Known vulnerabilities in Moodle - page 16

Vendor: moodle.org
Software: Moodle
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 618
Public exploits: 26
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Moodle Moodle is affected by 618 known vulnerabilities: 29 high, 250 medium, 338 low Critical High Medium Low

Vulnerabilities (618)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU31683 - Improper input validation
CVE-2020-14322
CWE-20 Medium
No
No
3.5.13, 3.7.7, 3.8.4, 3.9.1 20.07.2020 SB2020072004
#VU31682 - Permissions, Privileges, and Access Controls
CVE-2020-14321
CWE-264 High
Available
No
3.5.13, 3.7.7, 3.8.4, 3.9.1 20.07.2020 SB2020072004
#VU27979 - Improper input validation
CVE-2020-10738
CWE-20 Medium
No
No
3.5.12, 3.6.10, 3.7.6, 3.8.3 18.05.2020 SB2020051815
SB2020051159
SB2020051160
and 1 more
#VU26120 - Improper input validation
CVE-2020-1756
CWE-20 Low
No
No
3.5.11, 3.6.9, 3.7.5, 3.8.2 17.03.2020 SB2020031711
#VU26118 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-1755
CWE-451 Medium
No
No
3.5.11, 3.6.9, 3.7.5, 3.8.2 17.03.2020 SB2020031711
#VU26117 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1754
CWE-200 Medium
No
No
3.5.11, 3.6.9, 3.7.5, 3.8.2 17.03.2020 SB2020031711
#VU25422 - Exposure of sensitive information to an unauthorized actor
CVE-2020-1692
CWE-200 Medium
No
No
3.7.2 18.02.2020 SB2020021810
#VU24388 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1691
CWE-79 Low
No
No
3.8.1 20.01.2020 SB2020012003
#VU22907 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-14884
CWE-79 Low
No
No
3.5.9, 3.6.7, 3.7.3 21.11.2019 SB2019112128
#VU22906 - Improper Authorization
CVE-2019-14883
CWE-285 Low
No
No
3.6.7, 3.7.3 21.11.2019 SB2019112128
#VU22905 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-14882
CWE-601 Low
No
No
3.5.9, 3.6.7, 3.7.3 21.11.2019 SB2019112128
#VU22904 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-14881
CWE-79 Low
No
No
3.7.3 21.11.2019 SB2019112128
#VU22903 - Improper Authentication
CVE-2019-14880
CWE-287 Medium
No
No
3.5.9, 3.6.7, 3.7.3 21.11.2019 SB2019112128
#VU22902 - Permissions, Privileges, and Access Controls
CVE-2019-14879
CWE-264 Low
No
No
3.5.9, 3.6.7, 3.7.3 21.11.2019 SB2019112128
#VU30608 - Incorrect Default Permissions
CVE-2012-1157
CWE-276 Low
No
No
2.2.2 14.11.2019 SB2019111443
SB2012040203
SB2012050908
and 1 more
#VU30609 - Exposure of sensitive information to an unauthorized actor
CVE-2012-1158
CWE-200 Low
No
No
2.2.2 14.11.2019 SB2019111443
SB2012040203
SB2012050908
and 1 more
#VU30610 - Exposure of sensitive information to an unauthorized actor
CVE-2012-1159
CWE-200 Low
No
No
2.2.2 14.11.2019 SB2019111443
SB2012040203
SB2012050908
and 1 more
#VU30611 - Incorrect Permission Assignment for Critical Resource
CVE-2012-1160
CWE-732 Low
No
No
2.2.2 14.11.2019 SB2019111443
SB2012040203
SB2012050908
and 1 more
#VU30612 - Exposure of sensitive information to an unauthorized actor
CVE-2012-1161
CWE-200 Low
No
No
2.2.2 14.11.2019 SB2019111443
SB2012040203
SB2012050908
and 1 more
#VU19267 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1999024
CWE-79 Low
No
No
3.5.12, 3.6.10, 3.7.6, 3.8.3 19.07.2019 SB2018072312
SB2020051815


Showing elements 301 - 320 out of 618