Lucene search
K

3928 matches found

OSV
OSV
added 2025/10/23 12:31 p.m.1 views

GHSA-W29J-8PHW-FFJF Moodle has a time restriction bypass

An issue in Moodle's timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment...

5.4CVSS7AI score0.00041EPSS
Exploits0References6
OSV
OSV
added 2025/10/23 12:15 p.m.2 views

CVE-2025-62401

An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment...

4.3CVSS6.9AI score0.00041EPSS
Exploits0References2
NVD
NVD
added 2025/10/23 12:15 p.m.2 views

CVE-2025-62401

An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment...

5.4CVSS0.00041EPSS
Exploits0References2
Snyk
Snyk
added 2025/10/23 11:46 a.m.1 views

Improper Authorization

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Improper Authorization via the timed assignment feature. An attacker can gain unauthorized access to additional time for completing assessments by bypassing the intended time restriction. Remediatio...

5.4CVSS6.7AI score0.00041EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/23 11:29 a.m.3 views

EUVD-2025-35665

An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment...

5.4CVSS6.5AI score0.00041EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/10/23 9:13 a.m.3 views

CVE-2025-41109

Ghost Robotics Vision 60 v0.27.2 includes, among its physical interfaces, three RJ45 connectors and a USB Type-C port. The vulnerability is due to the lack of authentication mechanisms when establishing connections through these ports. Specifically, with regard to network connectivity, the robot'...

8.7CVSS7AI score0.00023EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/23 12:0 a.m.3 views

Moodle 安全漏洞

Moodle is a free e-learning software platform open-sourced by Moodle, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle that stems from a bypass issue with the timed assignment feature that could result...

5.4CVSS6.4AI score0.00041EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/10/23 12:0 a.m.3 views

AutomationDirect Productivity Suite 安全漏洞

AutomationDirect Productivity Suite is a programmable logic controller programming software from AutomationDirect, Inc. A security vulnerability exists in AutomationDirect Productivity Suite version 4.4.1.19, which stems from an improper assignment of critical resource permissions and could allow...

7.1CVSS6.9AI score0.00022EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/10/23 12:0 a.m.2 views

PT-2025-43449

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment. Recommendations At the...

5.4CVSS6.5AI score0.00041EPSS
Exploits0References20
NVD
NVD
added 2025/10/22 10:15 p.m.11 views

CVE-2025-62617

Admidio is an open-source user management solution. Prior to version 4.3.17, an authenticated SQL injection vulnerability exists in the member assignment data retrieval functionality of Admidio. Any authenticated user with permissions to assign members to a role such as an administrator can explo...

7.2CVSS0.00045EPSS
Exploits1References2
CVE
CVE
added 2025/10/22 9:19 p.m.14 views

CVE-2025-62617

CVE-2025-62617 affects Admidio, an open-source user management solution. Prior to version 4.3.17, an authenticated SQL injection exists in the member assignment data retrieval feature. The vulnerability arises from directly concatenating the GET parameter (notably filter_rol_uuid ) into a SQL con...

7.2CVSS7.8AI score0.00045EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2025/10/22 9:19 p.m.3 views

CVE-2025-62617 Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality

Admidio is an open-source user management solution. Prior to version 4.3.17, an authenticated SQL injection vulnerability exists in the member assignment data retrieval functionality of Admidio. Any authenticated user with permissions to assign members to a role such as an administrator can explo...

7.2CVSS8.2AI score0.00045EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/10/22 9:19 p.m.1 views

CVE-2025-62617 Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality

Admidio is an open-source user management solution. Prior to version 4.3.17, an authenticated SQL injection vulnerability exists in the member assignment data retrieval functionality of Admidio. Any authenticated user with permissions to assign members to a role such as an administrator can explo...

7.2CVSS7.8AI score0.00045EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/22 9:19 p.m.3 views

EUVD-2025-35595

Admidio is an open-source user management solution. Prior to version 4.3.17, an authenticated SQL injection vulnerability exists in the member assignment data retrieval functionality of Admidio. Any authenticated user with permissions to assign members to a role such as an administrator can explo...

7.2CVSS7.7AI score0.00045EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/10/22 9:19 p.m.8 views

CVE-2025-62617 Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality

Admidio is an open-source user management solution. Prior to version 4.3.17, an authenticated SQL injection vulnerability exists in the member assignment data retrieval functionality of Admidio. Any authenticated user with permissions to assign members to a role such as an administrator can explo...

7.2CVSS0.00045EPSS
Exploits1References2
Github Security Blog
Github Security Blog
added 2025/10/22 4:46 p.m.5 views

Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality

Summary An authenticated SQL injection vulnerability exists in the member assignment data retrieval functionality of Admidio. Any authenticated user with permissions to assign members to a role such as an administrator can exploit this vulnerability to execute arbitrary SQL commands. This can lea...

7.2CVSS8.1AI score0.00045EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2025/10/22 4:46 p.m.4 views

GHSA-2V5M-CQ9W-FC33 Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality

Summary An authenticated SQL injection vulnerability exists in the member assignment data retrieval functionality of Admidio. Any authenticated user with permissions to assign members to a role such as an administrator can exploit this vulnerability to execute arbitrary SQL commands. This can lea...

7.2CVSS8.1AI score0.00045EPSS
Exploits1References4
Snyk
Snyk
added 2025/10/22 4:46 p.m.2 views

SQL Injection

Overview admidio/admidio is a free open source user management system for websites of organizations and groups. Affected versions of this package are vulnerable to SQL Injection via the filterroluuid parameter in the membersassignmentdata.php process. An attacker can execute arbitrary SQL command...

8.6CVSS8.1AI score0.00045EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/22 3:31 p.m.3 views

EUVD-2025-35394

Incorrect Privilege Assignment vulnerability in bPlugins Voice Feedback voice-feedback allows Privilege Escalation.This issue affects Voice Feedback: from n/a through = 1.0.3...

6.5AI score0.0006EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/22 3:31 p.m.4 views

EUVD-2025-35430

Incorrect Privilege Assignment vulnerability in GoodLayers Goodlayers Core goodlayers-core allows Privilege Escalation.This issue affects Goodlayers Core: from n/a through 2.1.7...

6.5AI score0.00093EPSS
Exploits0References2
Rows per page
Query Builder