Approved changes feed: RSS · Atom

cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*

part: a version: 2.7.5 update: *

VendorMoodle (1f527b56-744d-5be6-b0f4-b691bd50b8c3)
ProductMoodle (221dc9da-2dde-53d2-a358-e0cb5ac858f7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/bitnami/moodle purl2cpe 2026-06-01 10:13:14.068634
pkg:github/moodle/moodle purl2cpe 2026-06-01 10:13:14.068636
pkg:rpm/fedora/moodle purl2cpe 2026-06-01 10:13:14.068637
pkg:rpm/opensuse/moodle purl2cpe 2026-06-01 10:13:14.068638

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-7491 vulnerable 2026-06-08 05:09:56.194636 Details available
In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting.
Published: 2017-05-15T14:00:00.000Z
Updated: 2024-08-05T16:04:11.706Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7490 vulnerable 2026-06-08 05:09:56.192645 Details available
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing.
Published: 2017-05-15T14:00:00.000Z
Updated: 2024-08-05T16:04:11.541Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-7489 vulnerable 2026-06-08 05:09:56.168094 Details available
In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link.
Published: 2017-05-15T14:00:00.000Z
Updated: 2024-08-05T16:04:11.581Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2641 vulnerable 2026-06-08 05:09:24.849949 Details available
In Moodle 2.x and 3.x, SQL injection can occur via user preferences.
Published: 2017-03-26T18:00:00.000Z
Updated: 2024-08-05T14:02:07.130Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3734 vulnerable 2026-06-08 05:07:45.947773 Details available
Cross-site request forgery (CSRF) vulnerability in markposts.php in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13 and earlier allows remote attackers to hijack the authentication of users for requests that marks forum posts as read.
Published: 2017-04-20T21:00:00.000Z
Updated: 2024-08-06T00:03:34.471Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3733 vulnerable 2026-06-08 05:07:45.946518 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3732 vulnerable 2026-06-08 05:07:45.945166 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-3729 vulnerable 2026-06-08 05:07:45.925158 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2190 vulnerable 2026-06-08 05:07:33.570131 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2159 vulnerable 2026-06-08 05:07:33.402944 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2158 vulnerable 2026-06-08 05:07:33.401830 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2157 vulnerable 2026-06-08 05:07:33.399902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2156 vulnerable 2026-06-08 05:07:33.398906 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2153 vulnerable 2026-06-08 05:07:33.396376 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2152 vulnerable 2026-06-08 05:07:33.395190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-2151 vulnerable 2026-06-08 05:07:33.381648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0724 vulnerable 2026-06-08 05:07:15.914093 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5342 vulnerable 2026-06-08 05:06:49.633546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5341 vulnerable 2026-06-08 05:06:49.632752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5340 vulnerable 2026-06-08 05:06:49.631747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5339 vulnerable 2026-06-08 05:06:49.630969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5338 vulnerable 2026-06-08 05:06:49.630185 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5337 vulnerable 2026-06-08 05:06:49.629274 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5336 vulnerable 2026-06-08 05:06:49.628481 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5335 vulnerable 2026-06-08 05:06:49.625266 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5272 vulnerable 2026-06-08 05:06:49.413712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5269 vulnerable 2026-06-08 05:06:49.402605 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5268 vulnerable 2026-06-08 05:06:49.401841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5267 vulnerable 2026-06-08 05:06:49.400860 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5266 vulnerable 2026-06-08 05:06:49.399963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5265 vulnerable 2026-06-08 05:06:49.399181 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5264 vulnerable 2026-06-08 05:06:49.391348 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3275 vulnerable 2026-06-08 05:06:37.859368 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3274 vulnerable 2026-06-08 05:06:37.858653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3272 vulnerable 2026-06-08 05:06:37.852350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3181 vulnerable 2026-06-08 05:06:37.404431 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3180 vulnerable 2026-06-08 05:06:37.403407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3179 vulnerable 2026-06-08 05:06:37.402294 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3178 vulnerable 2026-06-08 05:06:37.401262 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3176 vulnerable 2026-06-08 05:06:37.399653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3175 vulnerable 2026-06-08 05:06:37.398608 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-3174 vulnerable 2026-06-08 05:06:37.393593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2273 vulnerable 2026-06-08 05:06:27.800017 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2272 vulnerable 2026-06-08 05:06:27.799041 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2271 vulnerable 2026-06-08 05:06:27.798146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2270 vulnerable 2026-06-08 05:06:27.797186 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2269 vulnerable 2026-06-08 05:06:27.796172 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2268 vulnerable 2026-06-08 05:06:27.795180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2267 vulnerable 2026-06-08 05:06:27.794272 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-2266 vulnerable 2026-06-08 05:06:27.792010 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.