Vulnerabilities > Moodle > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-05-18 CVE-2022-30600 Incorrect Calculation vulnerability in multiple products
A flaw was found in moodle where logic used to count failed login attempts could result in the account lockout threshold being bypassed.
network
low complexity
moodle redhat fedoraproject CWE-682
critical
9.8
2021-11-22 CVE-2021-3943 Improper Input Validation vulnerability in Moodle
A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions.
network
low complexity
moodle CWE-20
critical
9.8
2021-06-23 CVE-2021-21809 Unspecified vulnerability in Moodle 3.10.0
A command execution vulnerability exists in the default legacy spellchecker plugin in Moodle 3.10.
network
low complexity
moodle
critical
9.0
2006-09-23 CVE-2006-4936 Improper Input Validation vulnerability in Moodle
Moodle before 1.6.2 does not properly validate the module instance id when creating a course module object, which has unspecified impact and remote attack vectors.
network
low complexity
moodle CWE-20
critical
10.0
2006-09-23 CVE-2006-4935 Improper Input Validation vulnerability in Moodle
The Database module in Moodle before 1.6.2 does not properly handle uploaded files, which has unspecified impact and remote attack vectors.
network
low complexity
moodle CWE-20
critical
10.0
2005-07-12 CVE-2005-2247 Unspecified vulnerability in Moodle
Multiple unknown vulnerabilities in Moodle before 1.5.1 have unknown impact and attack vectors.
network
low complexity
moodle
critical
10.0
2004-12-31 CVE-2004-2237 Unspecified vulnerability in Moodle
Unknown vulnerability in Moodle before 1.3.4 has unknown impact and attack vectors, related to "strings in Moodle texts."
network
low complexity
moodle
critical
10.0
2004-12-31 CVE-2004-2236 Unspecified vulnerability in Moodle
Unknown vulnerability in Moodle before 1.3.3 has unknown impact and attack vectors, related to language setting.
network
low complexity
moodle
critical
10.0
2004-12-31 CVE-2004-2235 Remote Security vulnerability in Moodle 1.1.1
Unknown vulnerability in Moodle before 1.2 has unknown impact and attack vectors, related to improper filtering of text.
network
low complexity
moodle
critical
10.0
2004-12-31 CVE-2004-2233 Unspecified vulnerability in Moodle
Unknown "front page vulnerability with Moodle servers" for Moodle before 1.3.2 has unknown impact and attack vectors.
network
low complexity
moodle
critical
10.0