Lucene search
K

7 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/05 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2024-43435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the glob...

5.3CVSS5.3AI score0.00336EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2024/11/11 3:31 p.m.13 views

Moodle has insufficient capability checks

A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary...

5.3CVSS6.5AI score0.00336EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2024/11/11 3:31 p.m.8 views

GHSA-4GQ2-X5W4-7HP8 Moodle has insufficient capability checks

A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary...

6.9CVSS5.4AI score0.00336EPSS
Exploits0References5
NVD
NVD
added 2024/11/11 1:15 p.m.10 views

CVE-2024-43435

A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary...

5.3CVSS0.00336EPSS
Exploits0References2
Snyk
Snyk
added 2024/11/11 12:47 p.m.1 views

Improper Privilege Management

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Improper Privilege Management due to insufficient capability checks in the process of restoring glossaries which allows an attacker to restore glossaries in courses into the global site glossary...

6.9CVSS6.7AI score0.00336EPSS
Exploits0References2
OSV
OSV
added 2022/05/24 4:52 p.m.15 views

GHSA-2MG9-HV69-897X Moodle Ability to delete glossary entries that belong to another glossary

A flaw was found in moodle before versions 3.7.1, 3.6.5, 3.5.7. Users with permission to delete entries from a glossary were able to delete entries from other glossaries they did not have direct access to...

4.3CVSS4.6AI score0.00888EPSS
Exploits0References5
CNVD
CNVD
added 2017/02/21 12:0 a.m.1 views

eParakstitajs and eParaksts XML External Entity Injection Vulnerabilities

e-Me eParakstitajs is a software developed by AIT Microsoft Glossaries Team in the category Miscellaneous Shareware. An XML External Entity Injection vulnerability exists in eParakstitajs and eParaksts. An attacker could exploit this vulnerability to obtain sensitive information or cause a denial...

7.8CVSS6.9AI score0.01712EPSS
Exploits0References1
Rows per page
Query Builder