Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 2 713

Количество 2 713

nvd логотип

CVE-2024-43430

почти 2 года назад

A flaw was found in moodle. External API access to Quiz can override contained insufficient access control.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2024-43430

почти 2 года назад

A flaw was found in moodle. External API access to Quiz can override c ...

CVSS3: 5.3
EPSS: Низкий
ubuntu логотип

CVE-2024-43429

почти 2 года назад

A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2024-43429

почти 2 года назад

A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2024-43429

почти 2 года назад

A flaw was found in moodle. Some hidden user profile fields are visibl ...

CVSS3: 5.3
EPSS: Низкий
ubuntu логотип

CVE-2024-43428

почти 2 года назад

To address a cache poisoning risk in Moodle, additional validation for local storage was required.

CVSS3: 7.7
EPSS: Низкий
nvd логотип

CVE-2024-43428

почти 2 года назад

To address a cache poisoning risk in Moodle, additional validation for local storage was required.

CVSS3: 7.7
EPSS: Низкий
debian логотип

CVE-2024-43428

почти 2 года назад

To address a cache poisoning risk in Moodle, additional validation for ...

CVSS3: 7.7
EPSS: Низкий
ubuntu логотип

CVE-2024-43427

почти 2 года назад

A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are not being excluded from the export, which could result in them unintentionally being leaked if the presets are shared with a third party.

CVSS3: 3.7
EPSS: Низкий
nvd логотип

CVE-2024-43427

почти 2 года назад

A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are not being excluded from the export, which could result in them unintentionally being leaked if the presets are shared with a third party.

CVSS3: 3.7
EPSS: Низкий
debian логотип

CVE-2024-43427

почти 2 года назад

A flaw was found in moodle. When creating an export of site administra ...

CVSS3: 3.7
EPSS: Низкий
ubuntu логотип

CVE-2024-43426

почти 2 года назад

A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2024-43426

почти 2 года назад

A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2024-43426

почти 2 года назад

A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notatio ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2024-43425

почти 2 года назад

A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions.

CVSS3: 8.1
EPSS: Высокий
nvd логотип

CVE-2024-43425

почти 2 года назад

A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions.

CVSS3: 8.1
EPSS: Высокий
debian логотип

CVE-2024-43425

почти 2 года назад

A flaw was found in Moodle. Additional restrictions are required to av ...

CVSS3: 8.1
EPSS: Высокий
ubuntu логотип

CVE-2024-38277

около 2 лет назад

A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two.

CVSS3: 5.4
EPSS: Низкий
nvd логотип

CVE-2024-38277

около 2 лет назад

A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two.

CVSS3: 5.4
EPSS: Низкий
debian логотип

CVE-2024-38277

около 2 лет назад

A unique key should be generated for a user's QR login key and their a ...

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-43430

A flaw was found in moodle. External API access to Quiz can override contained insufficient access control.

CVSS3: 5.3
0%
Низкий
почти 2 года назад
debian логотип
CVE-2024-43430

A flaw was found in moodle. External API access to Quiz can override c ...

CVSS3: 5.3
0%
Низкий
почти 2 года назад
ubuntu логотип
CVE-2024-43429

A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.

CVSS3: 5.3
0%
Низкий
почти 2 года назад
nvd логотип
CVE-2024-43429

A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information.

CVSS3: 5.3
0%
Низкий
почти 2 года назад
debian логотип
CVE-2024-43429

A flaw was found in moodle. Some hidden user profile fields are visibl ...

CVSS3: 5.3
0%
Низкий
почти 2 года назад
ubuntu логотип
CVE-2024-43428

To address a cache poisoning risk in Moodle, additional validation for local storage was required.

CVSS3: 7.7
0%
Низкий
почти 2 года назад
nvd логотип
CVE-2024-43428

To address a cache poisoning risk in Moodle, additional validation for local storage was required.

CVSS3: 7.7
0%
Низкий
почти 2 года назад
debian логотип
CVE-2024-43428

To address a cache poisoning risk in Moodle, additional validation for ...

CVSS3: 7.7
0%
Низкий
почти 2 года назад
ubuntu логотип
CVE-2024-43427

A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are not being excluded from the export, which could result in them unintentionally being leaked if the presets are shared with a third party.

CVSS3: 3.7
0%
Низкий
почти 2 года назад
nvd логотип
CVE-2024-43427

A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are not being excluded from the export, which could result in them unintentionally being leaked if the presets are shared with a third party.

CVSS3: 3.7
0%
Низкий
почти 2 года назад
debian логотип
CVE-2024-43427

A flaw was found in moodle. When creating an export of site administra ...

CVSS3: 3.7
0%
Низкий
почти 2 года назад
ubuntu логотип
CVE-2024-43426

A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.

CVSS3: 7.5
1%
Низкий
почти 2 года назад
nvd логотип
CVE-2024-43426

A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notation filter resulted in an arbitrary file read risk on sites where pdfTeX is available, such as those with TeX Live installed.

CVSS3: 7.5
1%
Низкий
почти 2 года назад
debian логотип
CVE-2024-43426

A flaw was found in pdfTeX. Insufficient sanitizing in the TeX notatio ...

CVSS3: 7.5
1%
Низкий
почти 2 года назад
ubuntu логотип
CVE-2024-43425

A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions.

CVSS3: 8.1
87%
Высокий
почти 2 года назад
nvd логотип
CVE-2024-43425

A flaw was found in Moodle. Additional restrictions are required to avoid a remote code execution risk in calculated question types. Note: This requires the capability to add/update questions.

CVSS3: 8.1
87%
Высокий
почти 2 года назад
debian логотип
CVE-2024-43425

A flaw was found in Moodle. Additional restrictions are required to av ...

CVSS3: 8.1
87%
Высокий
почти 2 года назад
ubuntu логотип
CVE-2024-38277

A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two.

CVSS3: 5.4
0%
Низкий
около 2 лет назад
nvd логотип
CVE-2024-38277

A unique key should be generated for a user's QR login key and their auto-login key, so the same key cannot be used interchangeably between the two.

CVSS3: 5.4
0%
Низкий
около 2 лет назад
debian логотип
CVE-2024-38277

A unique key should be generated for a user's QR login key and their a ...

CVSS3: 5.4
0%
Низкий
около 2 лет назад

Уязвимостей на страницу