Skip to content
OpenAdvisories

Archive

25 May 2018

Vulnerabilities first published on this day (UTC), newest first.

← April 2018 2018 / May /25 June 2018 →
  1. 131
  2. 263
  3. 313
  4. 435
  5. 55
  6. 64
  7. 719
  8. 829
  9. 9105
  10. 1049
  11. 1125
  12. 127
  13. 134
  14. 1450
  15. 1537
  16. 1628
  17. 17139
  18. 1831
  19. 1938
  20. 204
  21. 2113
  22. 2263
  23. 2332
  24. 2455
  25. 2546
  26. 2617
  27. 27 
  28. 2811
  29. 2980
  30. 3030
  31. 31101
All Critical High Medium Low Exploited only Public exploit

46 results · Feed

  • High 8.1
    CVE-2018-1137

    Moodle Portfolio script allows instantiation of class chosen by user

    An issue was discovered in Moodle 3.x. By substituting URLs in portfolios, users can instantiate any class. This can also be exploited by users who are logged in as guests to create a DDoS attack.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 4.3
    CVE-2018-1136

    Moodle Cross-site Scripting

    An issue was discovered in Moodle 3.x. An authenticated user is allowed to add HTML blocks containing scripts to their Dashboard; this is normally not a security issue because a personal dashboard is visible to this user only. Through this security vulnerabil…

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • High 8.8
    CVE-2018-1133 Public exploit EPSS 31%

    Moodle calculated question type allows remote code execution by Question authors

    An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code execution on the server, aka eval injection.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 6.5
    CVE-2018-1135

    Moodle Portfolio forum caller class allows a user to download any file

    An issue was discovered in Moodle 3.x. Students who posted on forums and exported the posts to portfolios can download any stored Moodle file by changing the download URL.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 6.5
    CVE-2018-1134

    Moodle Improper Privilege Management

    An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Unscored —
    CVE-2018-11440

    Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c.

    liblouis liblouis Debian Ubuntu