Moodle where javaScript injection was possible in some Mustache templates via recursive rendering from contexts. Mustach…
Moodle
MEDIUM 6.1
A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where the mobile launch endpoint conta…
Moodle
MEDIUM 6.1
A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where forum subscribe link contained a…
Moodle
MEDIUM 5.4
The ID number user profile field required additional sanitizing to prevent a stored XSS risk in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.
Moodle
MEDIUM 5.4
Text-based feedback answers required additional sanitizing to prevent stored XSS and blind SSRF risks in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17.
Moodle
MEDIUM 5.3
It was possible for some users without permission to view other users' full names to do so via the online users block in moodle before 3.10.2, 3.9.5,…
Moodle
MEDIUM 5.3
When creating a user account, it was possible to verify the account without having access to the verification email link/secret in moodle before 3.10…
Moodle
MEDIUM 5.3
It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that messaging did not impose a character limit when sending messages, which co…
Moodle
HIGH 7.2
It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts v…
Moodle
MEDIUM 5.4
It was found in Moodle before version 3.10.1 that some search inputs were vulnerable to reflected XSS due to insufficient escaping of search queries.
Moodle
MEDIUM 5.4
It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that if the TeX notation filter was enabled, additional sanitizing of TeX conte…
Moodle
MEDIUM 6.1
The moodlenetprofile user profile field required extra sanitizing to prevent a stored XSS risk. This affects versions 3.9 to 3.9.1. Fixed in 3.9.2.
Moodle
MEDIUM 6.1
A vulnerability was found in Moodle 3.9 to 3.9.1, 3.8 to 3.8.4 and 3.7 to 3.7.7 where it was possible to include JavaScript in a book's chapter title…
Moodle
HIGH 8.8
A vulnerability was found in Moodle where users with "Log in as" capability in a course context (typically, course managers) may gain access to some …
Moodle
HIGH 7.5
A vulnerability was found in Moodle where the decompressed size of zip files was not checked against available user quota before unzipping them, whic…
Moodle
MEDIUM 6.1
The filter in the tag manager required extra sanitizing to prevent a reflected XSS risk. This affects 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 t…
Moodle
MEDIUM 5.3
The participants table download in Moodle always included user emails, but should have only done so when users' emails are not hidden. Versions affec…
Moodle
HIGH 7.5
Users' enrollment capabilities were not being sufficiently checked in Moodle when they are restored into an existing course. This could lead to them …
Moodle
HIGH 7.5
In moodle, insufficient capability checks could lead to users with the ability to course restore adding additional capabilities to roles within that …
Moodle
MEDIUM 6.5
In moodle, some database module web services allowed students to add entries within groups they did not belong to. Versions affected: 3.9 to 3.9.2, 3…
Moodle
MEDIUM 6.1
In Moodle, it was possible to include JavaScript when re-naming content bank items. Versions affected: 3.9 to 3.9.2. This is fixed in moodle 3.9.3 an…
Moodle
MEDIUM 5.3
If the upload course tool in Moodle was used to delete an enrollment method which did not exist or was not already enabled, the tool would erroneousl…
Moodle
HIGH 8.8
A flaw was found in Moodle versions 3.8 before 3.8.3, 3.7 before 3.7.6, 3.6 before 3.6.10, 3.5 before 3.5.12 and earlier unsupported versions. It was…
Moodle
CRITICAL 9.1
A vulnerability was found in Moodle versions 3.7 before 3.7.3, 3.6 before 3.6.7, 3.5 before 3.5.9 and earlier. OAuth 2 providers who do not verify us…