Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,642
Moodle CRLF Injection Vulnerability in Calendar Component
Moodle Users Can Bypass Deleted Status
Moodle Allows Unauthenticated Dropbox Access
Moodle does not enforce capability requirements for reading blog comments
Moodle does not consider "don't send" attributes during hub registration
Moodle is vulnerable to Improper Input Validation in MoodleQuickForm class
Moodle's login_as feature leaks information from external repositories
Moodle Multiple cross-site scripting (XSS) vulnerabilities in the File Picker module
Moodle Authentication Bypass in File Upload
Moodle is vulnerable to Sensitive Information Disclosure
Moodle does not properly manage privileges for WebDAV repositories
Moodle allows remote authenticated users to reassign notes
PHP Spellchecker addon for TinyMCE allows attackers to trigger arbitrary outbound HTTP requests
Moodle reveals absolute path in exception message
Moodle includes the WebDAV password in the configuration form
Moodle does not enforce the forceloginforprofiles setting
Moodle Arbitrary File Read via Backup Functionality
YUI Cross-site Scripting (XSS) vulnerability
Moodle vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
YUI Cross-site Scripting (XSS) vulnerability
YUI Cross-site Scripting (XSS) vulnerability
Moodle cross-site scripting (XSS) vulnerability
Moodle cross-site scripting (XSS) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.