Логотип exploitDog
product: "moodle"
Консоль
Логотип exploitDog

exploitDog

product: "moodle"

Количество 2 470

Количество 2 470

debian логотип

CVE-2021-36395

больше 2 лет назад

In Moodle, the file repository's URL parsing required additional recur ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2021-36394

больше 2 лет назад

In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin.

CVSS3: 9.8
EPSS: Средний
nvd логотип

CVE-2021-36394

больше 2 лет назад

In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin.

CVSS3: 9.8
EPSS: Средний
debian логотип

CVE-2021-36394

больше 2 лет назад

In Moodle, a remote code execution risk was identified in the Shibbole ...

CVSS3: 9.8
EPSS: Средний
ubuntu логотип

CVE-2021-36393

больше 2 лет назад

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses.

CVSS3: 9.8
EPSS: Средний
nvd логотип

CVE-2021-36393

больше 2 лет назад

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses.

CVSS3: 9.8
EPSS: Средний
debian логотип

CVE-2021-36393

больше 2 лет назад

In Moodle, an SQL injection risk was identified in the library fetchin ...

CVSS3: 9.8
EPSS: Средний
ubuntu логотип

CVE-2021-36392

больше 2 лет назад

In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses.

CVSS3: 9.8
EPSS: Низкий
nvd логотип

CVE-2021-36392

больше 2 лет назад

In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses.

CVSS3: 9.8
EPSS: Низкий
debian логотип

CVE-2021-36392

больше 2 лет назад

In Moodle, an SQL injection risk was identified in the library fetchin ...

CVSS3: 9.8
EPSS: Низкий
ubuntu логотип

CVE-2021-32478

больше 3 лет назад

The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8 and earlier unsupported versions are affected.

CVSS3: 6.1
EPSS: Низкий
nvd логотип

CVE-2021-32478

больше 3 лет назад

The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8 and earlier unsupported versions are affected.

CVSS3: 6.1
EPSS: Низкий
debian логотип

CVE-2021-32478

больше 3 лет назад

The redirect URI in the LTI authorization endpoint required extra sani ...

CVSS3: 6.1
EPSS: Низкий
ubuntu логотип

CVE-2021-32477

больше 3 лет назад

The last time a user accessed the mobile app is displayed on their profile page, but should be restricted to users with the relevant capability (site administrators by default). Moodle versions 3.10 to 3.10.3 are affected.

CVSS3: 4.3
EPSS: Низкий
nvd логотип

CVE-2021-32477

больше 3 лет назад

The last time a user accessed the mobile app is displayed on their profile page, but should be restricted to users with the relevant capability (site administrators by default). Moodle versions 3.10 to 3.10.3 are affected.

CVSS3: 4.3
EPSS: Низкий
debian логотип

CVE-2021-32477

больше 3 лет назад

The last time a user accessed the mobile app is displayed on their pro ...

CVSS3: 4.3
EPSS: Низкий
ubuntu логотип

CVE-2021-32476

больше 3 лет назад

A denial-of-service risk was identified in the draft files area, due to it not respecting user file upload limits. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected.

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2021-32476

больше 3 лет назад

A denial-of-service risk was identified in the draft files area, due to it not respecting user file upload limits. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected.

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2021-32476

больше 3 лет назад

A denial-of-service risk was identified in the draft files area, due t ...

CVSS3: 7.5
EPSS: Низкий
ubuntu логотип

CVE-2021-32475

больше 3 лет назад

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected.

CVSS3: 5.4
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
debian логотип
CVE-2021-36395

In Moodle, the file repository's URL parsing required additional recur ...

CVSS3: 7.5
0%
Низкий
больше 2 лет назад
ubuntu логотип
CVE-2021-36394

In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin.

CVSS3: 9.8
20%
Средний
больше 2 лет назад
nvd логотип
CVE-2021-36394

In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin.

CVSS3: 9.8
20%
Средний
больше 2 лет назад
debian логотип
CVE-2021-36394

In Moodle, a remote code execution risk was identified in the Shibbole ...

CVSS3: 9.8
20%
Средний
больше 2 лет назад
ubuntu логотип
CVE-2021-36393

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses.

CVSS3: 9.8
26%
Средний
больше 2 лет назад
nvd логотип
CVE-2021-36393

In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses.

CVSS3: 9.8
26%
Средний
больше 2 лет назад
debian логотип
CVE-2021-36393

In Moodle, an SQL injection risk was identified in the library fetchin ...

CVSS3: 9.8
26%
Средний
больше 2 лет назад
ubuntu логотип
CVE-2021-36392

In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses.

CVSS3: 9.8
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2021-36392

In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses.

CVSS3: 9.8
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2021-36392

In Moodle, an SQL injection risk was identified in the library fetchin ...

CVSS3: 9.8
0%
Низкий
больше 2 лет назад
ubuntu логотип
CVE-2021-32478

The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8 and earlier unsupported versions are affected.

CVSS3: 6.1
3%
Низкий
больше 3 лет назад
nvd логотип
CVE-2021-32478

The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8 and earlier unsupported versions are affected.

CVSS3: 6.1
3%
Низкий
больше 3 лет назад
debian логотип
CVE-2021-32478

The redirect URI in the LTI authorization endpoint required extra sani ...

CVSS3: 6.1
3%
Низкий
больше 3 лет назад
ubuntu логотип
CVE-2021-32477

The last time a user accessed the mobile app is displayed on their profile page, but should be restricted to users with the relevant capability (site administrators by default). Moodle versions 3.10 to 3.10.3 are affected.

CVSS3: 4.3
0%
Низкий
больше 3 лет назад
nvd логотип
CVE-2021-32477

The last time a user accessed the mobile app is displayed on their profile page, but should be restricted to users with the relevant capability (site administrators by default). Moodle versions 3.10 to 3.10.3 are affected.

CVSS3: 4.3
0%
Низкий
больше 3 лет назад
debian логотип
CVE-2021-32477

The last time a user accessed the mobile app is displayed on their pro ...

CVSS3: 4.3
0%
Низкий
больше 3 лет назад
ubuntu логотип
CVE-2021-32476

A denial-of-service risk was identified in the draft files area, due to it not respecting user file upload limits. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected.

CVSS3: 7.5
1%
Низкий
больше 3 лет назад
nvd логотип
CVE-2021-32476

A denial-of-service risk was identified in the draft files area, due to it not respecting user file upload limits. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected.

CVSS3: 7.5
1%
Низкий
больше 3 лет назад
debian логотип
CVE-2021-32476

A denial-of-service risk was identified in the draft files area, due t ...

CVSS3: 7.5
1%
Низкий
больше 3 лет назад
ubuntu логотип
CVE-2021-32475

ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk. Moodle 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8, 3.5 to 3.5.17 and earlier unsupported versions are affected.

CVSS3: 5.4
1%
Низкий
больше 3 лет назад

Уязвимостей на страницу