Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Moodle
MEDIUM 6.1
A vulnerability was found in Moodle 3.7 before 3.73, 3.6 before 3.6.7 and 3.5 before 3.5.9, where a reflected XSS possible from some fatal error mess…
Moodle
MEDIUM 5.3
A vulnerability was found in Moodle 3.6 before 3.6.7 and 3.7 before 3.7.3, where tokens used to fetch inline atachments in email notifications were n…
Moodle
MEDIUM 6.1
A vulnerability was found in moodle 3.7 before 3.7.3, where there is blind XSS reflected in some locations where user email is displayed.
Moodle
MEDIUM 6.1
A vulnerability was found in Moodle 3.7 to 3.7.3, 3.6 to 3.6.7, 3.5 to 3.5.9 and earlier where an open redirect existed in the Lesson edit page.
Moodle
MEDIUM 6.5
Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course.
Moodle
MEDIUM 5.4
Persistent XSS in /course/modedit.php of Moodle through 3.7.2 allows authenticated users (Teacher and above) to inject JavaScript into the session of…
Moodle
MEDIUM 5.4
A vulnerability was found in Moodle versions 3.7.x before 3.7.3, 3.6.x before 3.6.7 and 3.5.x before 3.5.9. When a cohort role assignment was removed…
Moodle
HIGH 7.5
Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough
Moodle
MEDIUM 5.3
Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are show…
Moodle
HIGH 8.2
Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified.
Moodle
HIGH 7.5
Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from …
Moodle
HIGH 7.5
Moodle before 2.2.2 has users' private files included in course backups
Moodle
HIGH 8.8
A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. A sesskey (CSRF) token was not being utilised by the XML loading/unloading admin tool.
Moodle
HIGH 7.5
A flaw was found in Moodle before versions 3.7, 3.6.4. A web service fetching messages was not restricted to the current user's conversations.
Moodle
MEDIUM 6.1
A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The form to upload cohorts contained a redirect field, which was not restricte…
Moodle
HIGH 8.8
A vulnerability was found in moodle before versions 3.6.3, 3.5.5 and 3.4.8. Users could assign themselves an escalated role within courses or content…
Moodle
MEDIUM 6.1
A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Links within assignment submission comments would open directly (…
Moodle
CRITICAL 10.0
A flaw was found in Moodle versions 3.1 to 3.1.15 and earlier unsupported versions. The mybackpack functionality allowed setting the URL of badges, w…
Moodle
MEDIUM 6.1
A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The /userpix/ page did …
Moodle
MEDIUM 5.4
A flaw was found in Moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The 'manage groups' cap…
Moodle
HIGH 7.5
Moodle 3.5.x before 3.5.4 allows SSRF.
Moodle
HIGH 8.8
A flaw was found in moodle versions 3.5 to 3.5.2, 3.4 to 3.4.5, 3.3 to 3.3.8, 3.1 to 3.1.14 and earlier. The login form is not protected by a token t…
Moodle
MEDIUM 6.1
moodle before versions 3.5.2, 3.4.5, 3.3.8 is vulnerable to a boost theme - blog search GET parameter insufficiently filtered. The breadcrumb navigat…
Moodle
HIGH 8.8
moodle before versions 3.5.2, 3.4.5, 3.3.8, 3.1.14 is vulnerable to an XML import of ddwtos could lead to intentional remote code execution. When imp…
Moodle
HIGH 7.3
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. When a quiz question bank is imported, it was possible for the question previ…
Moodle
MEDIUM 5.3
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports, which may contain details o…
Moodle
MEDIUM 5.3
A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. It was possible for the core_course_get_categories web service to return hidd…
Moodle
HIGH 8.8
An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code execution on the server, aka eval…
Moodle
HIGH 8.1
An issue was discovered in Moodle 3.x. By substituting URLs in portfolios, users can instantiate any class. This can also be exploited by users who a…
Moodle
MEDIUM 6.5
An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by chan…