https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T15:20:05.286954+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-10923 bdu:2015-10923 2026-10-25T15:20:05.788814+00:00 bdu:2015-10923 https://cve.radiocsirt.org/vuln/certfr-2015-avi-115 certfr-2015-avi-115 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Certaines d'entre elles permette… 2026-10-25T15:20:05.788854+00:00 certfr-2015-avi-115 https://cve.radiocsirt.org/vuln/cnvd-2015-03632 cnvd-2015-03632 2026-10-25T15:20:05.788875+00:00 cnvd-2015-03632 https://cve.radiocsirt.org/vuln/euvd-2026-90905 EUVD-2026-90905 2026-10-25T15:20:05.788889+00:00 EUVD-2026-90905 https://cve.radiocsirt.org/vuln/fkie_cve-2015-2270 fkie_cve-2015-2270 2026-10-25T15:20:05.788900+00:00

lib/moodlelib.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4, when the theme uses the blocks-regions feature, establishes the course state at an incorrect point in the login-validation process, which allows remote attackers to obtain sensitive course information via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-fp4h-j22r-vwcv GHSA-fp4h-j22r-vwcv — Moodle allows attackers to obtain sensitive course information 2026-10-25T15:20:05.788929+00:00

Affected: Packagist: moodle/moodle

lib/moodlelib.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4, when the theme uses the blocks-regions feature, establishes the course state at an incorrect point in the login-validation process, which allows remote attackers to obtain sensitive course information via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2015-2270 gsd-2015-2270 2026-10-25T15:20:05.788955+00:00 gsd-2015-2270 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-2270 Withdrawn: UBUNTU-CVE-2015-2270 2026-10-25T15:20:05.788967+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: moodle, Ubuntu:18.04:LTS: moodle

lib/moodlelib.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4, when the theme uses the blocks-regions feature, establishes the course state at an incorrect point in the login-validation process, which allows remote attackers to obtain sensitive course information via unspecified vectors.