Resumen de las últimas 20 vulnerabilidades


Ayuda Ayuda

Identificador
Título
Fabricante
Fecha

CCN-CERT-2310-34781
MSA-23-0031: Authenticated remote code execution risk in Lesson
Moodle
19-10-2023
CCN-CERT-2310-34782
MSA-23-0030: Quiz sequential navigation bypass possible
Moodle
19-10-2023
CCN-CERT-2310-34783
MSA-23-0029: Competency framework tools are not restricted as intended
Moodle
19-10-2023
CCN-CERT-2310-34784
MSA-23-0028: Open redirect risk on admin view all policies page
Moodle
19-10-2023
CCN-CERT-2310-34785
MSA-23-0027: JQuery UI library upgraded to 1.13.2 (upstream)
Moodle
19-10-2023
CCN-CERT-2310-34786
MSA-23-0026: IDOR in message processor fragments allows fetching of other users data
Moodle
19-10-2023
CCN-CERT-2310-34787
MSA-23-0025: phpCAS library upgraded to 1.6.0 (upstream)
Moodle
19-10-2023
CCN-CERT-2310-34788
MSA-23-0024: Private course participant data available from external grade report method
Moodle
19-10-2023
CCN-CERT-2310-34750
Oracle Critical Patch Update Advisory - October 2023
Oracle
18-10-2023
CCN-CERT-2310-34751
K000137211 : cURL vulnerabilities CVE-2023-38546
F5
18-10-2023
CCN-CERT-2310-34752
K000137257 : cURL vulnerabilities CVE-2023-38545
F5
18-10-2023
CCN-CERT-2310-34753
MSA-23-0043: Forum summary report shows students from other groups when in Separate Groups mode
Moodle
18-10-2023
CCN-CERT-2310-34754
MSA-23-0042: RCE due to LFI risk in some misconfigured shared hosting environments
Moodle
18-10-2023
CCN-CERT-2310-34755
MSA-23-0041: Insufficient capability checks when updating the parent of a course category
Moodle
18-10-2023
CCN-CERT-2310-34756
MSA-23-0040: Make file serving endpoints revision control stricter
Moodle
18-10-2023
CCN-CERT-2310-34757
MSA-23-0039: XSS risk when previewing data in course upload tool
Moodle
18-10-2023
CCN-CERT-2310-34758
MSA-23-0038: Stored XSS in quiz grading report via user ID number
Moodle
18-10-2023
CCN-CERT-2310-34759
MSA-23-0037: Auto-populated H5P author name causes a potential information leak
Moodle
18-10-2023
CCN-CERT-2310-34760
MSA-23-0036: Stored XSS and potential IDOR risk in Wiki comments
Moodle
18-10-2023
CCN-CERT-2310-34761
MSA-23-0035: Duplicating a BigBlueButton activity assigns the same meeting ID
Moodle
18-10-2023

Miembros de

CERT
FIRST
TF-CSIRT
EGC Group
UE
Red Nacional de SOC
Foro Nacional de Ciberseguridad
CSIRT.es
Ministerio de Defensa
CNI
CNI
CCN-CERT
CNI
CNI