Поиск уязвимостей
Количество 2 764
Количество 2 764
CVE-2022-0333
A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The calendar:manageentries capability allowed managers to access or modify any calendar event, but should have been restricted from accessing user level events.
CVE-2022-0333
A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, ...
CVE-2022-0332
A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data.
CVE-2022-0332
A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data.
CVE-2022-0332
A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injectio ...
CVE-2021-47857
Moodle 3.10.3 contains a persistent cross-site scripting vulnerability in the calendar event subtitle field that allows attackers to inject malicious scripts. Attackers can craft a calendar event with malicious JavaScript in the subtitle track label to execute arbitrary code when users view the event.
CVE-2021-47857
Moodle 3.10.3 contains a persistent cross-site scripting vulnerability ...
CVE-2021-40695
It was possible for a student to view their quiz grade before it had been released, using a quiz web service.
CVE-2021-40695
It was possible for a student to view their quiz grade before it had been released, using a quiz web service.
CVE-2021-40695
It was possible for a student to view their quiz grade before it had b ...
CVE-2021-40694
Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account.
CVE-2021-40694
Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account.
CVE-2021-40694
Insufficient escaping of the LaTeX preamble made it possible for site ...
CVE-2021-40693
An authentication bypass risk was identified in the external database authentication functionality, due to a type juggling vulnerability.
CVE-2021-40693
An authentication bypass risk was identified in the external database authentication functionality, due to a type juggling vulnerability.
CVE-2021-40693
An authentication bypass risk was identified in the external database ...
CVE-2021-40692
Insufficient capability checks made it possible for teachers to download users outside of their courses.
CVE-2021-40692
Insufficient capability checks made it possible for teachers to download users outside of their courses.
CVE-2021-40692
Insufficient capability checks made it possible for teachers to downlo ...
CVE-2021-40691
A session hijack risk was identified in the Shibboleth authentication plugin.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-0333 A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions. The calendar:manageentries capability allowed managers to access or modify any calendar event, but should have been restricted from accessing user level events. | CVSS3: 3.8 | 1% Низкий | почти 5 лет назад |
| CVE-2022-0333 A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, ... | CVSS3: 3.8 | 1% Низкий | почти 5 лет назад |
 | CVE-2022-0332 A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data. | CVSS3: 9.8 | 32% Средний | почти 5 лет назад |
| CVE-2022-0332 A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data. | CVSS3: 9.8 | 32% Средний | почти 5 лет назад |
| CVE-2022-0332 A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injectio ... | CVSS3: 9.8 | 32% Средний | почти 5 лет назад |
| CVE-2021-47857 Moodle 3.10.3 contains a persistent cross-site scripting vulnerability in the calendar event subtitle field that allows attackers to inject malicious scripts. Attackers can craft a calendar event with malicious JavaScript in the subtitle track label to execute arbitrary code when users view the event. | CVSS3: 6.1 | 0% Низкий | 10 месяцев назад |
| CVE-2021-47857 Moodle 3.10.3 contains a persistent cross-site scripting vulnerability ... | CVSS3: 6.1 | 0% Низкий | 10 месяцев назад |
| CVE-2021-40695 It was possible for a student to view their quiz grade before it had been released, using a quiz web service. | CVSS3: 4.3 | 1% Низкий | около 4 лет назад |
| CVE-2021-40695 It was possible for a student to view their quiz grade before it had been released, using a quiz web service. | CVSS3: 4.3 | 1% Низкий | около 4 лет назад |
| CVE-2021-40695 It was possible for a student to view their quiz grade before it had b ... | CVSS3: 4.3 | 1% Низкий | около 4 лет назад |
| CVE-2021-40694 Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account. | CVSS3: 4.9 | 1% Низкий | около 4 лет назад |
| CVE-2021-40694 Insufficient escaping of the LaTeX preamble made it possible for site administrators to read files available to the HTTP server system account. | CVSS3: 4.9 | 1% Низкий | около 4 лет назад |
| CVE-2021-40694 Insufficient escaping of the LaTeX preamble made it possible for site ... | CVSS3: 4.9 | 1% Низкий | около 4 лет назад |
| CVE-2021-40693 An authentication bypass risk was identified in the external database authentication functionality, due to a type juggling vulnerability. | CVSS3: 6.5 | 1% Низкий | около 4 лет назад |
| CVE-2021-40693 An authentication bypass risk was identified in the external database authentication functionality, due to a type juggling vulnerability. | CVSS3: 6.5 | 1% Низкий | около 4 лет назад |
| CVE-2021-40693 An authentication bypass risk was identified in the external database ... | CVSS3: 6.5 | 1% Низкий | около 4 лет назад |
| CVE-2021-40692 Insufficient capability checks made it possible for teachers to download users outside of their courses. | CVSS3: 4.3 | 1% Низкий | около 4 лет назад |
| CVE-2021-40692 Insufficient capability checks made it possible for teachers to download users outside of their courses. | CVSS3: 4.3 | 1% Низкий | около 4 лет назад |
| CVE-2021-40692 Insufficient capability checks made it possible for teachers to downlo ... | CVSS3: 4.3 | 1% Низкий | около 4 лет назад |
| CVE-2021-40691 A session hijack risk was identified in the Shibboleth authentication plugin. | CVSS3: 4.3 | 1% Низкий | около 4 лет назад |
Уязвимостей на страницу