Vulnérabilités de n/a Moodle
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2022-40208 | In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential… | 4.3 Moyenne | 24 mars 2023 |
| CVE-2021-36400 | In Moodle, insufficient capability checks made it possible to remove other users' calendar URL subscriptions | 5.3 Moyenne | 6 mars 2023 |
| CVE-2021-36399 | In Moodle, ID numbers displayed in the quiz override screens required additional sanitizing to prevent a stored XSS risk | 5.4 Moyenne | 6 mars 2023 |
| CVE-2021-36398 | In moodle, ID numbers displayed in the web service token list required additional sanitizing to prevent a stored XSS… | 5.4 Moyenne | 6 mars 2023 |
| CVE-2021-36397 | In Moodle, insufficient capability checks meant message deletions were not limited to the current user | 5.3 Moyenne | 6 mars 2023 |
| CVE-2021-36396 | In Moodle, insufficient redirect handling made it possible to blindly bypass cURL blocked hosts/allowed ports… | 7.5 Élevée | 6 mars 2023 |
| CVE-2021-36403 | In Moodle, in some circumstances, email notifications of messages could have the link back to the original message… | 5.3 Moyenne | 6 mars 2023 |
| CVE-2021-36395 | In Moodle, the file repository's URL parsing required additional recursion handling to mitigate the risk of recursion… | 7.5 Élevée | 6 mars 2023 |
| CVE-2021-36402 | In Moodle, Users' names required additional sanitizing in the account confirmation email, to prevent a self-registration… | 5.3 Moyenne | 6 mars 2023 |
| CVE-2021-36394 | In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin | Non notée | 6 mars 2023 |
| CVE-2021-36401 | In Moodle, ID numbers exported in HTML data formats required additional sanitizing to prevent a local stored XSS risk | 4.8 Moyenne | 6 mars 2023 |
| CVE-2021-36393 | In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses | Non notée | 6 mars 2023 |
| CVE-2021-36392 | In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses | Non notée | 6 mars 2023 |
| CVE-2022-45152 | A blind Server-Side Request Forgery (SSRF) vulnerability was found in Moodle | 9.1 Critique | 25 nov. 2022 |
| CVE-2022-45151 | The stored-XSS vulnerability was discovered in Moodle which exists due to insufficient sanitization of user-supplied… | 5.4 Moyenne | 23 nov. 2022 |
| CVE-2022-45150 | A reflected cross-site scripting vulnerability was discovered in Moodle | 6.1 Moyenne | 23 nov. 2022 |
| CVE-2022-45149 | A vulnerability was found in Moodle which exists due to insufficient validation of the HTTP request origin in course… | 5.4 Moyenne | 23 nov. 2022 |
| CVE-2022-2986 | Enabling and disabling installed H5P libraries did not include the necessary token to prevent a CSRF risk | Non notée | 6 oct. 2022 |
| CVE-2022-40316 | The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to… | 4.3 Moyenne | 30 sept. 2022 |
| CVE-2022-40315 | A limited SQL injection risk was identified in the "browse list of users" site administration page | 9.8 Critique | 30 sept. 2022 |
| CVE-2022-40313 | Recursive rendering of Mustache template helpers containing user input could, in some cases, result in an XSS risk or… | 7.1 Élevée | 30 sept. 2022 |
| CVE-2022-40314 | A remote code execution risk when restoring backup files originating from Moodle 1.9 was identified | 9.8 Critique | 30 sept. 2022 |
| CVE-2020-14320 | In Moodle before 3.9.1, 3.8.4 and 3.7.7, the filter in the admin task log required extra sanitizing to prevent a… | Non notée | 16 août 2022 |
| CVE-2020-1756 | In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, insufficient input escaping was applied to the PHP unit webrunner admin… | Non notée | 16 août 2022 |
| CVE-2020-1755 | In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a user's IP, in order to… | Non notée | 16 août 2022 |
Autres produits n/a
n/a 144660
Android 2441
kernel 279
Open5GS 125
Intel(R) Processors 119
BIG-IP 110
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions 106
HPE Intelligent Management Center (IMC) PLAT 105
Aruba ClearPass Policy Manager 83
GPAC 80
postgresql 79
ImageMagick 69