Known vulnerabilities in Moodle - page 8

Vendor: moodle.org
Software: Moodle
Software CPE: cpe:2.3:a:moodle_org:moodle:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 618
Public exploits: 26
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Moodle Moodle is affected by 618 known vulnerabilities: 29 high, 250 medium, 338 low Critical High Medium Low

Vulnerabilities (618)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89542 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34006
CWE-79 Low
No
No
4.1.10, 4.2.7, 4.3.4 15.05.2024 SB2024051524
#VU89541 - Cross-Site Request Forgery (CSRF)
CVE-2024-34007
CWE-352 Low
No
No
4.3.4 15.05.2024 SB2024051524
#VU89539 - Security Features
CVE-2024-33999
CWE-254 Medium
No
No
4.3.4 15.05.2024 SB2024051524
#VU89536 - Improper Access Control
CVE-2024-33996
CWE-284 Low
No
No
4.1.10, 4.2.7, 4.3.4 15.05.2024 SB2024051524
#VU89534 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-33997
CWE-79 Low
No
No
4.1.10, 4.2.7, 4.3.4 15.05.2024 SB2024051524
#VU89533 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-33998
CWE-79 Low
No
No
4.1.10, 4.2.7, 4.3.4 15.05.2024 SB2024051524
#VU89532 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2024-34004
CWE-98 Medium
No
No
4.1.10, 4.2.7, 4.3.4 15.05.2024 SB2024051524
#VU89530 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2024-34005
CWE-98 Medium
No
No
4.1.10, 4.2.7, 4.3.4 15.05.2024 SB2024051524
#VU89528 - Improper Access Control
CVE-2024-34009
CWE-284 High
No
No
4.3.4 15.05.2024 SB2024051524
#VU86750 - Resource exhaustion
CVE-2024-25978
CWE-400 Medium
No
No
4.1.9, 4.2.6, 4.3.3 23.02.2024 SB2024022309
SB2024022313
#VU86748 - Improper Handling of Parameters
CVE-2024-25979
CWE-233 Medium
No
No
4.1.9, 4.2.6, 4.3.3 23.02.2024 SB2024022309
SB2024022313
#VU86747 - Improper Access Control
CVE-2024-25980
CWE-284 Low
No
No
4.1.9, 4.2.6, 4.3.3 23.02.2024 SB2024022309
SB2024022313
#VU86741 - Improper Access Control
CVE-2024-25981
CWE-284 Low
No
No
4.1.9, 4.2.6, 4.3.3 23.02.2024 SB2024022309
SB2024022313
#VU86739 - Authorization Bypass Through User-Controlled Key
CVE-2024-25983
CWE-639 Low
No
No
4.1.9, 4.2.6, 4.3.3 23.02.2024 SB2024022309
SB2024022313
#VU86738 - Cross-Site Request Forgery (CSRF)
CVE-2024-25982
CWE-352 Low
No
No
4.1.9, 4.2.6, 4.3.3 23.02.2024 SB2024022309
SB2024022313
#VU84629 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-6661
CWE-94 Medium
No
No
3.9.25, 3.11.18, 4.0.12, 4.1.7, 4.2.4, 4.3.1 21.12.2023 SB2023122113
#VU84628 - Improper input validation
CVE-2023-6662
CWE-20 Medium
No
No
3.9.25, 3.11.18, 4.0.12, 4.1.7, 4.2.4, 4.3.1 21.12.2023 SB2023122113
#VU84627 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-6663
CWE-94 Medium
No
No
3.9.25, 3.11.18, 4.0.12, 4.1.7, 4.2.4, 4.3.1 21.12.2023 SB2023122113
#VU84626 - Exposure of sensitive information to an unauthorized actor
CVE-2023-6664
CWE-200 Medium
No
No
3.9.25, 3.11.18, 4.0.12, 4.1.7, 4.2.4, 4.3.1 21.12.2023 SB2023122113
#VU84620 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-6670
CWE-79 Low
No
No
4.2.4, 4.3.1 21.12.2023 SB2023122113


Showing elements 141 - 160 out of 618