Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,347
Erlang
31
GitHub Actions
22
Go
2,117
Maven
5,000+
npm
3,768
NuGet
680
pip
3,457
Pub
12
RubyGems
892
Rust
888
Swift
38
Unreviewed advisories
All unreviewed
5,000+

280 advisories

Loading
Moodle mishandles group-based authorization checks Moderate
CVE-2015-5268 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle multiple cross-site scripting (XSS) vulnerabilities Moderate
CVE-2015-5336 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle cross-site scripting (XSS) vulnerability Moderate
CVE-2015-5269 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle does not properly implement group-based access restrictions Moderate
CVE-2015-5339 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle uses predictable password-recovery tokens High
CVE-2015-5267 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle cross-site request forgery (CSRF) vulnerability Moderate
CVE-2015-5335 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle Arbitrary Redirect Moderate
CVE-2015-3175 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle allows attackers to bypass file-management restrictions Moderate
CVE-2015-3181 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle cross-site scripting (XSS) vulnerability Low
CVE-2015-3178 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle allows attackers to obtain sensitive course-structure information Moderate
CVE-2015-3180 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle open redirect vulnerability High
CVE-2015-3272 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle allows attackers to bypass intended login restrictions Low
CVE-2015-3179 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle directory traversal vulnerability Moderate
CVE-2015-1493 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle allows attackers to obtain sensitive personal-contact and unread-message-count information Moderate
CVE-2015-2266 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle does not set the RISK_XSS bit for graders Low
CVE-2015-3174 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle does not consider the moodle/tag:flag capability Moderate
CVE-2015-2271 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle XSS Vulnerability Low
CVE-2015-2269 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle cross-site scripting (XSS) vulnerability Low
CVE-2015-2273 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle allows attackers to bypass a forced-password-change requirement Moderate
CVE-2015-2272 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle allows attackers to extract archives to arbitrary directories Moderate
CVE-2015-2267 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle allows attackers obtain full-name information Moderate
CVE-2015-3176 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle allows attackers to obtain sensitive course information Moderate
CVE-2015-2270 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle allows attackers to cause a denial of service Moderate
CVE-2015-2268 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle allows attackers to bypass a messaging-disabled setting Moderate
CVE-2015-0214 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
Moodle Temporary Passwords are Brute Force-able High
CVE-2014-7845 was published for moodle/moodle (Composer) May 13, 2022
MarkLee131
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database