Resumen de las últimas 20 vulnerabilidades


Ayuda Ayuda

Identificador
Título
Fabricante
Fecha

CCN-CERT-2502-35438
MSA-24-0047: Some users can delete audiences of other reports
Moodle
21-02-2025
CCN-CERT-2502-35439
MSA-25-0010: SQL injection risk in course search module list filter
Moodle
21-02-2025
CCN-CERT-2502-35440
MSA-25-0009: Teachers can evade trusttext config when restoring glossary entries
Moodle
21-02-2025
CCN-CERT-2502-35441
MSA-25-0008: IDOR in badges allows disabling of arbitrary badges
Moodle
21-02-2025
CCN-CERT-2502-35442
MSA-25-0007: Upgrade RequireJS including security fix (upstream)
Moodle
21-02-2025
CCN-CERT-2502-35443
MSA-25-0006: Reflected XSS via question bank filter
Moodle
21-02-2025
CCN-CERT-2502-35444
MSA-25-0005: Stored XSS risk in admin live log
Moodle
21-02-2025
CCN-CERT-2502-35445
MSA-25-0004: Stored XSS in ddimageortext question type
Moodle
21-02-2025
CCN-CERT-2502-35446
MSA-25-0003: Non-searchable tags can still be discovered on the tag search page and in the tags bl...
Moodle
21-02-2025
CCN-CERT-2502-35447
MSA-25-0002: Feedback response viewing and deletions did not respect Separate Groups mode
Moodle
21-02-2025
CCN-CERT-2502-35448
MSA-25-0001: Arbitrary file read risk through pdfTeX
Moodle
21-02-2025
CCN-CERT-2502-35449
MSA-24-0056: Potential denial of service risk due to guest sessions longer timeout period
Moodle
21-02-2025
CCN-CERT-2502-35450
MSA-24-0055: Reflected XSS in question bank filter
Moodle
21-02-2025
CCN-CERT-2502-35451
MSA-24-0054: Database activity issue in separate groups mode, for users not in a group
Moodle
21-02-2025
CCN-CERT-2502-35452
MSA-24-0053: Email change confirmation token available via preference
Moodle
21-02-2025
CCN-CERT-2502-35453
MSA-24-0052: Tag index page displays other users tagged with the selected tag
Moodle
21-02-2025
CCN-CERT-2502-35454
MSA-24-0051: Unprotected access to sensitive information via learning plan web service
Moodle
21-02-2025
CCN-CERT-2502-35455
MSA-24-0050: IDOR when fetching report schedules
Moodle
21-02-2025
CCN-CERT-2502-35456
MSA-24-0049: IDOR when accessing list of badge recipients
Moodle
21-02-2025
CCN-CERT-2502-35457
MSA-24-0048: IDOR when accessing list of course badges
Moodle
21-02-2025

Miembros de

CERT
FIRST
TF-CSIRT
EGC Group
UE
Red Nacional de SOC
Foro Nacional de Ciberseguridad
CSIRT.es
Ministerio de Defensa
CNI
CNI
CCN-CERT
CNI
CNI