Поиск уязвимостей
Количество 17
Количество 17
ALT-PU-2022-1476
ALT-PU-2022-1476: package `moodle` update to version 3.11.6-alt1
ROS-20220329-02
Множественные уязвимости Moodle
ALT-PU-2022-2450
ALT-PU-2022-2450: package `moodle` update to version 3.11.6-alt1
CVE-2022-0983
An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default.
CVE-2022-0983
An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default.
CVE-2022-0983
An SQL injection risk was identified in Badges code relating to config ...
GHSA-h2fw-93qx-vrcq
SQL Injection in Moodle
BDU:2022-01636
Уязвимость виртуальной обучающей среды Moodle, связанная с непринятием мер по защите структуры запроса SQL , позволяющая нарушителю выполнять произвольные SQL-запросы в базе данных
CVE-2022-0985
Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without having the necessary moodle/user:delete capability.
CVE-2022-0985
Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without having the necessary moodle/user:delete capability.
CVE-2022-0985
Insufficient capability checks could allow users with the moodle/site: ...
CVE-2022-0984
Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course badges with profile field criteria, which should only be available for site badges.
CVE-2022-0984
Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course badges with profile field criteria, which should only be available for site badges.
CVE-2022-0984
Users with the capability to configure badge criteria (teachers and ma ...
GHSA-6q9g-3vfq-q2qj
Improper Authentication in moodle
GHSA-c5hf-mc85-2hx4
Missing authorization in Moodle
BDU:2022-01638
Уязвимость виртуальной обучающей среды Moodle, связанная с недостатками контроля доступа, позволяющая нарушителю настроить значки курса с помощью критериев поля профиля
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2022-1476 ALT-PU-2022-1476: package `moodle` update to version 3.11.6-alt1 | CVSS3: 8.8 | больше 4 лет назад | |
 | ROS-20220329-02 Множественные уязвимости Moodle | больше 4 лет назад | ||
| ALT-PU-2022-2450 ALT-PU-2022-2450: package `moodle` update to version 3.11.6-alt1 | CVSS3: 9.8 | около 4 лет назад | |
 | CVE-2022-0983 An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default. | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
 | CVE-2022-0983 An SQL injection risk was identified in Badges code relating to configuring criteria. Access to the relevant capability was limited to teachers and managers by default. | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0983 An SQL injection risk was identified in Badges code relating to config ... | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
| GHSA-h2fw-93qx-vrcq SQL Injection in Moodle | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
 | BDU:2022-01636 Уязвимость виртуальной обучающей среды Moodle, связанная с непринятием мер по защите структуры запроса SQL , позволяющая нарушителю выполнять произвольные SQL-запросы в базе данных | CVSS3: 8.8 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0985 Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without having the necessary moodle/user:delete capability. | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0985 Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without having the necessary moodle/user:delete capability. | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0985 Insufficient capability checks could allow users with the moodle/site: ... | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0984 Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course badges with profile field criteria, which should only be available for site badges. | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0984 Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course badges with profile field criteria, which should only be available for site badges. | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| CVE-2022-0984 Users with the capability to configure badge criteria (teachers and ma ... | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| GHSA-6q9g-3vfq-q2qj Improper Authentication in moodle | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| GHSA-c5hf-mc85-2hx4 Missing authorization in Moodle | CVSS3: 4.3 | 1% Низкий | больше 4 лет назад |
| BDU:2022-01638 Уязвимость виртуальной обучающей среды Moodle, связанная с недостатками контроля доступа, позволяющая нарушителю настроить значки курса с помощью критериев поля профиля | CVSS3: 6.3 | 1% Низкий | больше 4 лет назад |
Уязвимостей на страницу