CVE-2017-2576

In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums...

CVE-2017-2576

In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums...

Code injection

In Moodle 3.x, glossary search displays entries without checking user permissions to view them...

Design/Logic Flaw

In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam...

CVE-2016-5013

In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam...

CVE-2017-2576

In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums...

CVE-2016-8644

In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context...

CVE-2016-5012

In Moodle 3.x, glossary search displays entries without checking user permissions to view them...

CVE-2016-5012

In Moodle 3.x, glossary search displays entries without checking user permissions to view them...

Code injection

In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context...

CVE-2017-2578

In Moodle 3.x, there is XSS in the assignment submission page...

CVE-2017-2578

In Moodle 3.x, there is XSS in the assignment submission page...

Code injection

In Moodle 3.x, there is XSS in the assignment submission page...

CVE-2016-5013

In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam...

Code injection

In Moodle 2.x and 3.x, the question engine allows access to files that should not be available...

Default credentials

In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed...

CVE-2016-5012

CVE-2016-5012: In Moodle 3.x, the glossary search function does not enforce view-permission checks, allowing exposure of glossary entries to users who should not see them. Multiple sources (SUITE/SUSE advisory, GHSA) corroborate the same issue under the Moodle glossary search behavior. No exploit...

CVE-2017-2578

In Moodle 3.x, there is XSS in the assignment submission page...

CVE-2016-5012

In Moodle 3.x, glossary search displays entries without checking user permissions to view them...

CVE-2015-5706

Use-after-free vulnerability in the pathopenat function in fs/namei.c in the Linux kernel 3.x and 4.x before 4.0.4 allows local users to cause a denial of service or possibly have unspecified other impact via OTMPFILE filesystem operations that leverage a duplicate cleanup operation...