Known vulnerabilities in Moodle - page 6
Vendor:
moodle.org
Software:
Moodle
Software CPE:
cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Total vulnerabilities:
618
Public exploits:
26
Known exploited (KEV):
2
Breakdown by Severity Chart
4.5.14
5.0.10
5.1.7
5.2.3
5.2.2
5.1.6
5.0.9
4.5.13
5.2.1
5.1.5
5.0.8
4.5.12
5.2.0
5.1.4
5.0.7
4.5.11
5.1.3
5.0.6
4.5.10
5.1.2
5.0.5
4.5.9
5.1.1
5.0.4
4.5.8
4.4.12
4.1.22
5.1.0
5.0.3
4.5.7
4.4.11
4.1.21
5.0.2
4.5.6
4.4.10
4.1.20
5.0.1
4.5.5
4.4.9
4.1.19
5.0.0
4.5.4
4.4.8
4.3.12
4.1.18
4.5.3
4.4.7
4.3.11
4.1.17
4.5.2
4.4.6
4.3.10
4.1.16
4.5.1
4.4.5
4.3.9
4.1.15
4.5.0
4.4.4
4.3.8
4.2.11
4.1.14
4.4.3
4.3.7
4.2.10
4.1.13
4.4.2
4.3.6
4.2.9
4.1.12
4.4.1
4.3.5
4.2.8
4.1.11
4.4.0
4.3.4
4.2.7
4.1.10
4.3.3
4.2.6
4.1.9
4.3.2
4.2.5
4.1.8
4.3.1
4.2.4
4.1.7
4.0.12
3.11.18
3.9.25
4.3.0
4.2.3
4.1.6
4.0.11
3.11.17
3.9.24
4.2.2
4.1.5
4.0.10
3.11.16
3.9.23
4.2.1
4.1.4
4.0.9
3.11.15
3.9.22
4.2.0
4.1.3
4.0.8
3.11.14
3.9.21
4.1.2
4.0.7
3.11.13
3.9.20
4.1.1
4.0.6
3.11.12
3.9.19
4.1.0
4.0.5
3.11.11
3.9.18
4.0.4
3.11.10
3.9.17
4.0.3
3.11.9
3.9.16
4.0.2
3.11.8
3.9.15
4.0.1
3.11.7
3.10.11
3.9.14
4.0.0
3.11.6
3.10.10
3.9.13
3.11.5
3.10.9
3.9.12
3.11.4
3.10.8
3.9.11
3.9.10
3.10.7
3.11.3
3.9.9
3.10.6
3.11.2
3.9.8
3.10.5
3.11.1
3.11
3.11.0
3.5.18
3.8.9
3.9.7
3.10.4
3.9.6
3.10.3
3.5.17
3.8.8
3.9.5
3.10.2
3.5.16
3.8.7
3.9.4
3.10.1
3.5.15
3.7.9
3.8.6
3.9.3
3.10.0
1.4.001
1.2.106-2
1.0
3.5.14
3.7.8
3.8.5
3.9.2
18
17
23
22
3.3
3.5.13
3.7.7
3.8.4
3.9.1
3.9.0
3.5.12
3.6.10
3.7.6
3.8.3
3.5.11
3.6.9
3.7.5
3.8.2
3.5.10
3.6.8
3.7.4
3.8.1
3.5.9
3.6.7
3.7.3
3.8.0-beta
3.8.0-rc1
3.8.0
3.5.8
3.6.6
3.7.2
3.5.7
3.6.5
3.7.1
3.1.18
3.4.9
3.5.6
3.6.4
3.7.0-beta
3.7.0-rc1
3.7.0-rc2
3.7.0
3.6.0-rc3
3.6.0-rc2
3.6.0-rc1
3.6.0-beta
3.5.0-rc1
3.5.0-beta
3.4.0-rc3
3.4.0-rc2
3.4.0-rc1
3.4.0-beta
3.3.0-rc3
3.3.0-rc2
3.3.0-rc1
3.3.0-beta
3.2.9
3.2.8
3.2.7
3.2.6
3.2.5
3.2.4
3.2.3
3.2.2
3.2.1
3.2.0-rc5
3.2.0-rc4
3.2.0-rc3
3.2.0-rc2
3.2.0-rc1
3.2.0-beta
3.2.0
3.1.0-rc2
3.1.0-rc1
3.1.0-beta
3.0.10
3.0.9
3.0.8
3.0.7
3.0.6
3.0.5
3.0.4
3.0.3
3.0.0-rc4
3.0.0-rc3
3.0.0-rc2
3.0.0-rc1
3.0.0-beta
3.0.0
2.9.9
2.9.8
2.9.7
2.9.6
2.9.5
2.9.0-rc2
2.9.0-rc1
2.9.0-beta
2.9.0
2.8.12
2.8.11
2.8.0-rc2
2.8.0-rc1
2.8.0-beta
2.8.0
2.7.20
2.7.19
2.7.18
2.7.17
2.7.16
2.7.15
2.7.14
2.7.13
2.7.0-rc2
2.7.0-rc1
2.7.0-beta
2.7.0
2.6.0-rc1
2.6.0-beta
2.6.0
2.5.0-rc1
2.5.0-beta
2.5.0
2.4.0-rc1
2.4.0-beta
2.4.0
2.3.0-rc1
2.3.0-beta
2.3.0
2.2.0-rc1
2.2.0-beta
2.2.0
2.1.0
2.0.10
2.0.0-rc2
2.0.0-rc1
2.0.0
1.9.0
1.8.0
1.7.7
1.7.0
1.6.9
1.6.0
1.5.4
1.5.0
1.4.0
1.3.5
1.3.0
1.2.0
1.1.0
1.0.9
1.0.8
1.0.7
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
3.6.3
3.5.5
3.1.17
3.6.2
3.6.1
3.5.4
3.1.16
3.3.8
3.3.7
3.3.6
3.3.5
3.1.14
3.1.13
3.1.12
3.1.11
3.1.10
3.1.9
3.1.8
3.1.7
3.1.6
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
3.1.0
3.4.8
3.4.7
3.3.4
3.3.3
3.3.2
3.3.1
3.3.0
3.4.5
3.4.4
3.4.3
3.4.2
3.4.1
3.4.0
3.5.2
3.5.1
3.5.0
3.1.15
3.3.9
3.4.6
3.5.3
3.6.0
2.8.10
2.9.4
3.0.2
2.7.12
3.0
2.8.9
2.9.3
3.0.1
2.7.11
2.7.10
2.8.8
2.9.2
2.6.11
2.9.1
2.8.7
2.7.9
2.9
2.7.8
2.8.6
2.6.10
2.8.5
2.7.6
2.8.4
2.6.9
2.7.7
2.7.5
2.8.3
2.6.7
2.7.4
2.8.2
2.6.8
2.8.1
2.6.6
2.7.3
2.8
2.5.9
2.7.2
2.5.8
2.6.5
2.6.4
2.7.1
2.4.11
2.5.7
2.6.3
2.4.10
2.7
2.5.6
2.6.2
2.4.9
2.5.5
2.6.1
2.6
2.4.8
2.4.7
2.3.10
2.3.11
2.5.4
2.5.3
2.4.6
2.3.9
2.5.2
1.9.19
1.8.14
1.8.13
2.1.10
2.1.9
2.4
2.2.10
2.3.3
2.4.2
2.5.1
2.2.7
2.3.6
2.4.5
2.2.6
2.3.5
2.4.4
2.2.11
2.4.1
2.3.4
2.4.3
2.2.8
2.3.7
2.2.9
2.3.8
2.5
2.1.8
2.3.2
2.2.5
2.1.7
2.2.4
2.3.1
1.9.18
2.0.9
2.1.6
2.2.3
2.3
1.9.16
1.9.17
2.0.8
2.0.7
2.2.1
2.1.5
2.1.4
2.2.2
2.0.6
2.1.3
1.9.15
2.0.5
2.0.4
2.1.2
2.0.3
2.1.1
2.0.2
2.2
2.0
2.1
1.9.12
1.9.11
1.9.14
1.9.13
1.9.9
1.9.10
2.0.1
1.8.12
1.9.8
1.9.7
1.8.11
1.8.9
1.8.10
1.9.6
1.9.5
1.9.4
1.8.8
1.6.8
1.9.3
1.8.7
1.9
1.9.1
1.8.5
1.9.2
1.8.6
1.7
1.8
1.8.1
1.6.3
1.7.2
1.6.4
1.7.3
1.8.2
1.6.6
1.7.5
1.8.4
1.6.7
1.7.6
1.6.5
1.7.4
1.8.3
1.7.1
1.6.2
1.6
1.5.1
1.6.1
1.5.3
1.5.2
1.5
1.5 beta
1.4.5
1.4.3
1.4.4
1.3.4
1.4.1
1.4.2
1.3.3
1.3
1.3.2
1.2
1.2.1
1.3.1
1.1.1
Vulnerabilities (618)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU101810 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-55647 |
CWE-79 | Low | 4.3.9, 4.4.5, 4.5.1 | 17.12.2024 |
SB2024121718 SB2024121758 SB2024121772 |
||
| #VU101809 - Improper Privilege Management CVE-2024-55646 |
CWE-269 | Low | 4.1.15, 4.3.9, 4.4.5, 4.5.1 | 17.12.2024 |
SB2024121718 SB2024121758 SB2024121772 |
||
| #VU101808 - Exposure of sensitive information to an unauthorized actor CVE-2024-55645 |
CWE-200 | Low | 4.1.15, 4.3.9, 4.4.5, 4.5.1 | 17.12.2024 |
SB2024121718 SB2024121758 SB2024121772 |
||
| #VU101807 - Improper Access Control CVE-2024-55644 |
CWE-284 | Low | 4.1.15, 4.3.9, 4.4.5, 4.5.1 | 17.12.2024 |
SB2024121718 SB2024121758 SB2024121772 |
||
| #VU101806 - Improper Access Control CVE-2024-55643 |
CWE-284 | Low | 4.1.15, 4.3.9, 4.4.5, 4.5.1 | 17.12.2024 |
SB2024121718 SB2024121758 SB2024121772 |
||
| #VU98545 - Improper Access Control CVE-2024-48901 |
CWE-284 | Low | 4.1.14, 4.2.11, 4.3.8, 4.4.4 | 15.10.2024 |
SB2024101518 |
||
| #VU98543 - Improper Access Control CVE-2024-48900 |
CWE-284 | Low | 4.4.4 | 15.10.2024 |
SB2024101518 |
||
| #VU98542 - Improper Access Control CVE-2024-48899 |
CWE-284 | Low | 4.4.4 | 15.10.2024 |
SB2024101518 |
||
| #VU98540 - Improper Access Control CVE-2024-48898 |
CWE-284 | Medium | 4.1.14, 4.2.11, 4.3.8, 4.4.4 | 15.10.2024 |
SB2024101518 |
||
| #VU98532 - Improper Access Control CVE-2024-48897 |
CWE-284 | Medium | 4.1.14, 4.2.11, 4.3.8, 4.4.4 | 15.10.2024 |
SB2024101518 |
||
| #VU98528 - Exposure of sensitive information to an unauthorized actor CVE-2024-48896 |
CWE-200 | Medium | 4.1.14, 4.2.11, 4.3.8, 4.4.4 | 15.10.2024 |
SB2024101518 |
||
| #VU97234 - Improper Authentication CVE-2024-45691 |
CWE-287 | Medium | 4.1.13, 4.2.10, 4.3.7, 4.4.3 | 13.09.2024 |
SB2024091317 |
||
| #VU97233 - Improper Access Control CVE-2024-45690 |
CWE-284 | Medium | 4.1.13, 4.2.10, 4.3.7, 4.4.3 | 13.09.2024 |
SB2024091317 |
||
| #VU97232 - Improper Access Control CVE-2024-45689 |
CWE-284 | Low | 4.1.13, 4.2.10, 4.3.7, 4.4.3 | 13.09.2024 |
SB2024091317 |
||
| #VU96253 - Improper Control of Generation of Code ('Code Injection') CVE-2024-43425 |
CWE-94 | Medium | 4.1.12, 4.2.9, 4.3.6, 4.4.2 | 20.08.2024 |
SB2024082033 |
||
| #VU96252 - Exposure of sensitive information to an unauthorized actor CVE-2024-43426 |
CWE-200 | Medium | 4.1.12, 4.2.9, 4.3.6, 4.4.2 | 20.08.2024 |
SB2024082033 |
||
| #VU96251 - Exposure of sensitive information to an unauthorized actor CVE-2024-43427 |
CWE-200 | Medium | 4.1.12, 4.2.9, 4.3.6, 4.4.2 | 20.08.2024 |
SB2024082033 |
||
| #VU96250 - Use of Cache Containing Sensitive Information CVE-2024-43428 |
CWE-524 | Medium | 4.1.12, 4.2.9, 4.3.6, 4.4.2 | 20.08.2024 |
SB2024082033 |
||
| #VU96249 - Exposure of sensitive information to an unauthorized actor CVE-2024-43429 |
CWE-200 | Medium | 4.1.12, 4.2.9, 4.3.6, 4.4.2 | 20.08.2024 |
SB2024082033 |
||
| #VU96225 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-43439 |
CWE-79 | Low | 4.1.12, 4.2.9, 4.3.6, 4.4.2 | 20.08.2024 |
SB2024082033 |
Showing elements 101 - 120 out of 618