Moodle Multiple Vulnerabilities (MSA-25-0013, MSA-25-0018, MSA-25-0019, MSA-25-0020, MSA-25-0021, MSA-25-0022, MSA-25-0023, MSA-25-0024, MSA-25-0025, MSA-25-0026, MSA-25-0027, MSA-25-0028)

Moodle is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; ifdescription...

CVE-2025-3904

A vulnerability exists in the Sportsleague module for the Drupal content management system. The issue affects all versions of the module (. ). According to reports, the vulnerability stems from a problem with the project file that impacts usability, and it has been classified as an unauthenticate...

MAL-2025-3470 Malicious code in sincpro-logger (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3445 Malicious code in evm-validator (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3425 Malicious code in va-report-components (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3420 Malicious code in test5849912 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3418 Malicious code in tax-return-breakup (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3412 Malicious code in pdf-to-office (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3411 Malicious code in packageblueimp-file-upload (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3408 Malicious code in npm-test-lowerx3 (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in liquity2 (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3401 Malicious code in https-agen-chii (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-3354 Malicious code in @sporta-technology/d11-web-components.table-cells.tc-icon (npm)

--- -= Per source details. Do not edit below this line.=-...

GO-2025-3623 Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server

Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server...

GO-2025-3610 Mattermost vulnerable to Incorrect Implementation of Authentication Algorithm in github.com/mattermost/mattermost-server

Mattermost vulnerable to Incorrect Implementation of Authentication Algorithm in github.com/mattermost/mattermost-server...

GO-2025-3615 Kyverno vulnerable to SSRF via Service Calls in github.com/kyverno/kyverno

Kyverno vulnerable to SSRF via Service Calls in github.com/kyverno/kyverno...

GO-2025-3609 Mattermost Fails to Restrict Certain Operations on System Admins in github.com/mattermost/mattermost-server

Mattermost Fails to Restrict Certain Operations on System Admins in github.com/mattermost/mattermost-server...

GO-2025-3603 Query smuggling in ch-go library in github.com/ClickHouse/ch-go

Query smuggling in ch-go library in github.com/ClickHouse/ch-go...

GO-2025-3619 Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server

Mattermost Incorrect Authorization vulnerability in github.com/mattermost/mattermost-server...

CVE-2025-46246

CSRF in CM Answers plugin for WordPress (CVE-2025-46246) affects CM Answers versions up to 3.3.3. The issue enables cross-site request forgery via the CM Answers feature, potentially allowing an attacker to induce state-changing actions on behalf of an authenticated user. Public details come from...