https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T03:41:28.644291+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2019-avi-116 certfr-2019-avi-116 — De multiples vulnérabilités ont été découvertes dans Moodle. Elles permettent à un attaquant de provoquer un problème d… 2026-10-17T03:41:28.650167+00:00 certfr-2019-avi-116 https://cve.radiocsirt.org/vuln/cnvd-2019-35820 cnvd-2019-35820 2026-10-17T03:41:28.650203+00:00 cnvd-2019-35820 https://cve.radiocsirt.org/vuln/euvd-2026-49742 EUVD-2026-49742 2026-10-17T03:41:28.650219+00:00 EUVD-2026-49742 https://cve.radiocsirt.org/vuln/fkie_cve-2019-3847 fkie_cve-2019-3847 2026-10-17T03:41:28.650231+00:00

A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Users with the "login as other users" capability (such as administrators/managers) can access other users' Dashboards, but the JavaScript those other users may have added to their Dashboard was not being escaped when being viewed by the user logging in on their behalf.

 https://cve.radiocsirt.org/vuln/ghsa-qrcj-6fjw-3h9h GHSA-qrcj-6fjw-3h9h — Moodle XSS Vulnerability 2026-10-17T03:41:28.650259+00:00

Affected: Packagist: moodle/moodle

A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Users with the "login as other users" capability (such as administrators/managers) can access other users' Dashboards, but the JavaScript those other users may have added to their Dashboard was not being escaped when being viewed by the user logging in on their behalf.

 https://cve.radiocsirt.org/vuln/gsd-2019-3847 gsd-2019-3847 2026-10-17T03:41:28.650284+00:00 gsd-2019-3847 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-3847 UBUNTU-CVE-2019-3847 2026-10-17T03:41:28.650296+00:00

Affected: Ubuntu:Pro:16.04:LTS: moodle, Ubuntu:Pro:18.04:LTS: moodle

A vulnerability was found in moodle before versions 3.6.3, 3.5.5, 3.4.8 and 3.1.17. Users with the "login as other users" capability (such as administrators/managers) can access other users' Dashboards, but the JavaScript those other users may have added to their Dashboard was not being escaped when being viewed by the user logging in on their behalf.