Known vulnerabilities in Moodle - page 30

Vendor: moodle.org
Software: Moodle
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 605
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Moodle Moodle is affected by 605 known vulnerabilities: 28 high, 241 medium, 335 low Critical High Medium Low

Vulnerabilities (605)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU43865 - Cross-Site Request Forgery (CSRF)
CVE-2011-4133
CWE-352 Medium
No
No
- 16.07.2012 SB2012071602
#VU43866 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-4278
CWE-79 Low
No
No
1.9.11, 2.0.2 16.07.2012 SB2012071603
#VU43867 - Exposure of sensitive information to an unauthorized actor
CVE-2011-4279
CWE-200 Medium
No
No
- 16.07.2012 SB2012071603
#VU43868 - Cross-Site Request Forgery (CSRF)
CVE-2011-4281
CWE-352 Medium
No
No
- 16.07.2012 SB2012071603
#VU43869 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-4282
CWE-79 Low
No
No
- 16.07.2012 SB2012071603
#VU43870 - Exposure of sensitive information to an unauthorized actor
CVE-2011-4283
CWE-200 Medium
No
No
- 16.07.2012 SB2012071603
#VU43871 - Exposure of sensitive information to an unauthorized actor
CVE-2011-4284
CWE-200 Medium
No
No
- 16.07.2012 SB2012071603
#VU43872 - Permissions, Privileges, and Access Controls
CVE-2011-4285
CWE-264 Low
No
No
- 16.07.2012 SB2012071603
#VU43873 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-4286
CWE-79 Low
No
No
- 16.07.2012 SB2012071603
#VU43878 - Improper input validation
CVE-2011-4291
CWE-20 Low
No
No
- 16.07.2012 SB2012071604
#VU43879 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2011-4292
CWE-89 Low
No
No
- 16.07.2012 SB2012071604
#VU43891 - Exposure of sensitive information to an unauthorized actor
CVE-2011-4304
CWE-200 Low
No
No
- 11.07.2012 SB2012071101
#VU43892 - Improper input validation
CVE-2011-4305
CWE-20 Low
No
No
- 11.07.2012 SB2012071102
#VU43893 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-4306
CWE-79 Low
No
No
- 11.07.2012 SB2012071102
#VU43894 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-4307
CWE-79 Low
No
No
2.0.5, 2.1.2 11.07.2012 SB2012071101
#VU43895 - Permissions, Privileges, and Access Controls
CVE-2011-4308
CWE-264 Low
No
No
- 11.07.2012 SB2012071101
#VU43896 - Permissions, Privileges, and Access Controls
CVE-2011-4309
CWE-264 Medium
No
No
- 11.07.2012 SB2012071101
#VU43899 - Cross-Site Request Forgery (CSRF)
CVE-2011-4298
CWE-352 Medium
No
No
- 11.07.2012 SB2012071101
#VU43900 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-4299
CWE-79 Low
No
No
2.0.5, 2.1.2 11.07.2012 SB2012071101
#VU43901 - Permissions, Privileges, and Access Controls
CVE-2011-4300
CWE-264 Medium
No
No
- 11.07.2012 SB2012071101


Showing elements 581 - 600 out of 605