Media
CVE-2024-45690
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 437
Restablecer filtros
Media
CVE-2024-48901
moodle: IDOR when fetching report schedules
Media
CVE-2024-48897
moodle: IDOR in edit/delete RSS feed
Media
CVE-2024-48896
Moodle leaks user names
Media
CVE-2024-48898
moodle: Some users can delete audiences of other reports
Media
CVE-2024-48900
Moodle IDOR when accessing list of badge recipients
Media
CVE-2024-43439
Moodle reflected XSS via H5P error message
Baja
CVE-2024-43437
Moodle Cross-site Scripting vulnerability
Baja
CVE-2024-43430
Moodle has insufficient access control
Baja
CVE-2024-43432
Moodle authorization headers preserved between "emulated redirects"
Baja
CVE-2024-43435
Moodle has insufficient capability checks
Baja
CVE-2024-43427
Moodle admin presets export tool includes some secrets that should not be exported
Baja
CVE-2024-43433
Moodle's user/power level management inconsistent with suspended users
Baja
CVE-2024-43429
Moodle has user information visibility control issues in gradebook reports
Media
CVE-2024-43436
Moodle vulnerable to site administration SQL injection via XMLDB editor
Media
CVE-2024-43438
Moodle's IDOR in Feedback non-respondents report allows messaging arbitrary site users
Media
CVE-2024-43426
Moodle has arbitrary file read risk through pdfTeX
Media
CVE-2024-43440
Moodle LFI vulnerability when restoring malformed block backups
Alta
CVE-2024-43425
Moodle Remote Code Execution vulnerability
Media
CVE-2024-43428
Moodle vulnerable to cache poisoning via injection into storage
Media
CVE-2024-43431
Moodle's IDOR in badges allows deletion of arbitrary badges
Alta
CVE-2024-43434
Moodle has CSRF risk in Feedback non-respondents report
Media
CVE-2024-38277
Moodle uses the same key for QR login and auto-login
Media
CVE-2024-38273
Moodle BigBlueButton web service leaks meeting joining information
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.