Vulnérabilités de n/a Moodle
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2020-14322 | In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, yui_combo needed to limit the amount of files it can load to help… | Non notée | 16 août 2022 |
| CVE-2020-14321 | In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role… | Non notée | 16 août 2022 |
| CVE-2020-1754 | In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, users viewing the grade history report without the 'access all… | 4.3 Moyenne | 5 août 2022 |
| CVE-2020-1691 | In Moodle 3.8, messages required extra sanitizing before updating the conversation overview, to prevent the risk of… | Non notée | 5 août 2022 |
| CVE-2022-35653 | A reflected XSS issue was identified in the LTI module of Moodle | Non notée | 25 juil. 2022 |
| CVE-2022-35652 | An open redirect issue was found in Moodle due to improper sanitization of user-supplied data in mobile auto-login… | Non notée | 25 juil. 2022 |
| CVE-2022-35651 | A stored XSS and blind SSRF vulnerability was found in Moodle, occurs due to insufficient sanitization of… | Non notée | 25 juil. 2022 |
| CVE-2022-35650 | The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions | Non notée | 25 juil. 2022 |
| CVE-2022-35649 | The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code | Non notée | 25 juil. 2022 |
| CVE-2022-30600 | A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold… | Non notée | 18 mai 2022 |
| CVE-2022-30599 | A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria | Non notée | 18 mai 2022 |
| CVE-2022-30598 | A flaw was found in moodle where global search results could include author information on some activities where a… | Non notée | 18 mai 2022 |
| CVE-2022-30597 | A flaw was found in moodle where the description user field was not hidden when being set as a hidden user field | Non notée | 18 mai 2022 |
| CVE-2022-30596 | A flaw was found in moodle where ID numbers displayed when bulk allocating markers to assignments required additional… | Non notée | 18 mai 2022 |
| CVE-2022-0984 | Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course… | Non notée | 29 avr. 2022 |
| CVE-2022-0985 | Insufficient capability checks could allow users with the moodle/site:uploadusers capability to delete users, without… | Non notée | 29 avr. 2022 |
| CVE-2022-0983 | An SQL injection risk was identified in Badges code relating to configuring criteria | Non notée | 25 mars 2022 |
| CVE-2021-32474 | An SQL injection risk existed on sites with MNet enabled and configured, via an XML-RPC call from the connected peer… | Non notée | 11 mars 2022 |
| CVE-2021-32473 | It was possible for a student to view their quiz grade before it had been released, using a quiz web service | Non notée | 11 mars 2022 |
| CVE-2021-32475 | ID numbers displayed in the quiz grading report required additional sanitizing to prevent a stored XSS risk | Non notée | 11 mars 2022 |
| CVE-2021-32477 | The last time a user accessed the mobile app is displayed on their profile page, but should be restricted to users… | Non notée | 11 mars 2022 |
| CVE-2021-32478 | The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open… | Non notée | 11 mars 2022 |
| CVE-2021-32476 | A denial-of-service risk was identified in the draft files area, due to it not respecting user file upload limits | Non notée | 11 mars 2022 |
| CVE-2021-32472 | Teachers exporting a forum in CSV format could receive a CSV of forums from all courses in some circumstances | Non notée | 11 mars 2022 |
| CVE-2022-0335 | A flaw was found in Moodle in versions 3.11 to 3.11.4, 3.10 to 3.10.8, 3.9 to 3.9.11 and earlier unsupported versions | Non notée | 25 janv. 2022 |
Autres produits n/a
n/a 144660
Android 2441
kernel 279
Open5GS 125
Intel(R) Processors 119
BIG-IP 110
Adobe Acrobat and Reader 2018.011.20040 and earlier, 2017.011.30080 and earlier, and 2015.006.30418 and earlier versions 106
HPE Intelligent Management Center (IMC) PLAT 105
Aruba ClearPass Policy Manager 83
GPAC 80
postgresql 79
ImageMagick 69