moodle

629 tracked vulnerabilities.

CVE-2013-4938
Moodle Information Disclosure via LTI Mod_Form Settings
Jul 29, 2013
EPSS 0.00
CVE-2013-2246
Moodle <= 2.1.10, 2.2.x < 2.2.11, 2.3.x < 2.3.8, 2.4.x < 2.4.5, 2.5.x < 2.5.1 - Authenticated Information Disclosure
Jul 29, 2013
EPSS 0.00
CVE-2013-2245
Moodle <= 2.1.10, 2.2.x < 2.2.11, 2.3.x < 2.3.8, 2.4.x < 2.4.5, 2.5.x < 2.5.1 - Information Disclosure
Jul 29, 2013
EPSS 0.00
CVE-2013-2244
Moodle 2.4.x < 2.4.5 and 2.5.x < 2.5.1 - Cross-Site Scripting via Conditional Access Rule Value
Jul 29, 2013
EPSS 0.00
CVE-2013-2243
Moodle <= 2.2.11, 2.3.x < 2.3.8, 2.4.x < 2.4.5, 2.5.x < 2.5.1 - Sensitive Answer Information Exposure
Jul 29, 2013
EPSS 0.00
CVE-2013-2242
Moodle < 2.1.10, 2.2.x < 2.2.11, 2.3.x < 2.3.8, 2.4.x < 2.4.5, 2.5.x < 2.5.1 - Chat Module Access Control Bypass
Jul 29, 2013
EPSS 0.00
CVE-2013-2083
Moodle < 2.2.10 - Improper Input Validation in MoodleQuickForm
May 25, 2013
EPSS 0.00
CVE-2013-2082
Moodle < 2.2.10 - Unauthenticated Sensitive Information Exposure via Blog Comments
May 25, 2013
EPSS 0.01
CVE-2013-2081
Moodle < 2.2.10 - Information Disclosure via Hub Registration Form Data
May 25, 2013
EPSS 0.00
CVE-2013-2080
Moodle < 2.3.7 - Authenticated Information Disclosure via Gradebook Overview Report
May 25, 2013
EPSS 0.00
CVE-2013-2079
Moodle 2.3.x-2.3.7 and 2.4.x-2.4.4 - Authenticated Arbitrary Assignment Access via ZIP Download
May 25, 2013
EPSS 0.00
CVE-2013-1836
Moodle 2.0.0-2.1.10, 2.2.0-2.2.7, 2.3.0-2.3.4, 2.4.0-2.4.1 - Authenticated Arbitrary Repository Access via WebDAV
Mar 25, 2013
EPSS 0.01
CVE-2013-1835
Moodle 2.0.0-2.1.10, 2.2.0-2.2.7, 2.3.0-2.3.4, 2.4.0-2.4.1 - Sensitive Information Exposure via Login-As
Mar 25, 2013
EPSS 0.00
CVE-2013-1834
Moodle 1.9.x-1.9.19, 2.x-2.1.10, 2.2.x-2.2.7, 2.3.x-2.3.4, 2.4.x-2.4.1 - Authenticated Note Reassignment
Mar 25, 2013
EPSS 0.00
CVE-2013-1833
Moodle 2.0.0-2.1.10, 2.2.0-2.2.7, 2.3.0-2.3.4, 2.4.0-2.4.1 - Authenticated Cross-Site Scripting via File Picker Filename
Mar 25, 2013
EPSS 0.00
CVE-2013-1832
Moodle 2.0.0-2.4.1 - Authenticated Sensitive Information Exposure via WebDAV
Mar 25, 2013
EPSS 0.00
CVE-2013-1831
Moodle <= 2.1.10, 2.2.x < 2.2.8, 2.3.x < 2.3.5, 2.4.x < 2.4.2 - Sensitive Information Exposure
Mar 25, 2013
EPSS 0.00
CVE-2013-1830
Moodle < 2.1.10, 2.2.x < 2.2.8, 2.3.x < 2.3.5, 2.4.x < 2.4.2 - Sensitive Information Exposure
Mar 25, 2013
EPSS 0.00
CVE-2013-1829
Moodle 2.4.x - Authenticated Exposure of Sensitive Information via Calendar Subscription Display
Mar 25, 2013
EPSS 0.00
CVE-2012-1170 HIGH
Moodle <2.2.2 - Privilege Escalation
Nov 14, 2019
CVSS 7.5
EPSS 0.00
CVE-2012-1169 MEDIUM
Moodle < 2.2.2 - Unauthorized Personal Information Exposure via Page Breadcrumbs
Nov 14, 2019
CVSS 5.3
EPSS 0.01
CVE-2012-1161 MEDIUM
Moodle < 2.2.2 - Unauthorized Course Information Exposure via Tag Search
Nov 14, 2019
CVSS 4.3
EPSS 0.01
CVE-2012-1160 LOW
Moodle < 2.2.2 - Unauthenticated Forum Subscription Permission Bypass via mod/forum/index.php
Nov 14, 2019
CVSS 2.7
EPSS 0.01
CVE-2012-1159 MEDIUM
Moodle < 2.2.2 - Unauthorized Exposure of Hidden Courses via Overview Report
Nov 14, 2019
CVSS 4.3
EPSS 0.01
CVE-2012-1158 MEDIUM
Moodle < 2.2.2 - Unauthorized Exposure of Hidden Grade Items in Gradebook Export
Nov 14, 2019
CVSS 4.3
EPSS 0.01