Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5The default configuration of Moodle 2.0.x before 2.0.2 has an incorrect setting of the moodle/course:delete capability, which allows remote authenticated users to dele…Check if you run itEPSS 1.91%Jul 16, 2012
- Medium5.0Moodle 2.0.x before 2.0.2 allows remote attackers to obtain sensitive information from a myprofile (aka My profile) block by visiting a user-context page.Check if you run itEPSS 2.12%Jul 16, 2012
- Medium5.0Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 places an IMS enterprise enrolment file in the course-files area, which allows remote attackers to obtain sensitive i…Check if you run itEPSS 2.12%Jul 16, 2012
- Medium4.3Multiple cross-site scripting (XSS) vulnerabilities in the course-tags functionality in tag/coursetags_more.php in Moodle 2.0.x before 2.0.2 allow remote attackers to…Check if you run itEPSS 1.83%Jul 16, 2012
- Medium6.8Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers to hijack the authentication of arbitrary users for requ…Check if you run itEPSS 1.01%Jul 16, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the Spike PHPCoverage (aka spikephpcoverage) library, as used in Moodle 2.0.x before 2.0.2 and other products, allows remot…Check if you run itEPSS 3.62%Jul 16, 2012
- Medium5.0Moodle 2.0.x before 2.0.2 does not use the forceloginforprofiles setting for course-profiles access control, which makes it easier for remote attackers to obtain poten…Check if you run itEPSS 1.40%Jul 16, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in the tag autocomplete functionality in Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 allows remote attackers to inject a…Check if you run itEPSS 1.83%Jul 16, 2012
- Medium6.8Cross-site request forgery (CSRF) vulnerability in Moodle 1.9.x before 1.9.11 allows remote attackers to hijack the authentication of unspecified victims for requests…Check if you run itEPSS 1.01%Jul 16, 2012
- Medium5.0Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to bypass intended access restrictions and perform global searches by leveraging the guest rol…Check if you run itEPSS 1.43%Jul 11, 2012
- Medium4.0mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated users to discover the names of other users via…Check if you run itEPSS 1.67%Jul 11, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in mod/wiki/lang/en/wiki.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to inject arbitrary w…Check if you run itEPSS 1.19%Jul 11, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in course/editsection.html in Moodle 1.9.x before 1.9.14 allows remote authenticated users to inject arbitrary web script or H…Check if you run itEPSS 1.83%Jul 11, 2012
- Medium4.0message/refresh.php in Moodle 1.9.x before 1.9.14 allows remote authenticated users to cause a denial of service (infinite request loop) via a URL that specifies a zer…Check if you run itEPSS 1.92%Jul 11, 2012
- Medium4.0The chat functionality in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to discover the name of any user via a beep operation.Check if you run itEPSS 1.72%Jul 11, 2012
- Medium4.3lib/db/upgrade.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not set the correct registration_hubs.secret value during installation, which allows remote…Check if you run itEPSS 1.25%Jul 11, 2012
- Medium6.8mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of the openssl_veri…Check if you run itEPSS 1.28%Jul 11, 2012
- Medium5.0The MoodleQuickForm class in the Forms Library in lib/formslib.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not recognize Forms A…Check if you run itEPSS 2.10%Jul 11, 2012
- Medium5.0The file_browser component in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not properly restrict access to category and course data, which allows remote attac…Check if you run itEPSS 2.12%Jul 11, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in mod/wiki/pagelib.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to inject arbitr…Check if you run itEPSS 1.19%Jul 11, 2012
- Medium6.8Multiple cross-site request forgery (CSRF) vulnerabilities in mod/wiki/ components in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allow remote attackers to hijack…Check if you run itEPSS 1.01%Jul 11, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gol…Check this weekEPSS 23.08%Jul 10, 2012
- Medium6.8Open redirect vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 allows remote attackers to redirect users to arbitrary web sites and conduct phishin…Check this weekEPSS 10.76%Jul 10, 2012
- Medium4.3Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and S…Check this weekEPSS 15.41%Jul 10, 2012
- Medium5.5Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not properly check permissions for s…Check this weekEPSS 12.24%Jul 10, 2012
Sort