Known vulnerabilities in Moodle - page 29

Vendor: moodle.org
Software: Moodle
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 618
Public exploits: 26
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Moodle Moodle is affected by 618 known vulnerabilities: 29 high, 250 medium, 338 low Critical High Medium Low

Vulnerabilities (618)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30608 - Incorrect Default Permissions
CVE-2012-1157
CWE-276 Low
No
No
2.2.2 14.11.2019 SB2019111443
SB2012040203
SB2012050908
and 1 more
#VU30609 - Exposure of sensitive information to an unauthorized actor
CVE-2012-1158
CWE-200 Low
No
No
2.2.2 14.11.2019 SB2019111443
SB2012040203
SB2012050908
and 1 more
#VU30610 - Exposure of sensitive information to an unauthorized actor
CVE-2012-1159
CWE-200 Low
No
No
2.2.2 14.11.2019 SB2019111443
SB2012040203
SB2012050908
and 1 more
#VU30611 - Incorrect Permission Assignment for Critical Resource
CVE-2012-1160
CWE-732 Low
No
No
2.2.2 14.11.2019 SB2019111443
SB2012040203
SB2012050908
and 1 more
#VU30612 - Exposure of sensitive information to an unauthorized actor
CVE-2012-1161
CWE-200 Low
No
No
2.2.2 14.11.2019 SB2019111443
SB2012040203
SB2012050908
and 1 more
#VU30613 - Exposure of sensitive information to an unauthorized actor
CVE-2012-1169
CWE-200 Medium
No
No
2.2.2 14.11.2019 SB2019111443
SB2012040203
SB2012050908
and 1 more
#VU30614 - Improper Validation of Integrity Check Value
CVE-2012-1170
CWE-354 Medium
No
No
2.2.2 14.11.2019 SB2019111443
SB2012040203
SB2012050908
and 1 more
#VU30615 - Exposure of sensitive information to an unauthorized actor
CVE-2012-1155
CWE-200 Medium
No
No
2.2.2 14.11.2019 SB2019111443
SB2012040203
SB2012050908
and 1 more
#VU30616 - Information Exposure Through Log Files
CVE-2012-1156
CWE-532 Medium
No
No
2.2.2 14.11.2019 SB2019111443
SB2012040203
SB2012050908
and 1 more
#VU30617 - Improper input validation
CVE-2012-1168
CWE-20 High
No
No
2.2.2 14.11.2019 SB2019111443
SB2012040203
SB2012050908
and 1 more
#VU31037 - Improper Access Control
CVE-2019-10154
CWE-284 Medium
No
No
3.6.4 26.06.2019 SB2019062610
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358
CWE-1321 Low
Available
No
3.8.4, 3.9.0 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU31205 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14631
CWE-79 Low
No
No
3.5.2 17.09.2018 SB2018091708
#VU31206 - Improper Control of Generation of Code ('Code Injection')
CVE-2018-14630
CWE-94 High
No
No
3.5.2 17.09.2018 SB2018091708
SB2018091721
SB2018091722
and 2 more
#VU31272 - Information Exposure Through Log Files
CVE-2018-10889
CWE-532 Medium
No
No
3.5.1 10.07.2018 SB2018071032
SB2018073052
SB2018073053
and 2 more
#VU31273 - Exposure of sensitive information to an unauthorized actor
CVE-2018-10890
CWE-200 Medium
No
No
3.5.1 10.07.2018 SB2018071032
SB2018073052
SB2018073053
and 2 more
#VU31274 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2018-10891
CWE-74 Medium
No
No
3.5.1 10.07.2018 SB2018071032
SB2018073052
SB2018073053
and 2 more
#VU37616 - Server-Side Request Forgery (SSRF)
CVE-2018-1042
CWE-918 Medium
Available
No
- 22.01.2018 SB2018012214
SB2018012331
SB2018012332
and 1 more
#VU37617 - Improper input validation
CVE-2018-1043
CWE-20 Medium
No
No
- 22.01.2018 SB2018012214
SB2018012331
SB2018012332
and 1 more
#VU37618 - Exposure of sensitive information to an unauthorized actor
CVE-2018-1044
CWE-200 Low
No
No
- 22.01.2018 SB2018012214
SB2018012331
SB2018012332
and 1 more


Showing elements 561 - 580 out of 618