Known vulnerabilities in Moodle - page 24

Vendor: moodle.org
Software: Moodle
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 605
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Moodle Moodle is affected by 605 known vulnerabilities: 28 high, 241 medium, 335 low Critical High Medium Low

Vulnerabilities (605)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU41614 - Exposure of sensitive information to an unauthorized actor
CVE-2014-0217
CWE-200 Medium
No
No
- 27.05.2014 SB2014052704
SB2014052114
#VU41616 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-0218
CWE-79 Low
No
No
2.4.10, 2.5.6, 2.6.3 27.05.2014 SB2014052704
SB2014052114
#VU41892 - Permissions, Privileges, and Access Controls
CVE-2014-0122
CWE-264 Low
No
No
- 24.03.2014 SB2014032404
SB2014031902
#VU41893 - Permissions, Privileges, and Access Controls
CVE-2014-0123
CWE-264 Low
No
No
- 24.03.2014 SB2014032404
SB2014031902
#VU41894 - Permissions, Privileges, and Access Controls
CVE-2014-0124
CWE-264 Low
No
No
- 24.03.2014 SB2014032404
SB2014031902
#VU41895 - Permissions, Privileges, and Access Controls
CVE-2014-0125
CWE-264 Medium
No
No
- 24.03.2014 SB2014032404
SB2014031902
#VU41896 - Cross-Site Request Forgery (CSRF)
CVE-2014-0126
CWE-352 Medium
No
No
- 24.03.2014 SB2014032404
SB2014031902
#VU41897 - Permissions, Privileges, and Access Controls
CVE-2014-0127
CWE-264 Low
No
No
- 24.03.2014 SB2014032404
SB2014031902
#VU41898 - Permissions, Privileges, and Access Controls
CVE-2014-0129
CWE-264 Low
No
No
- 24.03.2014 SB2014032404
SB2014031902
#VU41899 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2014-2571
CWE-79 Low
No
No
2.4.9, 2.5.5, 2.6.2 24.03.2014 SB2014032404
#VU41900 - Permissions, Privileges, and Access Controls
CVE-2014-2572
CWE-264 Low
No
No
- 24.03.2014 SB2014032404
#VU42133 - Permissions, Privileges, and Access Controls
CVE-2014-0009
CWE-264 Low
No
No
- 20.01.2014 SB2014012003
SB2014012202
#VU42135 - Credentials Management
CVE-2014-0008
CWE-255 Low
No
No
- 20.01.2014 SB2014012003
SB2014012202
#VU42310 - Exposure of sensitive information to an unauthorized actor
CVE-2013-4522
CWE-200 Medium
No
No
- 26.11.2013 SB2013112617
#VU42311 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4523
CWE-79 Low
No
No
2.3.10, 2.4.7, 2.5.3 26.11.2013 SB2013112617
#VU42312 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2013-4524
CWE-22 Medium
No
No
2.3.10, 2.4.7, 2.5.3 26.11.2013 SB2013112617
#VU42313 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4525
CWE-79 Low
No
No
2.3.10, 2.4.7, 2.5.3 26.11.2013 SB2013112617
#VU42410 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-3630
CWE-94 Low
Available
No
- 01.11.2013 SB2013091606
#VU42566 - Improper input validation
CVE-2012-6087
CWE-20 Medium
No
No
- 16.09.2013 SB2013091606
SB2013011504
#VU42567 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2013-4313
CWE-89 Medium
No
No
- 16.09.2013 SB2013091606


Showing elements 461 - 480 out of 605