Known vulnerabilities in Moodle - page 6

Vendor: moodle.org
Software: Moodle
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 605
Public exploits: 26
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Moodle Moodle is affected by 605 known vulnerabilities: 28 high, 241 medium, 335 low Critical High Medium Low

Vulnerabilities (605)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97232 - Improper Access Control
CVE-2024-45689
CWE-284 Low
No
No
4.1.13, 4.2.10, 4.3.7, 4.4.3 13.09.2024 SB2024091317
#VU96253 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-43425
CWE-94 Medium
Available
Exploited
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96252 - Exposure of sensitive information to an unauthorized actor
CVE-2024-43426
CWE-200 Medium
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96251 - Exposure of sensitive information to an unauthorized actor
CVE-2024-43427
CWE-200 Medium
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96250 - Use of Cache Containing Sensitive Information
CVE-2024-43428
CWE-524 Medium
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96249 - Exposure of sensitive information to an unauthorized actor
CVE-2024-43429
CWE-200 Medium
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96248 - Improper Access Control
CVE-2024-43430
CWE-284 Medium
No
No
4.4.2 20.08.2024 SB2024082033
#VU96245 - Improper Access Control
CVE-2024-43431
CWE-284 Medium
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96239 - Exposure of sensitive information to an unauthorized actor
CVE-2024-43432
CWE-200 Medium
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96238 - Improper Access Control
CVE-2024-43433
CWE-284 Low
No
No
4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96237 - Cross-Site Request Forgery (CSRF)
CVE-2024-43434
CWE-352 Low
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96236 - Permissions, Privileges, and Access Controls
CVE-2024-43435
CWE-264 Medium
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96235 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-43436
CWE-89 Low
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96232 - Improper Access Control
CVE-2024-43438
CWE-284 Medium
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96228 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-43440
CWE-94 High
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96226 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43437
CWE-79 Low
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96225 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43439
CWE-79 Low
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU92252 - Exposure of sensitive information to an unauthorized actor
CVE-2024-38273
CWE-200 Medium
No
No
4.1.11, 4.2.8, 4.3.5, 4.4.1 19.06.2024 SB2024061940
SB2024061945
SB2024061946
#VU92250 - Improper Access Control
CVE-2024-38277
CWE-284 Medium
No
No
4.1.11, 4.2.8, 4.3.5, 4.4.1 19.06.2024 SB2024061940
SB2024061945
SB2024061946
#VU92229 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38274
CWE-79 Low
No
No
4.1.11, 4.2.8, 4.3.5, 4.4.1 19.06.2024 SB2024061940
SB2024061945
SB2024061946


Showing elements 101 - 120 out of 605