Поиск уязвимостей
Количество 20
Количество 20
ALT-PU-2022-1064
ALT-PU-2022-1064: package `moodle` update to version 3.11.5-alt1
ALT-PU-2022-2450
ALT-PU-2022-2450: package `moodle` update to version 3.11.6-alt1
CVE-2022-0332
A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data.
CVE-2022-0332
A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data.
CVE-2022-0332
A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injectio ...
GHSA-6jhm-4vmx-mr76
SQL injection in Moodle
BDU:2023-03479
Уязвимость компонента mod_h5pactivity виртуальной обучающей среды Moodle, позволяющая нарушителю выполнять произвольные SQL-запросы в базе данных
CVE-2022-0333
A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The calendar:manageentries capability allowed managers to access or modify any calendar event, but should have been restricted from accessing user level events.
CVE-2022-0333
A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The calendar:manageentries capability allowed managers to access or modify any calendar event, but should have been restricted from accessing user level events.
CVE-2022-0333
A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, ...
GHSA-m434-m5pv-p35w
Insufficient user authorization in Moodle
ROS-20230627-01
Множественные уязвимости moodle
CVE-2022-0335
A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The "delete badge alignment" functionality did not include the necessary token check to prevent a CSRF risk.
CVE-2022-0335
A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The "delete badge alignment" functionality did not include the necessary token check to prevent a CSRF risk.
CVE-2022-0335
A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, ...
CVE-2022-0334
A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. Insufficient capability checks could lead to users accessing their grade report for courses where they did not have the required gradereport/user:view capability.
CVE-2022-0334
A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. Insufficient capability checks could lead to users accessing their grade report for courses where they did not have the required gradereport/user:view capability.
CVE-2022-0334
A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, ...
GHSA-xpfv-89vg-r562
Cross Site Request Forgery in Moodle
GHSA-93pj-4p65-qmr9
Insufficient user authorization in Moodle
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2022-1064 ALT-PU-2022-1064: package `moodle` update to version 3.11.5-alt1 | CVSS3: 9.8 | почти 5 лет назад | |
| ALT-PU-2022-2450 ALT-PU-2022-2450: package `moodle` update to version 3.11.6-alt1 | CVSS3: 9.8 | около 4 лет назад | |
 | CVE-2022-0332 A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data. | CVSS3: 9.8 | 32% Средний | почти 5 лет назад |
 | CVE-2022-0332 A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data. | CVSS3: 9.8 | 32% Средний | почти 5 лет назад |
| CVE-2022-0332 A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injectio ... | CVSS3: 9.8 | 32% Средний | почти 5 лет назад |
| GHSA-6jhm-4vmx-mr76 SQL injection in Moodle | CVSS3: 9.8 | 32% Средний | почти 5 лет назад |
 | BDU:2023-03479 Уязвимость компонента mod_h5pactivity виртуальной обучающей среды Moodle, позволяющая нарушителю выполнять произвольные SQL-запросы в базе данных | CVSS3: 9.8 | 32% Средний | почти 5 лет назад |
| CVE-2022-0333 A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The calendar:manageentries capability allowed managers to access or modify any calendar event, but should have been restricted from accessing user level events. | CVSS3: 3.8 | 1% Низкий | почти 5 лет назад |
| CVE-2022-0333 A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The calendar:manageentries capability allowed managers to access or modify any calendar event, but should have been restricted from accessing user level events. | CVSS3: 3.8 | 1% Низкий | почти 5 лет назад |
| CVE-2022-0333 A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, ... | CVSS3: 3.8 | 1% Низкий | почти 5 лет назад |
| GHSA-m434-m5pv-p35w Insufficient user authorization in Moodle | CVSS3: 3.8 | 1% Низкий | почти 5 лет назад |
 | ROS-20230627-01 Множественные уязвимости moodle | CVSS3: 9.8 | больше 3 лет назад | |
| CVE-2022-0335 A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The "delete badge alignment" functionality did not include the necessary token check to prevent a CSRF risk. | CVSS3: 8.8 | 1% Низкий | почти 5 лет назад |
| CVE-2022-0335 A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The "delete badge alignment" functionality did not include the necessary token check to prevent a CSRF risk. | CVSS3: 8.8 | 1% Низкий | почти 5 лет назад |
| CVE-2022-0335 A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, ... | CVSS3: 8.8 | 1% Низкий | почти 5 лет назад |
| CVE-2022-0334 A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. Insufficient capability checks could lead to users accessing their grade report for courses where they did not have the required gradereport/user:view capability. | CVSS3: 4.3 | 1% Низкий | почти 5 лет назад |
| CVE-2022-0334 A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. Insufficient capability checks could lead to users accessing their grade report for courses where they did not have the required gradereport/user:view capability. | CVSS3: 4.3 | 1% Низкий | почти 5 лет назад |
| CVE-2022-0334 A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, ... | CVSS3: 4.3 | 1% Низкий | почти 5 лет назад |
| GHSA-xpfv-89vg-r562 Cross Site Request Forgery in Moodle | CVSS3: 8.8 | 1% Низкий | почти 5 лет назад |
| GHSA-93pj-4p65-qmr9 Insufficient user authorization in Moodle | CVSS3: 4.3 | 1% Низкий | почти 5 лет назад |
Уязвимостей на страницу