https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T07:42:02.291886+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2019-avi-029 certfr-2019-avi-029 — De multiples vulnérabilités ont été découvertes dans Moodle . Elles permettent à un attaquant de provoquer un contourne… 2026-10-17T07:42:02.381174+00:00 certfr-2019-avi-029 https://cve.radiocsirt.org/vuln/cnvd-2019-35823 cnvd-2019-35823 2026-10-17T07:42:02.381215+00:00 cnvd-2019-35823 https://cve.radiocsirt.org/vuln/euvd-2026-49767 EUVD-2026-49767 2026-10-17T07:42:02.381241+00:00 EUVD-2026-49767 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3810 fkie_cve-2019-3810 2026-10-17T07:42:02.381254+00:00

A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The /userpix/ page did not escape users' full names, which are included as text when hovering over profile images. Note this page is not linked to by default and its access is restricted.

 https://cve.radiocsirt.org/vuln/ghsa-wm4w-8vc6-2j4h GHSA-wm4w-8vc6-2j4h — Moodle XSS Vulnerability 2026-10-17T07:42:02.381283+00:00

Affected: Packagist: moodle/moodle

A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The /userpix/ page did not escape users' full names, which are included as text when hovering over profile images. Note this page is not linked to by default and its access is restricted.

 https://cve.radiocsirt.org/vuln/gsd-2019-3810 gsd-2019-3810 2026-10-17T07:42:02.381309+00:00 gsd-2019-3810 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-3810 UBUNTU-CVE-2019-3810 2026-10-17T07:42:02.381320+00:00

Affected: Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle

A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The /userpix/ page did not escape users' full names, which are included as text when hovering over profile images. Note this page is not linked to by default and its access is restricted.