Known vulnerabilities in Moodle - page 19

Vendor: moodle.org
Software: Moodle
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 618
Public exploits: 26
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Moodle Moodle is affected by 618 known vulnerabilities: 29 high, 250 medium, 338 low Critical High Medium Low

Vulnerabilities (618)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU43786 - Improper input validation
CVE-2012-3398
CWE-20 Low
No
No
- 24.07.2012 SB2012072404
SB2012072406
SB2012072407
and 2 more
#VU43787 - Permissions, Privileges, and Access Controls
CVE-2012-3387
CWE-264 Low
No
No
- 24.07.2012 SB2012072405
SB2012072406
SB2012072407
and 2 more
#VU43788 - Permissions, Privileges, and Access Controls
CVE-2012-3388
CWE-264 Low
No
No
- 24.07.2012 SB2012072405
SB2012072406
SB2012072407
and 2 more
#VU43789 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-3389
CWE-79 Low
No
No
2.2.4, 2.3.1 24.07.2012 SB2012072405
SB2012072406
SB2012072407
and 2 more
#VU43790 - Permissions, Privileges, and Access Controls
CVE-2012-3390
CWE-264 Low
No
No
- 24.07.2012 SB2012072404
SB2012072406
SB2012072407
and 2 more
#VU43791 - Permissions, Privileges, and Access Controls
CVE-2012-3391
CWE-264 Low
No
No
- 24.07.2012 SB2012072404
SB2012072406
SB2012072407
and 2 more
#VU43792 - Configuration
CVE-2012-3392
CWE-16 Low
No
No
- 24.07.2012 SB2012072404
SB2012072406
SB2012072407
and 2 more
#VU43794 - Exposure of sensitive information to an unauthorized actor
CVE-2012-3394
CWE-200 Medium
No
No
- 24.07.2012 SB2012072405
SB2012072406
SB2012072407
and 2 more
#VU43796 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-3396
CWE-79 Low
No
No
2.0.10, 2.1.7, 2.2.4, 2.3.1 24.07.2012 SB2012072405
SB2012072406
SB2012072407
and 2 more
#VU43797 - Permissions, Privileges, and Access Controls
CVE-2012-3397
CWE-264 Low
No
No
- 24.07.2012 SB2012072405
SB2012072406
SB2012072407
and 2 more
#VU43815 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2364
CWE-79 Low
No
No
2.0.9, 2.1.6, 2.2.3 21.07.2012 SB2012072103
SB2012052306
#VU43816 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2365
CWE-79 Low
No
No
2.0.9, 2.1.6, 2.2.3 21.07.2012 SB2012072103
SB2012052306
#VU43817 - Improper input validation
CVE-2012-2366
CWE-20 Low
No
No
- 21.07.2012 SB2012072103
SB2012052306
#VU43818 - Permissions, Privileges, and Access Controls
CVE-2012-2367
CWE-264 Low
No
No
- 21.07.2012 SB2012072103
SB2012052306
#VU43819 - Exposure of sensitive information to an unauthorized actor
CVE-2012-2353
CWE-200 Low
No
No
- 21.07.2012 SB2012072103
SB2012052306
SB2012072406
and 3 more
#VU43820 - Permissions, Privileges, and Access Controls
CVE-2012-2354
CWE-264 Low
No
No
- 21.07.2012 SB2012072103
SB2012052306
#VU43821 - Permissions, Privileges, and Access Controls
CVE-2012-2355
CWE-264 Low
No
No
- 21.07.2012 SB2012072103
SB2012052306
#VU43822 - Permissions, Privileges, and Access Controls
CVE-2012-2356
CWE-264 Low
No
No
- 21.07.2012 SB2012072103
SB2012052306
#VU43823 - Exposure of sensitive information to an unauthorized actor
CVE-2012-2357
CWE-200 Medium
No
No
- 21.07.2012 SB2012072103
SB2012052306
#VU43824 - Permissions, Privileges, and Access Controls
CVE-2012-2358
CWE-264 Low
No
No
- 21.07.2012 SB2012072103
SB2012052306


Showing elements 361 - 380 out of 618