Medium
CVE-2025-3985
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2025-3986
Apereo CAS has inefficient regular expression complexity
Low
CVE-2025-3984
Apereo CAS code injection vulnerability
Low
CVE-2025-46653
Formidable relies on hexoid to prevent guessing of filenames for untrusted executable content
High
CVE-2025-2101
Edumall <= 4.2.4 - Unauthenticated Local File Inclusion
High
CVE-2025-2105
Jupiter X Core <= 4.8.11 - Unauthenticated PHP Object Injection via PHAR
High
CVE-2025-3491
Add custom page template <= 2.0.1 - Authenticated (Administrator+) PHP Code Injection to Remote Code Execution
High
CVE-2025-3906
Integração entre Eduzz e Woocommerce 1.5.0 - 1.7.5 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-3647
Moodle allows IDOR when accessing the cohorts report
Low
CVE-2025-3637
Moodle's mod_data edit/delete pages pass CSRF token in GET parameter
Medium
CVE-2025-3645
Moodle has an IDOR in messaging web service which allows access to some user details
Medium
CVE-2025-3640
Moodle has an IDOR in web service which allows users enrolled in a course to access some details of other users
High
CVE-2025-3642
Moodle has an authenticated remote code execution risk in the Moodle LMS EQUELLA repository
Medium
CVE-2025-3644
Moodle's AJAX section delete does not respect course_can_delete_section()
High
CVE-2025-3641
Moodle has an authenticated remote code execution risk in the Moodle LMS Dropbox repository
Medium
CVE-2025-3643
Moodle has reflected Cross-site Scripting risk in policy tool
Medium
CVE-2025-3636
Moodle allows IDOR in RSS block, which allows access to additional RSS feeds
Low
CVE-2025-3635
Moodle has a CSRF risk in user tours manager that allows tour duplication
Low
CVE-2025-3638
Moodle has a CSRF risk in Brickfield tool's analysis request action
Medium
CVE-2025-3628
Moodle reveals student identities through assignment submissions search on anonymous submissions
Medium
CVE-2025-3627
Moodle makes some user data available before completing second factor with MFA enabled
Medium
CVE-2025-32045
Moodle shows hidden grades to users without permission on some grade reports
High
CVE-2025-32044
Moodle allows unauthenticated REST API user data exposure
Medium
CVE-2025-3634
Moodle self enrollment available before completing second factor with MFA enabled
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.