https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:17:43.127651+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2019-avi-445 certfr-2019-avi-445 — De multiples vulnérabilités ont été découvertes dans Moodle. Certaines d'entre elles permettent à un attaquant de provo… 2026-10-03T00:17:43.229347+00:00 certfr-2019-avi-445 https://cve.radiocsirt.org/vuln/cnvd-2019-35810 cnvd-2019-35810 2026-10-03T00:17:43.229399+00:00 cnvd-2019-35810 https://cve.radiocsirt.org/vuln/euvd-2026-56681 EUVD-2026-56681 2026-10-03T00:17:43.229426+00:00 EUVD-2026-56681 https://cve.radiocsirt.org/vuln/fkie_cve-2019-14830 fkie_cve-2019-14830 2026-10-03T00:17:43.229446+00:00

A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where the mobile launch endpoint contained an open redirect in some circumstances, which could result in a user's mobile access token being exposed. (Note: This does not affect sites with a forced URL scheme configured, mobile service disabled, or where the mobile app login method is "via the app").

 https://cve.radiocsirt.org/vuln/ghsa-jj3p-6mw3-6qmm GHSA-jj3p-6mw3-6qmm 2026-10-03T00:17:43.229500+00:00

A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where the mobile launch endpoint contained an open redirect in some circumstances, which could result in a user's mobile access token being exposed. (Note: This does not affect sites with a forced URL scheme configured, mobile service disabled, or where the mobile app login method is "via the app").

 https://cve.radiocsirt.org/vuln/gsd-2019-14830 gsd-2019-14830 2026-10-03T00:17:43.229534+00:00 gsd-2019-14830 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-14830 UBUNTU-CVE-2019-14830 2026-10-03T00:17:43.229552+00:00

Affected: Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle

A vulnerability was found in Moodle 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where the mobile launch endpoint contained an open redirect in some circumstances, which could result in a user's mobile access token being exposed. (Note: This does not affect sites with a forced URL scheme configured, mobile service disabled, or where the mobile app login method is "via the app").