Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Поиск уязвимостей

Поиск уязвимостей по источнику БДУ ФСТЭК

БДУ ФСТЭК

Поиск уязвимостей по источнику Microsoft MSRC

Microsoft MSRC

Поиск уязвимостей по источнику NVD

NVD

Поиск уязвимостей по источнику Oracle ELSA

Oracle ELSA

Поиск уязвимостей по источнику Red Hat CVE

Red Hat CVE

Поиск уязвимостей по источнику РЕД ОС

РЕД ОС

Поиск уязвимостей по источнику Rocky RLSA

Rocky RLSA

Поиск уязвимостей по источнику SUSE CVRF

SUSE CVRF

Поиск уязвимостей по источнику Ubuntu

Ubuntu

Поиск уязвимостей по источнику Debian

Debian

Поиск уязвимостей по источнику Github

Github

Поиск уязвимостей по источнику ALT Linux

ALT Linux

Количество 2 764

Количество 2 764

ubuntu логотип

CVE-2014-3546

больше 12 лет назад

Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce certain capability requirements in (1) notes/index.php and (2) user/edit.php, which allows remote attackers to obtain potentially sensitive username and course information via a modified URL.

CVSS2: 5
EPSS: Низкий
nvd логотип

CVE-2014-3546

больше 12 лет назад

Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce certain capability requirements in (1) notes/index.php and (2) user/edit.php, which allows remote attackers to obtain potentially sensitive username and course information via a modified URL.

CVSS2: 5
EPSS: Низкий
debian логотип

CVE-2014-3546

больше 12 лет назад

Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x ...

CVSS2: 5
EPSS: Низкий
ubuntu логотип

CVE-2014-3545

больше 12 лет назад

Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to execute arbitrary code via a calculated question in a quiz.

CVSS2: 6
EPSS: Низкий
nvd логотип

CVE-2014-3545

больше 12 лет назад

Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to execute arbitrary code via a calculated question in a quiz.

CVSS2: 6
EPSS: Низкий
debian логотип

CVE-2014-3545

больше 12 лет назад

Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x ...

CVSS2: 6
EPSS: Низкий
ubuntu логотип

CVE-2014-3544

больше 12 лет назад

Cross-site scripting (XSS) vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via the Skype ID profile field.

CVSS2: 3.5
EPSS: Низкий
nvd логотип

CVE-2014-3544

больше 12 лет назад

Cross-site scripting (XSS) vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via the Skype ID profile field.

CVSS2: 3.5
EPSS: Низкий
debian логотип

CVE-2014-3544

больше 12 лет назад

Cross-site scripting (XSS) vulnerability in user/profile.php in Moodle ...

CVSS2: 3.5
EPSS: Низкий
ubuntu логотип

CVE-2014-3543

больше 12 лет назад

mod/imscp/locallib.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via a package with a manifest file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue affecting IMSCP resources and the IMSCC format.

CVSS2: 4.3
EPSS: Низкий
nvd логотип

CVE-2014-3543

больше 12 лет назад

mod/imscp/locallib.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via a package with a manifest file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue affecting IMSCP resources and the IMSCC format.

CVSS2: 4.3
EPSS: Низкий
debian логотип

CVE-2014-3543

больше 12 лет назад

mod/imscp/locallib.php in Moodle through 2.3.11, 2.4.x before 2.4.11, ...

CVSS2: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2014-3542

больше 12 лет назад

mod/lti/service.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

CVSS2: 4.3
EPSS: Низкий
nvd логотип

CVE-2014-3542

больше 12 лет назад

mod/lti/service.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

CVSS2: 4.3
EPSS: Низкий
debian логотип

CVE-2014-3542

больше 12 лет назад

mod/lti/service.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5 ...

CVSS2: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2014-3541

больше 12 лет назад

The Repositories component in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary code via serialized data associated with an add-on.

CVSS2: 7.5
EPSS: Низкий
nvd логотип

CVE-2014-3541

больше 12 лет назад

The Repositories component in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary code via serialized data associated with an add-on.

CVSS2: 7.5
EPSS: Низкий
debian логотип

CVE-2014-3541

больше 12 лет назад

The Repositories component in Moodle through 2.3.11, 2.4.x before 2.4. ...

CVSS2: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2014-2572

больше 12 лет назад

mod/assign/externallib.php in Moodle 2.6.x before 2.6.2 does not properly handle assignment web-service parameters, which might allow remote authenticated users to modify grade metadata via unspecified vectors.

CVSS2: 4
EPSS: Низкий
nvd логотип

CVE-2014-2572

больше 12 лет назад

mod/assign/externallib.php in Moodle 2.6.x before 2.6.2 does not properly handle assignment web-service parameters, which might allow remote authenticated users to modify grade metadata via unspecified vectors.

CVSS2: 4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2014-3546

Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce certain capability requirements in (1) notes/index.php and (2) user/edit.php, which allows remote attackers to obtain potentially sensitive username and course information via a modified URL.

CVSS2: 5
1%
Низкий
больше 12 лет назад
nvd логотип
CVE-2014-3546

Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce certain capability requirements in (1) notes/index.php and (2) user/edit.php, which allows remote attackers to obtain potentially sensitive username and course information via a modified URL.

CVSS2: 5
1%
Низкий
больше 12 лет назад
debian логотип
CVE-2014-3546

Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x ...

CVSS2: 5
1%
Низкий
больше 12 лет назад
ubuntu логотип
CVE-2014-3545

Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to execute arbitrary code via a calculated question in a quiz.

CVSS2: 6
2%
Низкий
больше 12 лет назад
nvd логотип
CVE-2014-3545

Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to execute arbitrary code via a calculated question in a quiz.

CVSS2: 6
2%
Низкий
больше 12 лет назад
debian логотип
CVE-2014-3545

Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x ...

CVSS2: 6
2%
Низкий
больше 12 лет назад
ubuntu логотип
CVE-2014-3544

Cross-site scripting (XSS) vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via the Skype ID profile field.

CVSS2: 3.5
5%
Низкий
больше 12 лет назад
nvd логотип
CVE-2014-3544

Cross-site scripting (XSS) vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via the Skype ID profile field.

CVSS2: 3.5
5%
Низкий
больше 12 лет назад
debian логотип
CVE-2014-3544

Cross-site scripting (XSS) vulnerability in user/profile.php in Moodle ...

CVSS2: 3.5
5%
Низкий
больше 12 лет назад
ubuntu логотип
CVE-2014-3543

mod/imscp/locallib.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via a package with a manifest file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue affecting IMSCP resources and the IMSCC format.

CVSS2: 4.3
1%
Низкий
больше 12 лет назад
nvd логотип
CVE-2014-3543

mod/imscp/locallib.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via a package with a manifest file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue affecting IMSCP resources and the IMSCC format.

CVSS2: 4.3
1%
Низкий
больше 12 лет назад
debian логотип
CVE-2014-3543

mod/imscp/locallib.php in Moodle through 2.3.11, 2.4.x before 2.4.11, ...

CVSS2: 4.3
1%
Низкий
больше 12 лет назад
ubuntu логотип
CVE-2014-3542

mod/lti/service.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

CVSS2: 4.3
1%
Низкий
больше 12 лет назад
nvd логотип
CVE-2014-3542

mod/lti/service.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

CVSS2: 4.3
1%
Низкий
больше 12 лет назад
debian логотип
CVE-2014-3542

mod/lti/service.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5 ...

CVSS2: 4.3
1%
Низкий
больше 12 лет назад
ubuntu логотип
CVE-2014-3541

The Repositories component in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary code via serialized data associated with an add-on.

CVSS2: 7.5
4%
Низкий
больше 12 лет назад
nvd логотип
CVE-2014-3541

The Repositories component in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to conduct PHP object injection attacks and execute arbitrary code via serialized data associated with an add-on.

CVSS2: 7.5
4%
Низкий
больше 12 лет назад
debian логотип
CVE-2014-3541

The Repositories component in Moodle through 2.3.11, 2.4.x before 2.4. ...

CVSS2: 7.5
4%
Низкий
больше 12 лет назад
ubuntu логотип
CVE-2014-2572

mod/assign/externallib.php in Moodle 2.6.x before 2.6.2 does not properly handle assignment web-service parameters, which might allow remote authenticated users to modify grade metadata via unspecified vectors.

CVSS2: 4
1%
Низкий
больше 12 лет назад
nvd логотип
CVE-2014-2572

mod/assign/externallib.php in Moodle 2.6.x before 2.6.2 does not properly handle assignment web-service parameters, which might allow remote authenticated users to modify grade metadata via unspecified vectors.

CVSS2: 4
1%
Низкий
больше 12 лет назад

Уязвимостей на страницу