Medium
CVE-2019-3808
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 437
Reset filters
High
CVE-2018-10891
Moodle XSS Vulnerability
Medium
CVE-2011-4289
Moodle does not recogniz configuration setting that makes e-mail addresses visible only to course members
Medium
CVE-2011-4292
Moodle allows remote authenticated users to cause a denial of service (invalid database records)
Medium
CVE-2011-4291
Moodle allows remote authenticated users to cause a denial of service (invalid database records)
Medium
CVE-2011-4284
Moodle allows remote attackers to obtain sensitive information from myprofile block by visiting user-context page
Low
CVE-2011-4282
Moodle vulnerable to Cross-site Scripting
Medium
CVE-2011-4287
Moodle does not force password changes for autosubscribed users
Medium
CVE-2011-4285
Moodle Incorrect Default Settings
Medium
CVE-2011-4280
Moodle vulnerable to XSS via bundled spikephpcoverage library
Medium
CVE-2011-4281
Moodle vulnerable to Cross-Site Request Forgery
Medium
CVE-2011-4279
Moodle does not use the forceloginforprofiles setting for course-profiles access control
Medium
CVE-2011-4297
Moodle does not properly restrict comment capabilities
Low
CVE-2011-4299
Moodle vulnerable to Cross-Site Scripting
Medium
CVE-2011-4582
Moodle Open Redirect in Calendar Set Page
Medium
CVE-2011-4300
Moodle does not properly restrict access to category and course data
Medium
CVE-2011-4298
Moodle vulnerable to Cross-Site Request Forgery
Medium
CVE-2011-4293
Moodle Double-Caches Content, Potentially Writing to a File System's Tmp Directory
Medium
CVE-2011-4306
Moodle XSS Vulnerability
Medium
CVE-2011-4301
Moodle Allows Modification of Constants
Medium
CVE-2011-4294
Moodle Open Redirect Via Error Messages
Medium
CVE-2011-4286
Moodle vulnerable to Cross-site Scripting
Medium
CVE-2011-4283
Moodle allows remote attackers to obtain sensitive information
High
CVE-2010-1615
Moodle vulnerable to SQL injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.