Medium
CVE-2015-8766
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filters
Medium
CVE-2015-8606
Silverstripe CMS XSS Vulnerability
Medium
CVE-2011-4289
Moodle does not recogniz configuration setting that makes e-mail addresses visible only to course members
Medium
CVE-2011-4284
Moodle allows remote attackers to obtain sensitive information from myprofile block by visiting user-context page
Medium
CVE-2011-4287
Moodle does not force password changes for autosubscribed users
Medium
CVE-2011-4279
Moodle does not use the forceloginforprofiles setting for course-profiles access control
Medium
CVE-2011-4300
Moodle does not properly restrict access to category and course data
Medium
CVE-2011-4283
Moodle allows remote attackers to obtain sensitive information
Low
CVE-2010-1617
Moodle doesn't properly check role
Medium
CVE-2012-2353
Moodle Exposes Sensitive User Information
Medium
CVE-2013-2082
Moodle does not enforce capability requirements for reading blog comments
Medium
CVE-2013-2081
Moodle does not consider "don't send" attributes during hub registration
Medium
CVE-2013-2083
Moodle is vulnerable to Improper Input Validation in MoodleQuickForm class
Low
CVE-2013-1835
Moodle's login_as feature leaks information from external repositories
Medium
CVE-2013-2080
Moodle is vulnerable to Sensitive Information Disclosure
Medium
CVE-2013-1836
Moodle does not properly manage privileges for WebDAV repositories
Medium
CVE-2013-1831
Moodle reveals absolute path in exception message
Medium
CVE-2013-1832
Moodle includes the WebDAV password in the configuration form
Medium
CVE-2013-1830
Moodle does not enforce the forceloginforprofiles setting
Medium
CVE-2013-4522
Moodle vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
Medium
CVE-2014-0216
Moodle does not properly restrict file access
Medium
CVE-2014-0217
Moodle does not check for the moodle/course:viewhiddencourses capability
Medium
CVE-2014-0127
Moodle's time-validation implementation allows bypassing intended restrictions
Medium
CVE-2014-0124
Moodle allows attackers to obtain sensitive information
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.