Количество 2 470
Количество 2 470
CVE-2024-34002
In a shared hosting environment that has been misconfigured to allow a ...
CVE-2024-34001
Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk.
CVE-2024-34001
Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk.
CVE-2024-34001
Actions in the admin preset tool did not include the necessary token t ...
CVE-2024-34000
ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk.
CVE-2024-34000
ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk.
CVE-2024-34000
ID numbers displayed in the lesson overview report required additional ...
CVE-2024-33999
The referrer URL used by MFA required additional sanitizing, rather than being used directly.
CVE-2024-33999
The referrer URL used by MFA required additional sanitizing, rather than being used directly.
CVE-2024-33999
The referrer URL used by MFA required additional sanitizing, rather th ...
CVE-2024-33998
Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features.
CVE-2024-33998
Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features.
CVE-2024-33998
Insufficient escaping of participants' names in the participants page ...
CVE-2024-33997
Additional sanitizing was required when opening the equation editor to prevent a stored XSS risk when editing another user's equation.
CVE-2024-33997
Additional sanitizing was required when opening the equation editor to prevent a stored XSS risk when editing another user's equation.
CVE-2024-33997
Additional sanitizing was required when opening the equation editor to ...
CVE-2024-33996
Incorrect validation of allowed event types in a calendar web service made it possible for some users to create events with types/audiences they did not have permission to publish to.
CVE-2024-33996
Incorrect validation of allowed event types in a calendar web service made it possible for some users to create events with types/audiences they did not have permission to publish to.
CVE-2024-33996
Incorrect validation of allowed event types in a calendar web service ...
CVE-2024-29374
A Cross-Site Scripting (XSS) vulnerability exists in the way MOODLE 3.10.9 handles user input within the "GET /?lang=" URL parameter.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| CVE-2024-34002 In a shared hosting environment that has been misconfigured to allow a ... | CVSS3: 6.5 | 0% Низкий | около 1 года назад |
 | CVE-2024-34001 Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk. | CVSS3: 8.4 | 0% Низкий | около 1 года назад |
 | CVE-2024-34001 Actions in the admin preset tool did not include the necessary token to prevent a CSRF risk. | CVSS3: 8.4 | 0% Низкий | около 1 года назад |
| CVE-2024-34001 Actions in the admin preset tool did not include the necessary token t ... | CVSS3: 8.4 | 0% Низкий | около 1 года назад |
| CVE-2024-34000 ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk. | CVSS3: 4.3 | 0% Низкий | около 1 года назад |
| CVE-2024-34000 ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk. | CVSS3: 4.3 | 0% Низкий | около 1 года назад |
| CVE-2024-34000 ID numbers displayed in the lesson overview report required additional ... | CVSS3: 4.3 | 0% Низкий | около 1 года назад |
| CVE-2024-33999 The referrer URL used by MFA required additional sanitizing, rather than being used directly. | CVSS3: 9.8 | 1% Низкий | около 1 года назад |
| CVE-2024-33999 The referrer URL used by MFA required additional sanitizing, rather than being used directly. | CVSS3: 9.8 | 1% Низкий | около 1 года назад |
| CVE-2024-33999 The referrer URL used by MFA required additional sanitizing, rather th ... | CVSS3: 9.8 | 1% Низкий | около 1 года назад |
| CVE-2024-33998 Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features. | CVSS3: 5.4 | 1% Низкий | около 1 года назад |
| CVE-2024-33998 Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features. | CVSS3: 5.4 | 1% Низкий | около 1 года назад |
| CVE-2024-33998 Insufficient escaping of participants' names in the participants page ... | CVSS3: 5.4 | 1% Низкий | около 1 года назад |
| CVE-2024-33997 Additional sanitizing was required when opening the equation editor to prevent a stored XSS risk when editing another user's equation. | CVSS3: 6.1 | 1% Низкий | около 1 года назад |
| CVE-2024-33997 Additional sanitizing was required when opening the equation editor to prevent a stored XSS risk when editing another user's equation. | CVSS3: 6.1 | 1% Низкий | около 1 года назад |
| CVE-2024-33997 Additional sanitizing was required when opening the equation editor to ... | CVSS3: 6.1 | 1% Низкий | около 1 года назад |
| CVE-2024-33996 Incorrect validation of allowed event types in a calendar web service made it possible for some users to create events with types/audiences they did not have permission to publish to. | CVSS3: 6.2 | 0% Низкий | около 1 года назад |
| CVE-2024-33996 Incorrect validation of allowed event types in a calendar web service made it possible for some users to create events with types/audiences they did not have permission to publish to. | CVSS3: 6.2 | 0% Низкий | около 1 года назад |
| CVE-2024-33996 Incorrect validation of allowed event types in a calendar web service ... | CVSS3: 6.2 | 0% Низкий | около 1 года назад |
| CVE-2024-29374 A Cross-Site Scripting (XSS) vulnerability exists in the way MOODLE 3.10.9 handles user input within the "GET /?lang=" URL parameter. | CVSS3: 6.1 | 0% Низкий | больше 1 года назад |
Уязвимостей на страницу