Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Moodle
MEDIUM 6.5
An issue was discovered in Moodle 3.x. Students who posted on forums and exported the posts to portfolios can download any stored Moodle file by chan…
Moodle
HIGH 8.1
A flaw was found in Moodle 3.4 to 3.4.1, and 3.3 to 3.3.4. If a user account using OAuth2 authentication method was once confirmed but later suspende…
Moodle
MEDIUM 5.3
A flaw was found in Moodle 3.4 to 3.4.1, 3.3 to 3.3.4, 3.2 to 3.2.7, 3.1 to 3.1.10 and earlier unsupported versions. Unauthenticated users can trigge…
Moodle
MEDIUM 6.5
Moodle 3.x has Server Side Request Forgery in the filepicker.
Moodle
MEDIUM 6.5
In Moodle 3.x, the setting for blocked hosts list can be bypassed with multiple A record hostnames.
Moodle
MEDIUM 5.4
In Moodle 3.x, there is XSS via a calendar event name.
Moodle
MEDIUM 6.1
Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback.
Moodle
MEDIUM 6.5
Moodle 3.x has user fullname disclosure on the user preferences page.
Moodle
MEDIUM 6.5
In Moodle 3.x, course creators are able to change system default settings for courses.
Moodle
MEDIUM 6.3
In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link.
Moodle
MEDIUM 5.3
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing.
Moodle
HIGH 8.8
Cross-site request forgery (CSRF) vulnerability in markposts.php in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.…
Moodle
MEDIUM 6.5
The user editing form in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated…
Moodle
MEDIUM 5.3
Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, and 2.8 through 2.8.11 allows remote attackers to obtain the names of hidden forums and forum discussion…
Moodle
MEDIUM 5.4
In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element.
Moodle
CRITICAL 9.8
In Moodle 2.x and 3.x, SQL injection can occur via user preferences.
Moodle
MEDIUM 6.1
In Moodle 3.x, XSS can occur via evidence of prior learning.
Moodle
MEDIUM 6.1
In Moodle 3.x, XSS can occur via attachments to evidence of prior learning.
Moodle
MEDIUM 5.3
In Moodle 3.2.x, global search displays user names for unauthenticated users.
Moodle
HIGH 7.3
In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed.
Moodle
MEDIUM 6.1
In Moodle 3.x, there is XSS in the assignment submission page.
Moodle
MEDIUM 5.4
In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam.
Moodle
MEDIUM 5.4
In Moodle 2.x and 3.x, an unenrolled user still receives event monitor notifications even though they can no longer access the course.
Moodle
MEDIUM 5.3
In Moodle 3.x, glossary search displays entries without checking user permissions to view them.
Moodle
MEDIUM 5.3
In Moodle 2.x and 3.x, the question engine allows access to files that should not be available.
Moodle
MEDIUM 5.3
In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.
Moodle
MEDIUM 5.3
In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums.
Moodle
MEDIUM 6.1
Cross-site scripting (XSS) vulnerabilities in Moodle CMS on or before 3.1.2 allow remote attackers to inject arbitrary web script or HTML via the s_a…
Moodle
HIGH 8.8
Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle 3.1.2 allows remote authenticated users to exe…
Moodle
HIGH 8.8
Unrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in Moodle 3.1.2 allows remote authenticated users to e…