Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 15:20:03 +0000 bdu:2015-10920 https://cve.radiocsirt.org/vuln/bdu:2015-10920 bdu:2015-10920 https://cve.radiocsirt.org/vuln/bdu:2015-10920 certfr-2015-avi-115 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Certaines d'entre elles permette… https://cve.radiocsirt.org/vuln/certfr-2015-avi-115 certfr-2015-avi-115 https://cve.radiocsirt.org/vuln/certfr-2015-avi-115 cnvd-2015-03635 https://cve.radiocsirt.org/vuln/cnvd-2015-03635 cnvd-2015-03635 https://cve.radiocsirt.org/vuln/cnvd-2015-03635 EUVD-2026-90871 https://cve.radiocsirt.org/vuln/euvd-2026-90871 EUVD-2026-90871 https://cve.radiocsirt.org/vuln/euvd-2026-90871 fkie_cve-2015-2267 https://cve.radiocsirt.org/vuln/fkie_cve-2015-2267 <p>mdeploy.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to bypass intended access restrictions and extract archives to arbitrary directories via a crafted dataroot value.</p> <p>mdeploy.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to bypass intended access restrictions and extract archives to arbitrary directories via a crafted dataroot value.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2015-2267 GHSA-cm4r-58pj-h2ph — Moodle allows attackers to extract archives to arbitrary directories https://cve.radiocsirt.org/vuln/ghsa-cm4r-58pj-h2ph <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>mdeploy.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to bypass intended access restrictions and extract archives to arbitrary directories via a crafted dataroot value.</p> <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>mdeploy.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to bypass intended access restrictions and extract archives to arbitrary directories via a crafted dataroot value.</p> https://cve.radiocsirt.org/vuln/ghsa-cm4r-58pj-h2ph gsd-2015-2267 https://cve.radiocsirt.org/vuln/gsd-2015-2267 gsd-2015-2267 https://cve.radiocsirt.org/vuln/gsd-2015-2267 Withdrawn: UBUNTU-CVE-2015-2267 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-2267 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: moodle, Ubuntu:18.04:LTS: moodle</p> <p>mdeploy.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to bypass intended access restrictions and extract archives to arbitrary directories via a crafted dataroot value.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: moodle, Ubuntu:18.04:LTS: moodle</p> <p>mdeploy.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allows remote authenticated users to bypass intended access restrictions and extract archives to arbitrary directories via a crafted dataroot value.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-2267