Known vulnerabilities in Moodle - page 7

Vendor: moodle.org
Software: Moodle
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 618
Public exploits: 26
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Moodle Moodle is affected by 618 known vulnerabilities: 29 high, 250 medium, 338 low Critical High Medium Low

Vulnerabilities (618)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96248 - Improper Access Control
CVE-2024-43430
CWE-284 Medium
No
No
4.4.2 20.08.2024 SB2024082033
#VU96245 - Improper Access Control
CVE-2024-43431
CWE-284 Medium
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96239 - Exposure of sensitive information to an unauthorized actor
CVE-2024-43432
CWE-200 Medium
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96238 - Improper Access Control
CVE-2024-43433
CWE-284 Low
No
No
4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96237 - Cross-Site Request Forgery (CSRF)
CVE-2024-43434
CWE-352 Low
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96236 - Permissions, Privileges, and Access Controls
CVE-2024-43435
CWE-264 Medium
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96235 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-43436
CWE-89 Low
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96232 - Improper Access Control
CVE-2024-43438
CWE-284 Medium
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96228 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-43440
CWE-94 High
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU96226 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43437
CWE-79 Low
No
No
4.1.12, 4.2.9, 4.3.6, 4.4.2 20.08.2024 SB2024082033
#VU92252 - Exposure of sensitive information to an unauthorized actor
CVE-2024-38273
CWE-200 Medium
No
No
4.1.11, 4.2.8, 4.3.5, 4.4.1 19.06.2024 SB2024061940
SB2024061945
SB2024061946
#VU92250 - Improper Access Control
CVE-2024-38277
CWE-284 Medium
No
No
4.1.11, 4.2.8, 4.3.5, 4.4.1 19.06.2024 SB2024061940
SB2024061945
SB2024061946
#VU92246 - Exposure of sensitive information to an unauthorized actor
CVE-2024-38275
CWE-200 Low
No
No
4.1.11, 4.2.8, 4.3.5, 4.4.1 19.06.2024 SB2024061940
#VU92241 - Cross-Site Request Forgery (CSRF)
CVE-2024-38276
CWE-352 Low
No
No
4.1.11, 4.2.8, 4.3.5, 4.4.1 19.06.2024 SB2024061940
SB2024061945
SB2024061946
#VU92229 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-38274
CWE-79 Low
No
No
4.1.11, 4.2.8, 4.3.5, 4.4.1 19.06.2024 SB2024061940
SB2024061945
SB2024061946
#VU89546 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34000
CWE-79 Low
No
No
4.1.10, 4.2.7, 4.3.4 15.05.2024 SB2024051524
#VU89545 - Cross-Site Request Forgery (CSRF)
CVE-2024-34001
CWE-352 Low
No
No
4.1.10, 4.2.7, 4.3.4 15.05.2024 SB2024051524
#VU89544 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2024-34002
CWE-98 Medium
No
No
4.1.10, 4.2.7, 4.3.4 15.05.2024 SB2024051524
#VU89543 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2024-34003
CWE-98 Medium
No
No
4.1.10, 4.2.7, 4.3.4 15.05.2024 SB2024051524
#VU89527 - Cross-Site Request Forgery (CSRF)
CVE-2024-34008
CWE-352 Low
No
No
4.1.10, 4.2.7, 4.3.4 15.05.2024 SB2024051524


Showing elements 121 - 140 out of 618