https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-25T16:29:02.668455+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-10921 bdu:2015-10921 2026-10-25T16:29:02.677463+00:00 bdu:2015-10921 https://cve.radiocsirt.org/vuln/certfr-2015-avi-115 certfr-2015-avi-115 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Certaines d'entre elles permette… 2026-10-25T16:29:02.677507+00:00 certfr-2015-avi-115 https://cve.radiocsirt.org/vuln/cnvd-2015-03634 cnvd-2015-03634 2026-10-25T16:29:02.677534+00:00 cnvd-2015-03634 https://cve.radiocsirt.org/vuln/euvd-2026-90882 EUVD-2026-90882 2026-10-25T16:29:02.677552+00:00 EUVD-2026-90882 https://cve.radiocsirt.org/vuln/fkie_cve-2015-2268 fkie_cve-2015-2268 2026-10-25T16:29:02.677568+00:00

filter/urltolink/filter.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to cause a denial of service (CPU consumption or partial outage) via a crafted string that is matched against an improper regular expression.

 https://cve.radiocsirt.org/vuln/ghsa-36cm-vrqh-8p98 GHSA-36cm-vrqh-8p98 — Moodle allows attackers to cause a denial of service 2026-10-25T16:29:02.677621+00:00

Affected: Packagist: moodle/moodle

filter/urltolink/filter.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to cause a denial of service (CPU consumption or partial outage) via a crafted string that is matched against an improper regular expression.

 https://cve.radiocsirt.org/vuln/gsd-2015-2268 gsd-2015-2268 2026-10-25T16:29:02.677699+00:00 gsd-2015-2268 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-2268 Withdrawn: UBUNTU-CVE-2015-2268 2026-10-25T16:29:02.677716+00:00

Withdrawn by the publisher.

Affected: Ubuntu:16.04:LTS: moodle, Ubuntu:18.04:LTS: moodle

filter/urltolink/filter.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to cause a denial of service (CPU consumption or partial outage) via a crafted string that is matched against an improper regular expression.