Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
YUI Cross-site Scripting (XSS) vulnerability
YUI Cross-site Scripting (XSS) vulnerability
Moodle cross-site scripting (XSS) vulnerability
Moodle cross-site scripting (XSS) vulnerability
Moodle Reveals Student Information Meant To Be Anonymous
Moodle does not properly restrict file access
Moodle attackers to modify grade metadata
Moodle allows attackers to modify the visibility of a badge
Moodle does not check for the moodle/course:viewhiddencourses capability
Moodle's time-validation implementation allows bypassing intended restrictions
Moodle cross-site request forgery (CSRF) vulnerability
Moodle creates a MoodleMobile web-service token with an infinite lifetime
Moodle multiple cross-site request forgery (CSRF) vulnerabilities
Moodle places a session key in a URL
Moodle allows attackers to obtain sensitive information
Moodle allows bypass of intended access restrictions
Moodle does not properly restrict access
Moodle allows attackers to bypass intended access restrictions
Moodle sensitive information disclosure
Moodle does not set the RISK_XSS bit for graders
Moodle cross-site scripting (XSS) vulnerabilities
Moodle improper access control
Moodle allows attackers to read SCORM contents
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.