Advisories

Listing reported advisories sorted by their report date.

Moodle allows attackers to bypass a forced-password-change requirement
GitHub

moodle/moodle

>= 2.8.0, < 2.8.4 · >= 2.7.0, < 2.7.6 · < 2.6.9

2024-01-25 20:57:49
Moodle does not consider the moodle/tag:flag capability
GitHub

moodle/moodle

>= 2.8.0, < 2.8.4 · >= 2.7.0, < 2.7.6 · < 2.6.9

2024-01-25 20:57:20
Moodle allows attackers to obtain sensitive course information
GitHub

moodle/moodle

>= 2.8.0, < 2.8.4 · >= 2.7.0, < 2.7.6 · < 2.6.9

2024-01-25 20:56:29
Moodle allows attackers to cause a denial of service
GitHub

moodle/moodle

>= 2.8.0, < 2.8.4 · >= 2.7.0, < 2.7.6 · < 2.6.9

2024-01-25 20:55:37
Moodle allows attackers to extract archives to arbitrary directories
GitHub

moodle/moodle

>= 2.8.0, < 2.8.4 · >= 2.7.0, < 2.7.6 · < 2.6.9

2024-01-25 20:54:10
Moodle allows attackers to obtain sensitive personal-contact and unread-message-count information
GitHub

moodle/moodle

>= 2.8.0, < 2.8.4 · >= 2.7.0, < 2.7.6 · < 2.6.9

2024-01-25 20:52:25
Moodle directory traversal vulnerability
GitHub

moodle/moodle

>= 2.8.0, < 2.8.3 · >= 2.7.0, < 2.7.5 · < 2.6.8

2024-01-25 20:51:30
Moodle allows attackers to cause a denial of service
GitHub

moodle/moodle

>= 2.8.0, < 2.8.2 · >= 2.7.0, < 2.7.4 · < 2.6.7

2024-01-25 20:44:41
Moodle does not set the RISK_XSS bit for graders
GitHub

moodle/moodle

>= 2.8.0, < 2.8.2

2024-01-25 20:43:53
Moodle allows attackers to obtain sensitive calendar-event information
GitHub

moodle/moodle

>= 2.8.0, < 2.8.2 · >= 2.7.0, < 2.7.4 · < 2.6.7

2024-01-25 20:43:36
Moodle allows attackers to bypass a messaging-disabled setting
GitHub

moodle/moodle

>= 2.8.0, < 2.8.2 · >= 2.7.0, < 2.7.4 · < 2.6.7

2024-01-25 20:34:41
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
GitHub

moodle/moodle

>= 2.8.0, < 2.8.2 · >= 2.7.0, < 2.7.4 · < 2.6.7

2024-01-25 20:34:15
Moodle cross-site scripting (XSS) vulnerability
GitHub

moodle/moodle

>= 2.8.0, < 2.8.2 · >= 2.7.0, < 2.7.4 · < 2.6.7

2024-01-25 20:33:55
Moodle allows attackers to obtain sensitive information
GitHub

moodle/moodle

>= 2.8.0, < 2.8.2 · >= 2.7.0, < 2.7.4 · < 2.6.7

2024-01-25 20:33:32
Moodle allows attackers to trigger the generation of arbitrary messages
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-25 20:29:28
Moodle does not provide charset information in HTTP headers
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-25 20:28:15
PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests
GitHub

moodle/moodle

>= 2.1.0, < 2.1.10 · >= 2.3.0, < 2.3.4 · >= 2.2.0, < 2.2.7 · = 2.4.0

2024-01-25 20:27:59
Arbitrary Code Execution in Processwire
GitHub

processwire/processwire

<= 3.0.210

2024-01-24 21:54:17
Moodle allows attacks to obtain sensitive information
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6

2024-01-24 21:42:56
Moodle allows attackers to cause a denial of service
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:42:35
Moodle does not consider the moodle/tag:edit capability before adding a tag
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:42:14
Moodle has multiple cross-site request forgery (CSRF) vulnerabilities in the Forum module
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:41:51
Moodle allows attackers to remove wiki pages
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:38:36
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:30:58
Moodle allows attackers to upload files containing JavaScript
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6

2024-01-24 21:30:19
Moodle does not verify group permissions
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6

2024-01-24 21:29:46
Moodle allows attackers to obtain sensitive information
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:29:16
Moodle allows attackers to bypass the mod/lti:view capability requirement
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:28:34
Moodle exposes hidden grades to students
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3

2024-01-24 21:27:59
Moodle cross-site scripting (XSS) vulnerability
GitHub

moodle/moodle

>= 2.7.0, < 2.7.3 · >= 2.6.0, < 2.6.6 · < 2.5.9

2024-01-24 21:27:10
Moodle does not enforce the moodle/site:accessallgroups capability requirement
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · < 2.5.7

2024-01-24 21:24:26
Moodle multiple cross-site scripting (XSS) vulnerabilities
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · >= 2.5.0, < 2.5.7 · < 2.4.11

2024-01-24 21:23:38
Moodle multiple cross-site scripting (XSS) vulnerabilities
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · >= 2.5.0, < 2.5.7 · < 2.4.11

2024-01-24 21:21:48
Moodle multiple cross-site scripting (XSS) vulnerabilities
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · >= 2.5.0, < 2.5.7

2024-01-24 21:20:53
Moodle allows attackers to obtain username and course information
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · >= 2.5.0, < 2.5.7 · < 2.4.11

2024-01-24 21:20:17
Moodle cross-site scripting (XSS) vulnerability
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · >= 2.5.0, < 2.5.7 · < 2.4.11

2024-01-24 21:17:35
Moodle vulnerable to PHP object injection attacks
GitHub

moodle/moodle

>= 2.7.0, < 2.7.1 · >= 2.6.0, < 2.6.4 · >= 2.5.0, < 2.5.7 · < 2.4.11

2024-01-24 21:17:07
Moodle attackers to modify grade metadata
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2

2024-01-24 21:16:30
Moodle cross-site scripting (XSS) vulnerability
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-24 21:14:12
Host header injection in the password reset
GitHub

pimcore/admin-ui-classic-bundle

< 1.2.3

2024-01-24 20:55:01
SQL Injection in Admin download files as zip
GitHub

pimcore/admin-ui-classic-bundle

>= 1.0.0, < 1.3.2

2024-01-24 20:55:01
Moodle Arbitrary File Read via XML External Entity vulnerability
GitHub

moodle/moodle

>= 2.4.0, <= 2.4.10 · >= 2.6.0, <= 2.6.3 · >= 2.5.0, <= 2.5.6 · <= 2.4.10 · = 2.7.0

2024-01-24 18:35:54
Moodle does not check for the moodle/course:viewhiddencourses capability
GitHub

moodle/moodle

>= 2.6.0, < 2.6.3

2024-01-24 16:22:37
Moodle does not properly restrict file access
GitHub

moodle/moodle

>= 2.6.0, < 2.6.3 · >= 2.5.0, < 2.5.6 · < 2.4.10

2024-01-24 16:21:07
Moodle creates a MoodleMobile web-service token with an infinite lifetime
GitHub

moodle/moodle

>= 2.6.0, < 2.6.3 · >= 2.5.0, < 2.5.6 · < 2.4.10

2024-01-24 16:20:37
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
GitHub

moodle/moodle

>= 2.6.0, < 2.6.3 · >= 2.5.0, < 2.5.6 · < 2.4.10

2024-01-24 16:20:14
Moodle allows attackers to modify the visibility of a badge
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5

2024-01-24 16:19:46
Moodle's time-validation implementation allows bypassing intended restrictions
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-24 16:18:21
Moodle cross-site request forgery (CSRF) vulnerability
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-24 16:18:06
Moodle places a session key in a URL
GitHub

moodle/moodle

>= 2.6.0, < 2.6.2 · >= 2.5.0, < 2.5.5 · < 2.4.9

2024-01-24 16:17:51
« Previous Next »

Showing 2201 to 2250 of 5933 results

1 2 ... 42 43 44 45 46 47 48 ... 118 119