Логотип exploitDog
product: "moodle"
Консоль
Логотип exploitDog

exploitDog

product: "moodle"
Moodle

Moodleсистема управления образовательными электронными курсами

Релизный цикл, информация об уязвимостях

Продукт: Moodle
Вендор: moodle

График релизов

4.55.05.120242025202620272028

Недавние уязвимости Moodle

Количество 2 647

debian логотип

CVE-2018-10891

больше 7 лет назад

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13 ...

CVSS3: 7.3
EPSS: Низкий
nvd логотип

CVE-2018-10890

больше 7 лет назад

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. It was possible for the core_course_get_categories web service to return hidden categories, which should be omitted when fetching course categories.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2018-10890

больше 7 лет назад

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13 ...

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2018-10889

больше 7 лет назад

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports, which may contain details of other users who interacted with the requester.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2018-10889

больше 7 лет назад

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No opt ...

CVSS3: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2018-10891

больше 7 лет назад

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. When a quiz question bank is imported, it was possible for the question preview that is displayed to execute JavaScript that is written into the question bank.

CVSS3: 7.3
EPSS: Низкий
ubuntu логотип

CVE-2018-10890

больше 7 лет назад

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. It was possible for the core_course_get_categories web service to return hidden categories, which should be omitted when fetching course categories.

CVSS3: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2018-10889

больше 7 лет назад

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports, which may contain details of other users who interacted with the requester.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2018-1137

больше 7 лет назад

An issue was discovered in Moodle 3.x. By substituting URLs in portfolios, users can instantiate any class. This can also be exploited by users who are logged in as guests to create a DDoS attack.

CVSS3: 8.1
EPSS: Низкий
debian логотип

CVE-2018-1137

больше 7 лет назад

An issue was discovered in Moodle 3.x. By substituting URLs in portfol ...

CVSS3: 8.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
1
debian логотип
CVE-2018-10891

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13 ...

CVSS3: 7.3
0%
Низкий
больше 7 лет назад
nvd логотип
CVE-2018-10890

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. It was possible for the core_course_get_categories web service to return hidden categories, which should be omitted when fetching course categories.

CVSS3: 4.3
0%
Низкий
больше 7 лет назад
debian логотип
CVE-2018-10890

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13 ...

CVSS3: 4.3
0%
Низкий
больше 7 лет назад
nvd логотип
CVE-2018-10889

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports, which may contain details of other users who interacted with the requester.

CVSS3: 4.3
0%
Низкий
больше 7 лет назад
debian логотип
CVE-2018-10889

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No opt ...

CVSS3: 4.3
0%
Низкий
больше 7 лет назад
ubuntu логотип
CVE-2018-10891

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. When a quiz question bank is imported, it was possible for the question preview that is displayed to execute JavaScript that is written into the question bank.

CVSS3: 7.3
0%
Низкий
больше 7 лет назад
ubuntu логотип
CVE-2018-10890

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7, 3.1.13. It was possible for the core_course_get_categories web service to return hidden categories, which should be omitted when fetching course categories.

CVSS3: 4.3
0%
Низкий
больше 7 лет назад
ubuntu логотип
CVE-2018-10889

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports, which may contain details of other users who interacted with the requester.

CVSS3: 4.3
0%
Низкий
больше 7 лет назад
nvd логотип
CVE-2018-1137

An issue was discovered in Moodle 3.x. By substituting URLs in portfolios, users can instantiate any class. This can also be exploited by users who are logged in as guests to create a DDoS attack.

CVSS3: 8.1
0%
Низкий
больше 7 лет назад
debian логотип
CVE-2018-1137

An issue was discovered in Moodle 3.x. By substituting URLs in portfol ...

CVSS3: 8.1
0%
Низкий
больше 7 лет назад

Уязвимостей на страницу


Поделиться