Поиск уязвимостей
Количество 2 764
Количество 2 764
CVE-2025-32045
A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades.
CVE-2025-32045
A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades.
CVE-2025-32045
A flaw has been identified in Moodle where insufficient capability che ...
CVE-2025-32044
A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user data—including names, contact information, and hashed passwords—via stack traces returned by specific API calls. Sites with PHP configured with zend.exception_ignore_args = 1 in the php.ini file are not affected by this vulnerability.
CVE-2025-32044
A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user data—including names, contact information, and hashed passwords—via stack traces returned by specific API calls. Sites with PHP configured with zend.exception_ignore_args = 1 in the php.ini file are not affected by this vulnerability.
CVE-2025-32044
A flaw has been identified in Moodle where, on certain sites, unauthen ...
CVE-2025-26533
An SQL injection risk was identified in the module list filter within course search.
CVE-2025-26533
An SQL injection risk was identified in the module list filter within course search.
CVE-2025-26533
An SQL injection risk was identified in the module list filter within ...
CVE-2025-26532
Additional checks were required to ensure trusttext is applied (when enabled) to glossary entries being restored.
CVE-2025-26532
Additional checks were required to ensure trusttext is applied (when enabled) to glossary entries being restored.
CVE-2025-26532
Additional checks were required to ensure trusttext is applied (when e ...
CVE-2025-26531
Insufficient capability checks made it possible to disable badges a user does not have permission to access.
CVE-2025-26531
Insufficient capability checks made it possible to disable badges a user does not have permission to access.
CVE-2025-26531
Insufficient capability checks made it possible to disable badges a us ...
CVE-2025-26530
The question bank filter required additional sanitizing to prevent a reflected XSS risk.
CVE-2025-26530
The question bank filter required additional sanitizing to prevent a reflected XSS risk.
CVE-2025-26530
The question bank filter required additional sanitizing to prevent a r ...
CVE-2025-26529
Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk.
CVE-2025-26529
Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2025-32045 A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades. | CVSS3: 5.3 | 0% Низкий | больше 1 года назад | |
CVE-2025-32045 A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades. | CVSS3: 5.3 | 0% Низкий | больше 1 года назад | |
CVE-2025-32045 A flaw has been identified in Moodle where insufficient capability che ... | CVSS3: 5.3 | 0% Низкий | больше 1 года назад | |
CVE-2025-32044 A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user data—including names, contact information, and hashed passwords—via stack traces returned by specific API calls. Sites with PHP configured with zend.exception_ignore_args = 1 in the php.ini file are not affected by this vulnerability. | CVSS3: 7.5 | 1% Низкий | больше 1 года назад | |
CVE-2025-32044 A flaw has been identified in Moodle where, on certain sites, unauthenticated users could retrieve sensitive user data—including names, contact information, and hashed passwords—via stack traces returned by specific API calls. Sites with PHP configured with zend.exception_ignore_args = 1 in the php.ini file are not affected by this vulnerability. | CVSS3: 7.5 | 1% Низкий | больше 1 года назад | |
CVE-2025-32044 A flaw has been identified in Moodle where, on certain sites, unauthen ... | CVSS3: 7.5 | 1% Низкий | больше 1 года назад | |
CVE-2025-26533 An SQL injection risk was identified in the module list filter within course search. | CVSS3: 9.8 | 1% Низкий | больше 1 года назад | |
CVE-2025-26533 An SQL injection risk was identified in the module list filter within course search. | CVSS3: 9.8 | 1% Низкий | больше 1 года назад | |
CVE-2025-26533 An SQL injection risk was identified in the module list filter within ... | CVSS3: 9.8 | 1% Низкий | больше 1 года назад | |
CVE-2025-26532 Additional checks were required to ensure trusttext is applied (when enabled) to glossary entries being restored. | CVSS3: 4.3 | 0% Низкий | больше 1 года назад | |
CVE-2025-26532 Additional checks were required to ensure trusttext is applied (when enabled) to glossary entries being restored. | CVSS3: 4.3 | 0% Низкий | больше 1 года назад | |
CVE-2025-26532 Additional checks were required to ensure trusttext is applied (when e ... | CVSS3: 4.3 | 0% Низкий | больше 1 года назад | |
CVE-2025-26531 Insufficient capability checks made it possible to disable badges a user does not have permission to access. | CVSS3: 5.3 | 0% Низкий | больше 1 года назад | |
CVE-2025-26531 Insufficient capability checks made it possible to disable badges a user does not have permission to access. | CVSS3: 5.3 | 0% Низкий | больше 1 года назад | |
CVE-2025-26531 Insufficient capability checks made it possible to disable badges a us ... | CVSS3: 5.3 | 0% Низкий | больше 1 года назад | |
CVE-2025-26530 The question bank filter required additional sanitizing to prevent a reflected XSS risk. | CVSS3: 6.1 | 0% Низкий | больше 1 года назад | |
CVE-2025-26530 The question bank filter required additional sanitizing to prevent a reflected XSS risk. | CVSS3: 6.1 | 0% Низкий | больше 1 года назад | |
CVE-2025-26530 The question bank filter required additional sanitizing to prevent a r ... | CVSS3: 6.1 | 0% Низкий | больше 1 года назад | |
CVE-2025-26529 Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk. | CVSS3: 6.1 | 1% Низкий | больше 1 года назад | |
CVE-2025-26529 Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk. | CVSS3: 6.1 | 1% Низкий | больше 1 года назад |
Уязвимостей на страницу