Поиск уязвимостей
Количество 2 764
Количество 2 764
CVE-2017-15110
In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing emails of other students.
CVE-2017-15110
In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing emails of other students.
CVE-2017-15110
In Moodle 3.x, students can find out email addresses of other students ...
CVE-2017-12157
In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access.
CVE-2017-12157
In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access.
CVE-2017-12157
In Moodle 3.x, various course reports allow teachers to view details a ...
CVE-2017-12156
Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback.
CVE-2017-12156
Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback.
CVE-2017-12156
Moodle 3.x has XSS in the contact form on the "non-respondents" page i ...
CVE-2016-9188
Cross-site scripting (XSS) vulnerabilities in Moodle CMS on or before 3.1.2 allow remote attackers to inject arbitrary web script or HTML via the s_additionalhtmlhead, s_additionalhtmltopofbody, and s_additionalhtmlfooter parameters.
CVE-2016-9188
Cross-site scripting (XSS) vulnerabilities in Moodle CMS on or before 3.1.2 allow remote attackers to inject arbitrary web script or HTML via the s_additionalhtmlhead, s_additionalhtmltopofbody, and s_additionalhtmlfooter parameters.
CVE-2016-9188
Cross-site scripting (XSS) vulnerabilities in Moodle CMS on or before ...
CVE-2016-9187
Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors.
CVE-2016-9187
Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors.
CVE-2016-9187
Unrestricted file upload vulnerability in the double extension support ...
CVE-2016-9186
Unrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors.
CVE-2016-9186
Unrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors.
CVE-2016-9186
Unrestricted file upload vulnerability in the "legacy course files" an ...
CVE-2016-8644
In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.
CVE-2016-8644
In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2017-15110 In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing emails of other students. | CVSS3: 4.3 | 1% Низкий | почти 9 лет назад |
 | CVE-2017-15110 In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing emails of other students. | CVSS3: 4.3 | 1% Низкий | почти 9 лет назад |
| CVE-2017-15110 In Moodle 3.x, students can find out email addresses of other students ... | CVSS3: 4.3 | 1% Низкий | почти 9 лет назад |
| CVE-2017-12157 In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access. | CVSS3: 4.3 | 1% Низкий | около 9 лет назад |
| CVE-2017-12157 In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access. | CVSS3: 4.3 | 1% Низкий | около 9 лет назад |
| CVE-2017-12157 In Moodle 3.x, various course reports allow teachers to view details a ... | CVSS3: 4.3 | 1% Низкий | около 9 лет назад |
| CVE-2017-12156 Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback. | CVSS3: 6.1 | 1% Низкий | около 9 лет назад |
| CVE-2017-12156 Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback. | CVSS3: 6.1 | 1% Низкий | около 9 лет назад |
| CVE-2017-12156 Moodle 3.x has XSS in the contact form on the "non-respondents" page i ... | CVSS3: 6.1 | 1% Низкий | около 9 лет назад |
| CVE-2016-9188 Cross-site scripting (XSS) vulnerabilities in Moodle CMS on or before 3.1.2 allow remote attackers to inject arbitrary web script or HTML via the s_additionalhtmlhead, s_additionalhtmltopofbody, and s_additionalhtmlfooter parameters. | CVSS3: 6.1 | 2% Низкий | около 10 лет назад |
| CVE-2016-9188 Cross-site scripting (XSS) vulnerabilities in Moodle CMS on or before 3.1.2 allow remote attackers to inject arbitrary web script or HTML via the s_additionalhtmlhead, s_additionalhtmltopofbody, and s_additionalhtmlfooter parameters. | CVSS3: 6.1 | 2% Низкий | около 10 лет назад |
| CVE-2016-9188 Cross-site scripting (XSS) vulnerabilities in Moodle CMS on or before ... | CVSS3: 6.1 | 2% Низкий | около 10 лет назад |
| CVE-2016-9187 Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors. | CVSS3: 8.8 | 4% Низкий | около 10 лет назад |
| CVE-2016-9187 Unrestricted file upload vulnerability in the double extension support in the "image" module in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors. | CVSS3: 8.8 | 4% Низкий | около 10 лет назад |
| CVE-2016-9187 Unrestricted file upload vulnerability in the double extension support ... | CVSS3: 8.8 | 4% Низкий | около 10 лет назад |
| CVE-2016-9186 Unrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors. | CVSS3: 8.8 | 4% Низкий | около 10 лет назад |
| CVE-2016-9186 Unrestricted file upload vulnerability in the "legacy course files" and "file manager" modules in Moodle 3.1.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, and then accessing it via unspecified vectors. | CVSS3: 8.8 | 4% Низкий | около 10 лет назад |
| CVE-2016-9186 Unrestricted file upload vulnerability in the "legacy course files" an ... | CVSS3: 8.8 | 4% Низкий | около 10 лет назад |
| CVE-2016-8644 In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context. | CVSS3: 5.3 | 1% Низкий | почти 10 лет назад |
| CVE-2016-8644 In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context. | CVSS3: 5.3 | 1% Низкий | почти 10 лет назад |
Уязвимостей на страницу