Vulnérabilités connues pour n/a Moodle 2.x and 3.x
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2017-7491 | In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the… | Non notée | 15 mai 2017 |
| CVE-2017-7490 | In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing | Non notée | 15 mai 2017 |
| CVE-2017-7489 | In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link | Non notée | 15 mai 2017 |
| CVE-2017-2641 | In Moodle 2.x and 3.x, SQL injection can occur via user preferences | Non notée | 26 mars 2017 |
| CVE-2017-2576 | In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums | Non notée | 20 janv. 2017 |
| CVE-2016-8644 | In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context | Non notée | 20 janv. 2017 |
| CVE-2016-8643 | In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services | Non notée | 20 janv. 2017 |
| CVE-2016-8642 | In Moodle 2.x and 3.x, the question engine allows access to files that should not be available | Non notée | 20 janv. 2017 |
| CVE-2016-7038 | In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed | Non notée | 20 janv. 2017 |
Autres produits n/a
n/a 144660
Android 2441
kernel 279
Open5GS 125
Intel(R) Processors 119
BIG-IP 110
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions 106
HPE Intelligent Management Center (IMC) PLAT 105
Moodle 89
Aruba ClearPass Policy Manager 83
GPAC 80
postgresql 79