Поиск уязвимостей
Количество 2 764
Количество 2 764
CVE-2018-1042
Moodle 3.x has Server Side Request Forgery in the filepicker.
CVE-2017-7532
In Moodle 3.x, course creators are able to change system default settings for courses.
CVE-2017-7532
In Moodle 3.x, course creators are able to change system default settings for courses.
CVE-2017-7532
In Moodle 3.x, course creators are able to change system default setti ...
CVE-2017-7531
In Moodle 3.3, the course overview block reveals activities in hidden courses.
CVE-2017-7531
In Moodle 3.3, the course overview block reveals activities in hidden courses.
CVE-2017-7531
In Moodle 3.3, the course overview block reveals activities in hidden ...
CVE-2017-7491
In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting.
CVE-2017-7491
In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting.
CVE-2017-7491
In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers ...
CVE-2017-7490
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing.
CVE-2017-7490
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing.
CVE-2017-7490
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible becaus ...
CVE-2017-7489
In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link.
CVE-2017-7489
In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link.
CVE-2017-7489
In Moodle 2.x and 3.x, remote authenticated users can take ownership o ...
CVE-2017-7298
In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element.
CVE-2017-7298
In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element.
CVE-2017-7298
In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Ad ...
CVE-2017-2645
In Moodle 3.x, XSS can occur via attachments to evidence of prior learning.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| CVE-2018-1042 Moodle 3.x has Server Side Request Forgery in the filepicker. | CVSS3: 6.5 | 16% Средний | почти 9 лет назад |
 | CVE-2017-7532 In Moodle 3.x, course creators are able to change system default settings for courses. | CVSS3: 6.5 | 1% Низкий | больше 9 лет назад |
 | CVE-2017-7532 In Moodle 3.x, course creators are able to change system default settings for courses. | CVSS3: 6.5 | 1% Низкий | больше 9 лет назад |
| CVE-2017-7532 In Moodle 3.x, course creators are able to change system default setti ... | CVSS3: 6.5 | 1% Низкий | больше 9 лет назад |
| CVE-2017-7531 In Moodle 3.3, the course overview block reveals activities in hidden courses. | CVSS3: 4.3 | 1% Низкий | больше 9 лет назад |
| CVE-2017-7531 In Moodle 3.3, the course overview block reveals activities in hidden courses. | CVSS3: 4.3 | 1% Низкий | больше 9 лет назад |
| CVE-2017-7531 In Moodle 3.3, the course overview block reveals activities in hidden ... | CVSS3: 4.3 | 1% Низкий | больше 9 лет назад |
| CVE-2017-7491 In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting. | CVSS3: 4.3 | 1% Низкий | больше 9 лет назад |
| CVE-2017-7491 In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting. | CVSS3: 4.3 | 1% Низкий | больше 9 лет назад |
| CVE-2017-7491 In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers ... | CVSS3: 4.3 | 1% Низкий | больше 9 лет назад |
| CVE-2017-7490 In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing. | CVSS3: 5.3 | 1% Низкий | больше 9 лет назад |
| CVE-2017-7490 In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing. | CVSS3: 5.3 | 1% Низкий | больше 9 лет назад |
| CVE-2017-7490 In Moodle 2.x and 3.x, searching of arbitrary blogs is possible becaus ... | CVSS3: 5.3 | 1% Низкий | больше 9 лет назад |
| CVE-2017-7489 In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link. | CVSS3: 6.3 | 1% Низкий | больше 9 лет назад |
| CVE-2017-7489 In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link. | CVSS3: 6.3 | 1% Низкий | больше 9 лет назад |
| CVE-2017-7489 In Moodle 2.x and 3.x, remote authenticated users can take ownership o ... | CVSS3: 6.3 | 1% Низкий | больше 9 лет назад |
| CVE-2017-7298 In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element. | CVSS3: 5.4 | 1% Низкий | больше 9 лет назад |
| CVE-2017-7298 In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element. | CVSS3: 5.4 | 1% Низкий | больше 9 лет назад |
| CVE-2017-7298 In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Ad ... | CVSS3: 5.4 | 1% Низкий | больше 9 лет назад |
| CVE-2017-2645 In Moodle 3.x, XSS can occur via attachments to evidence of prior learning. | CVSS3: 6.1 | 1% Низкий | больше 9 лет назад |
Уязвимостей на страницу