Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 22:30:31 +0000 certfr-2014-avi-234 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Moodle</span>. Certaines d'entre elles permette… https://cve.radiocsirt.org/vuln/certfr-2014-avi-234 certfr-2014-avi-234 https://cve.radiocsirt.org/vuln/certfr-2014-avi-234 EUVD-2026-96779 https://cve.radiocsirt.org/vuln/euvd-2026-96779 EUVD-2026-96779 https://cve.radiocsirt.org/vuln/euvd-2026-96779 fkie_cve-2014-0216 https://cve.radiocsirt.org/vuln/fkie_cve-2014-0216 <p>The My Home implementation in the block_html_pluginfile function in blocks/html/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 does not properly restrict file access, which allows remote attackers to obtain sensitive information by visiting an HTML block.</p> <p>The My Home implementation in the block_html_pluginfile function in blocks/html/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 does not properly restrict file access, which allows remote attackers to obtain sensitive information by visiting an HTML block.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-0216 GHSA-8rc7-4qfv-4484 — Moodle does not properly restrict file access https://cve.radiocsirt.org/vuln/ghsa-8rc7-4qfv-4484 <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>The My Home implementation in the block_html_pluginfile function in blocks/html/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 does not properly restrict file access, which allows remote attackers to obtain sensitive information by visiting an HTML block.</p> <p><strong>Affected:</strong> Packagist: moodle/moodle</p> <p>The My Home implementation in the block_html_pluginfile function in blocks/html/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.10, 2.5.x before 2.5.6, and 2.6.x before 2.6.3 does not properly restrict file access, which allows remote attackers to obtain sensitive information by visiting an HTML block.</p> https://cve.radiocsirt.org/vuln/ghsa-8rc7-4qfv-4484 gsd-2014-0216 https://cve.radiocsirt.org/vuln/gsd-2014-0216 gsd-2014-0216 https://cve.radiocsirt.org/vuln/gsd-2014-0216