Vulnerabilities of n/a Moodle
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2020-14322 | In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it can load to help… | Not rated | Aug 16, 2022 |
| CVE-2020-14321 | In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role… | Not rated | Aug 16, 2022 |
| CVE-2020-1754 | In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all… | 4.3 Medium | Aug 5, 2022 |
| CVE-2020-1691 | In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of… | Not rated | Aug 5, 2022 |
| CVE-2022-35653 | A reflected XSS issue was identified in the LTI module of Moodle | Not rated | Jul 25, 2022 |
| CVE-2022-35652 | An open redirect issue was found in Moodle due to improper sanitization of user-supplied data in mobile auto-login… | Not rated | Jul 25, 2022 |
| CVE-2022-35651 | A stored XSS and blind SSRF vulnerability was found in Moodle, occurs due to insufficient sanitization of… | Not rated | Jul 25, 2022 |
| CVE-2022-35650 | The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions | Not rated | Jul 25, 2022 |
| CVE-2022-35649 | The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code | Not rated | Jul 25, 2022 |
| CVE-2022-30600 | A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold… | Not rated | May 18, 2022 |
| CVE-2022-30599 | A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria | Not rated | May 18, 2022 |
| CVE-2022-30598 | A flaw was found in moodle where global search results could include author information on some activities where a… | Not rated | May 18, 2022 |
| CVE-2022-30597 | A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field | Not rated | May 18, 2022 |
| CVE-2022-30596 | A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional… | Not rated | May 18, 2022 |
| CVE-2022-0984 | Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course… | Not rated | Apr 29, 2022 |
| CVE-2022-0985 | Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without… | Not rated | Apr 29, 2022 |
| CVE-2022-0983 | An SQL injection risk was identified in Badges code relating to configuring criteria | Not rated | Mar 25, 2022 |
| CVE-2021-32474 | An SQL injection risk existed on sites with MNet enabled and configured, via an XML-RPC call from the connected peer… | Not rated | Mar 11, 2022 |
| CVE-2021-32473 | It was possible for a student to view their quiz grade before it had been released, using a quiz web service | Not rated | Mar 11, 2022 |
| CVE-2021-32475 | ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk | Not rated | Mar 11, 2022 |
| CVE-2021-32477 | The last time a user accessed the mobile app is displayed on their profile page, but should be restricted to users… | Not rated | Mar 11, 2022 |
| CVE-2021-32478 | The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open… | Not rated | Mar 11, 2022 |
| CVE-2021-32476 | A denial-of-service risk was identified in the draft files area, due to it not respecting user file upload limits | Not rated | Mar 11, 2022 |
| CVE-2021-32472 | Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances | Not rated | Mar 11, 2022 |
| CVE-2022-0335 | A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions | Not rated | Jan 25, 2022 |
Other n/a products
n/a 144660
Android 2441
kernel 279
Open5GS 125
Intel(R) Processors 119
BIG-IP 110
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions 106
HPE Intelligent Management Center (IMC) PLAT 105
Aruba ClearPass Policy Manager 83
GPAC 80
postgresql 79
ImageMagick 69