Known vulnerabilities in Moodle - page 27

Vendor: moodle.org
Software: Moodle
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 605
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Moodle Moodle is affected by 605 known vulnerabilities: 28 high, 241 medium, 335 low Critical High Medium Low

Vulnerabilities (605)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU43503 - Permissions, Privileges, and Access Controls
CVE-2012-4408
CWE-264 Low
No
No
- 19.09.2012 SB2012091901
SB2012091703
SB2012091704
and 1 more
#VU43786 - Improper input validation
CVE-2012-3398
CWE-20 Low
No
No
- 24.07.2012 SB2012072404
SB2012072406
SB2012072407
and 2 more
#VU43787 - Permissions, Privileges, and Access Controls
CVE-2012-3387
CWE-264 Low
No
No
- 24.07.2012 SB2012072405
SB2012072406
SB2012072407
and 2 more
#VU43788 - Permissions, Privileges, and Access Controls
CVE-2012-3388
CWE-264 Low
No
No
- 24.07.2012 SB2012072405
SB2012072406
SB2012072407
and 2 more
#VU43789 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-3389
CWE-79 Low
No
No
2.2.4, 2.3.1 24.07.2012 SB2012072405
SB2012072406
SB2012072407
and 2 more
#VU43790 - Permissions, Privileges, and Access Controls
CVE-2012-3390
CWE-264 Low
No
No
- 24.07.2012 SB2012072404
SB2012072406
SB2012072407
and 2 more
#VU43791 - Permissions, Privileges, and Access Controls
CVE-2012-3391
CWE-264 Low
No
No
- 24.07.2012 SB2012072404
SB2012072406
SB2012072407
and 2 more
#VU43792 - Configuration
CVE-2012-3392
CWE-16 Low
No
No
- 24.07.2012 SB2012072404
SB2012072406
SB2012072407
and 2 more
#VU43793 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-3393
CWE-79 Low
No
No
2.1.7, 2.2.4 24.07.2012 SB2012072404
SB2012072406
SB2012072407
and 2 more
#VU43794 - Exposure of sensitive information to an unauthorized actor
CVE-2012-3394
CWE-200 Medium
No
No
- 24.07.2012 SB2012072405
SB2012072406
SB2012072407
and 2 more
#VU43795 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2012-3395
CWE-89 Low
No
No
- 24.07.2012 SB2012072404
SB2012072406
SB2012072407
and 2 more
#VU43796 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-3396
CWE-79 Low
No
No
2.0.10, 2.1.7, 2.2.4, 2.3.1 24.07.2012 SB2012072405
SB2012072406
SB2012072407
and 2 more
#VU43797 - Permissions, Privileges, and Access Controls
CVE-2012-3397
CWE-264 Low
No
No
- 24.07.2012 SB2012072405
SB2012072406
SB2012072407
and 2 more
#VU43810 - Permissions, Privileges, and Access Controls
CVE-2012-2359
CWE-264 Low
No
No
- 21.07.2012 SB2012072103
SB2012052306
#VU43811 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2360
CWE-79 Low
No
No
2.0.9, 2.1.6, 2.2.3 21.07.2012 SB2012072103
SB2012052306
#VU43812 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2361
CWE-79 Low
No
No
2.0.9, 2.1.6, 2.2.3 21.07.2012 SB2012072103
SB2012052306
#VU43813 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2362
CWE-79 Low
No
No
1.9.18 21.07.2012 SB2012072104
SB2012052306
#VU43814 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2012-2363
CWE-89 Low
No
No
- 21.07.2012 SB2012072104
SB2012052306
#VU43815 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2364
CWE-79 Low
No
No
2.0.9, 2.1.6, 2.2.3 21.07.2012 SB2012072103
SB2012052306
#VU43816 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-2365
CWE-79 Low
No
No
2.0.9, 2.1.6, 2.2.3 21.07.2012 SB2012072103
SB2012052306


Showing elements 521 - 540 out of 605