Resumen de las últimas 20 vulnerabilidades


Ayuda Ayuda

Identificador
Título
Fabricante
Fecha

CCN-CERT-2507-35706
MSA-25-0035: Missing authorisation checks in BigBlueButton view page
Moodle
16-07-2025
CCN-CERT-2507-35707
MSA-25-0034: CSRF risk in badges backpack management
Moodle
16-07-2025
CCN-CERT-2507-35708
MSA-25-0033: Course visibility not honoured consistently
Moodle
16-07-2025
CCN-CERT-2507-35709
MSA-25-0032: SSRF risk via DNS rebind
Moodle
16-07-2025
CCN-CERT-2507-35710
MSA-25-0031: Upgrade ADOdb including security fix (upstream)
Moodle
16-07-2025
CCN-CERT-2507-35711
MSA-25-0030: Password can be revealed in login page after log out due to caching
Moodle
16-07-2025
CCN-CERT-2507-35712
MSA-25-0029: XSS risk in MathJax (safe extension not loaded)
Moodle
16-07-2025
CCN-CERT-2507-35713
MSA-25-0028: IDOR when accessing the cohorts report
Moodle
16-07-2025
CCN-CERT-2507-35714
MSA-25-0027: IDOR in messaging web service allows access to some user details
Moodle
16-07-2025
CCN-CERT-2507-35715
MSA-25-0026: AJAX section delete does not respect course_can_delete_section()
Moodle
16-07-2025
CCN-CERT-2507-35716
MSA-25-0025: Reflected XSS risk in policy tool
Moodle
16-07-2025
CCN-CERT-2507-35717
MSA-25-0024: Authenticated remote code execution risk in the Moodle LMS EQUELLA repository
Moodle
16-07-2025
CCN-CERT-2507-35718
MSA-25-0023: Authenticated remote code execution risk in the Moodle LMS Dropbox repository
Moodle
16-07-2025
CCN-CERT-2507-35719
MSA-25-0022: IDOR in web service allows users enrolled in a course to access some details of other...
Moodle
16-07-2025
CCN-CERT-2507-35720
MSA-25-0021: CSRF risk in Brickfield tools analysis request action
Moodle
16-07-2025
CCN-CERT-2507-35721
MSA-25-0020: mod_data edit/delete pages pass CSRF token in GET parameter
Moodle
16-07-2025
CCN-CERT-2507-35722
MSA-25-0019: IDOR in RSS block allows access to additional RSS feeds
Moodle
16-07-2025
CCN-CERT-2507-35723
MSA-25-0018: CSRF risk in user tours manager allows tour duplication
Moodle
16-07-2025
CCN-CERT-2507-35724
MSA-25-0017: Self enrolment available before completing second factor with MFA enabled
Moodle
16-07-2025
CCN-CERT-2507-35725
VMware vDefend Sessions at Explore 2025
Vmware
16-07-2025

Miembros de

CERT
FIRST
TF-CSIRT
EGC Group
UE
Red Nacional de SOC
Foro Nacional de Ciberseguridad
CSIRT.es
Ministerio de Defensa
CNI
CNI
CCN-CERT
CNI
CNI