İçeriğe atla
Noroxi

Moodle kayıtları

moodle üreticisine ait 631 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
5 · %0,8
Pre-auth RCE
26
Düzeltme kaydı olan
%74,8
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

631 kayıt
  • CVE-2024-43425
    58Planlayın

    Moodle: remote code execution via calculated question types

    YüksekCVSS 8,1SilahlaştırılmışEPSS %88

    moodle · moodle7 Kas 2024

  • CVE-2021-36393
    55Planlayın

    In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses.

    KritikCVSS 9,8Kavram kanıtıEPSS %52

    moodle · moodle6 Mar 2023

  • CVE-2022-0332
    52Planlayın

    A flaw was found in Moodle in versions 3.11 to 3.11.4.

    KritikCVSS 9,8Kavram kanıtıEPSS %45

    moodle · moodle25 Oca 2022

  • CVE-2022-35650
    45Planlayın

    The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions.

    YüksekCVSS 7,5Kavram kanıtıEPSS %49

    moodle · moodle25 Tem 2022

  • CVE-2018-1133
    45Planlayın

    An issue was discovered in Moodle 3.x.

    YüksekCVSS 8,8Kavram kanıtıEPSS %32

    moodle · moodle25 May 2018

  • CVE-2021-21809
    43Planlayın

    A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10.

    KritikCVSS 9,1SilahlaştırılmışEPSS %24

    moodle · moodle23 Haz 2021

  • CVE-2017-2641
    43Planlayın

    In Moodle 2.x and 3.x, SQL injection can occur via user preferences.

    KritikCVSS 9,8Kavram kanıtıEPSS %15

    moodle · moodle26 Mar 2017

  • CVE-2022-35649
    42Planlayın

    The vulnerability was found in Moodle, occurs due to improper input validation when parsing PostScript code.

    KritikCVSS 9,8Kavram kanıtıEPSS %9

    moodle · moodle25 Tem 2022

  • CVE-2021-36394
    41Planlayın

    In Moodle, a remote code execution risk was identified in the Shibboleth authentication plugin.

    KritikCVSS 9,8Kavram kanıtıEPSS %7

    moodle · moodle6 Mar 2023

  • CVE-2022-30600
    41Planlayın

    A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold being bypassed.

    KritikCVSS 9,8Kavram kanıtıEPSS %5

    moodle · moodle18 May 2022

  • CVE-2004-2233
    41Planlayın

    Unknown "front page vulnerability with Moodle servers" for Moodle before 1.3.2 has unknown impact and attack vectors.

    KritikCVSS 10,0İstismar yokEPSS %2

    moodle · moodle31 Ara 2004

  • CVE-2004-2237
    41Planlayın

    Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to "strings in Moodle texts."

    KritikCVSS 10,0İstismar yokEPSS %2

    moodle · moodle31 Ara 2004

  • CVE-2020-14321
    40Planlayın

    In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course.

    YüksekCVSS 8,8SilahlaştırılmışEPSS %16

    moodle · moodle16 Ağu 2022

  • CVE-2021-3943
    40Planlayın

    A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions.

    KritikCVSS 9,8İstismar yokEPSS %2

    moodle · moodle22 Kas 2021

  • CVE-2022-40314
    40Planlayın

    A remote code execution risk when restoring backup files originating from Moodle 1.9 was identified.

    KritikCVSS 9,8İstismar yokEPSS %2

    moodle · moodle30 Eyl 2022

  • CVE-2005-2247
    40Planlayın

    Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors.

    KritikCVSS 10,0İstismar yokEPSS %2

    moodle · moodle12 Tem 2005

  • CVE-2006-4936
    40Planlayın

    Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and

    KritikCVSS 10,0İstismar yokEPSS %1

    moodle · moodle22 Eyl 2006

  • CVE-2006-4935
    40Planlayın

    The Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has unspecified impact and remote attack vectors.

    KritikCVSS 10,0İstismar yokEPSS %1

    moodle · moodle22 Eyl 2006

  • CVE-2004-2236
    40Planlayın

    Unknown vulnerability in Moodle before 1.3.3 has unknown impact and attack vectors, related to language setting.

    KritikCVSS 10,0İstismar yokEPSS %1

    moodle · moodle31 Ara 2004

  • CVE-2004-2235
    40Planlayın

    Unknown vulnerability in Moodle before 1.2 has unknown impact and attack vectors, related to improper filtering of text.

    KritikCVSS 10,0İstismar yokEPSS %1

    moodle · moodle31 Ara 2004

  • CVE-2019-3809
    40Planlayın

    A flaw was found in Moodle versions 3.1 to 3.1.15 and earlier unsupported versions.

    KritikCVSS 10,0İstismar yokEPSS %1

    moodle · moodle25 Mar 2019

  • CVE-2022-30599
    39İzleyin

    A flaw was found in moodle where an SQL injection risk was identified in Badges code relating to configuring criteria.

    KritikCVSS 9,8İstismar yokEPSS %1

    moodle · moodle18 May 2022

  • CVE-2023-5550
    39İzleyin

    Moodle: rce due to lfi risk in some misconfigured shared hosting environments

    KritikCVSS 9,8İstismar yokEPSS %1

    moodle · moodle9 Kas 2023

  • CVE-2023-28333
    39İzleyin

    Moodle: pix helper potential mustache code injection risk

    KritikCVSS 9,8İstismar yokEPSS %1

    moodle · moodle23 Mar 2023

  • CVE-2022-40315
    39İzleyin

    A limited SQL injection risk was identified in the "browse list of users" site administration page.

    KritikCVSS 9,8İstismar yokEPSS %1

    moodle · moodle30 Eyl 2022