Vulnerabilities of n/a Moodle 2.x and 3.x
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2017-7491 | In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the… | Not rated | May 15, 2017 |
| CVE-2017-7490 | In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing | Not rated | May 15, 2017 |
| CVE-2017-7489 | In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link | Not rated | May 15, 2017 |
| CVE-2017-2641 | In Moodle 2.x and 3.x, SQL injection can occur via user preferences | Not rated | Mar 26, 2017 |
| CVE-2017-2576 | In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums | Not rated | Jan 20, 2017 |
| CVE-2016-8644 | In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context | Not rated | Jan 20, 2017 |
| CVE-2016-8643 | In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services | Not rated | Jan 20, 2017 |
| CVE-2016-8642 | In Moodle 2.x and 3.x, the question engine allows access to files that should not be available | Not rated | Jan 20, 2017 |
| CVE-2016-7038 | In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed | Not rated | Jan 20, 2017 |
Other n/a products
n/a 144660
Android 2441
kernel 279
Open5GS 125
Intel(R) Processors 119
BIG-IP 110
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions 106
HPE Intelligent Management Center (IMC) PLAT 105
Moodle 89
Aruba ClearPass Policy Manager 83
GPAC 80
postgresql 79