Lucene search
+L

2204 matches found

OpenVAS
OpenVAS
added 2022/07/28 12:0 a.m.35 views

Fedora: Security Advisory for moodle (FEDORA-2022-81ce74b2dd)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS6.6AI score0.49335EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2022/07/28 12:0 a.m.29 views

Fedora: Security Advisory for moodle (FEDORA-2022-7e7ce7df2e)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS7AI score0.49335EPSS
SaveExploits1References2
Fedora
Fedora
added 2022/07/27 2:35 a.m.82 views

[SECURITY] Fedora 35 Update: moodle-3.11.8-1.fc35

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...

9.8CVSS6.8AI score0.49335EPSS
SaveExploits1
Fedora
Fedora
added 2022/07/27 2:24 a.m.60 views

[SECURITY] Fedora 36 Update: moodle-3.11.8-1.fc36

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...

9.8CVSS6.8AI score0.49335EPSS
SaveExploits1
OpenVAS
OpenVAS
added 2022/05/28 12:0 a.m.23 views

Fedora: Security Advisory for moodle (FEDORA-2022-89bfefbe48)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS7AI score0.05103EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2022/05/28 12:0 a.m.24 views

Fedora: Security Advisory for moodle (FEDORA-2022-bd4457bcc4)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS7AI score0.05103EPSS
SaveExploits1References2
Fedora
Fedora
added 2022/05/27 1:12 a.m.60 views

[SECURITY] Fedora 35 Update: moodle-3.11.7-1.fc35

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...

9.8CVSS5.6AI score0.05103EPSS
SaveExploits1
Fedora
Fedora
added 2022/05/27 1:10 a.m.43 views

[SECURITY] Fedora 36 Update: moodle-3.11.7-1.fc36

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...

9.8CVSS5.6AI score0.05103EPSS
SaveExploits1
Fedora
Fedora
added 2022/05/27 1:3 a.m.106 views

[SECURITY] Fedora 34 Update: moodle-3.11.7-1.fc34

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators create effective online learning communities...

9.8CVSS5.6AI score0.05103EPSS
SaveExploits1
ATTACKERKB
ATTACKERKB
added 2022/05/26 8:15 p.m.3 views

CVE-2022-29632

An arbitrary file upload vulnerability in the component /course/api/upload/pic of Roncoo Education v9.0.0 allows attackers to execute arbitrary code via a crafted file...

9.8CVSS6.2AI score0.17465EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/05/26 12:0 a.m.10 views

Roncoo Education 代码问题漏洞

Roncoo Education is an online education platform from China-based Roncoo. A security vulnerability exists in Roncoo Education version v9.0.0, which stems from an arbitrary file upload issue in the /course/api/upload/pic component. An attacker can exploit the vulnerability to execute arbitrary cod...

9.8CVSS8.8AI score0.17465EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2022/05/24 5:35 p.m.32 views

Moodle incorrect access control

A vulnerability was found in Moodle where users with "Log in as" capability in a course context typically, course managers may gain access to some site administration capabilities by "logging in as" a System manager. This affects 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 to 3.5.13 and earlier...

8.8CVSS6.7AI score0.01304EPSS
SaveExploits0References3Affected Software1
Redos
Redos
added 2022/05/24 12:0 a.m.64 views

ROS-20220524-04

The vulnerability in the Moodle course management system is due to a problem in the logic used to count of failed login attempts. Exploitation of the vulnerability could allow an attacker acting remotely to bypass the account lockout threshold. remotely to bypass the account lockout threshold A...

9.8CVSS7.3AI score0.05103EPSS
SaveExploits1
Github Security Blog
Github Security Blog
added 2022/05/17 2:44 a.m.20 views

Moodle Cross-Site Request Forgery (CSRF)

In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting...

4.3CVSS6.6AI score0.00518EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/05/17 2:44 a.m.17 views

GHSA-3HMR-948V-5QGQ Moodle Cross-Site Request Forgery (CSRF)

In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting...

4.3CVSS4.5AI score0.00518EPSS
SaveExploits0References3
OSV
OSV
added 2022/05/17 12:47 a.m.19 views

GHSA-GW95-48XQ-GQF9 Moodle sensitive information disclosure

In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access...

4.3CVSS5AI score0.00972EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2022/05/17 12:47 a.m.37 views

Moodle sensitive information disclosure

In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access...

4.3CVSS6.8AI score0.00972EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 3:22 a.m.30 views

Moodle Cross-site Scripting in the Course summary filter of the Add a new course

In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element...

5.4CVSS6.1AI score0.00816EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/05/14 3:22 a.m.20 views

GHSA-4M6V-X9FJ-847J Moodle Cross-site Scripting in the Course summary filter of the Add a new course

In Moodle 3.2.2+, there is XSS in the Course summary filter of the "Add a new course" page, as demonstrated by a crafted attribute of an SVG element...

5.4CVSS5.1AI score0.00816EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2022/05/13 1:47 a.m.29 views

Moodle Improper Privilege Management

In Moodle 3.x, course creators are able to change system default settings for courses...

6.5CVSS6.9AI score0.00874EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder