Search CVE reports


Toggle filters

11 – 20 of 44853 results

Status is adjusted based on your filters.


CVE-2025-62525

Medium priority
Needs evaluation

OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, local users could read and write arbitrary kernel memory using the ioctls of the ltq-ptm driver which is used to drive the datapath...

147 affected packages

linux, linux-hwe, linux-hwe-5.4, linux-hwe-5.8, linux-hwe-5.11...

Package 16.04 LTS
linux Needs evaluation
linux-hwe Needs evaluation
linux-hwe-5.4
linux-hwe-5.8
linux-hwe-5.11
linux-hwe-5.13
linux-hwe-5.15
linux-hwe-5.19
linux-hwe-6.2
linux-hwe-6.5
linux-hwe-6.8
linux-hwe-6.11
linux-hwe-6.14
linux-hwe-edge Ignored
linux-lts-xenial
linux-kvm Needs evaluation
linux-allwinner-5.19
linux-aws Needs evaluation
linux-aws-5.0
linux-aws-5.3
linux-aws-5.4
linux-aws-5.8
linux-aws-5.11
linux-aws-5.13
linux-aws-5.15
linux-aws-5.19
linux-aws-6.2
linux-aws-6.5
linux-aws-6.8
linux-aws-6.14
linux-aws-hwe Needs evaluation
linux-azure Needs evaluation
linux-azure-4.15
linux-azure-5.3
linux-azure-5.4
linux-azure-5.8
linux-azure-5.11
linux-azure-5.13
linux-azure-5.15
linux-azure-5.19
linux-azure-6.2
linux-azure-6.5
linux-azure-6.8
linux-azure-6.11
linux-azure-6.14
linux-azure-fde
linux-azure-fde-5.15
linux-azure-fde-5.19
linux-azure-fde-6.2
linux-azure-fde-6.14
linux-azure-nvidia
linux-azure-nvidia-6.14
linux-bluefield
linux-azure-edge
linux-fips Needs evaluation
linux-aws-fips
linux-azure-fips
linux-gcp-fips
linux-gcp Needs evaluation
linux-gcp-4.15
linux-gcp-5.3
linux-gcp-5.4
linux-gcp-5.8
linux-gcp-5.11
linux-gcp-5.13
linux-gcp-5.15
linux-gcp-5.19
linux-gcp-6.2
linux-gcp-6.5
linux-gcp-6.8
linux-gcp-6.11
linux-gcp-6.14
linux-gke
linux-gke-4.15
linux-gke-5.4
linux-gke-5.15
linux-gkeop
linux-gkeop-5.4
linux-gkeop-5.15
linux-ibm
linux-ibm-5.4
linux-ibm-5.15
linux-ibm-6.8
linux-intel-5.13
linux-intel-iotg
linux-intel-iotg-5.15
linux-iot
linux-intel-iot-realtime
linux-lowlatency
linux-lowlatency-hwe-5.15
linux-lowlatency-hwe-5.19
linux-lowlatency-hwe-6.2
linux-lowlatency-hwe-6.5
linux-lowlatency-hwe-6.8
linux-lowlatency-hwe-6.11
linux-nvidia
linux-nvidia-6.2
linux-nvidia-6.5
linux-nvidia-6.8
linux-nvidia-6.11
linux-nvidia-lowlatency
linux-nvidia-tegra
linux-nvidia-tegra-5.15
linux-nvidia-tegra-igx
linux-oracle Needs evaluation
linux-oracle-5.0
linux-oracle-5.3
linux-oracle-5.4
linux-oracle-5.8
linux-oracle-5.11
linux-oracle-5.13
linux-oracle-5.15
linux-oracle-6.5
linux-oracle-6.8
linux-oracle-6.14
linux-oem
linux-oem-5.6
linux-oem-5.10
linux-oem-5.13
linux-oem-5.14
linux-oem-5.17
linux-oem-6.0
linux-oem-6.1
linux-oem-6.5
linux-oem-6.8
linux-oem-6.11
linux-oem-6.14
linux-raspi
linux-raspi2
linux-raspi-5.4
linux-raspi-realtime
linux-realtime
linux-realtime-6.8
linux-realtime-6.14
linux-riscv
linux-riscv-5.8
linux-riscv-5.11
linux-riscv-5.15
linux-riscv-5.19
linux-riscv-6.5
linux-riscv-6.8
linux-riscv-6.14
linux-starfive-5.19
linux-starfive-6.2
linux-starfive-6.5
linux-xilinx-zynqmp
linux-xilinx Not in release
Show all 147 packages Show less packages

CVE-2025-62401

Medium priority
Needs evaluation

An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment.

1 affected package

moodle

Package 16.04 LTS
moodle Needs evaluation
Show less packages

CVE-2025-62400

Medium priority
Needs evaluation

Moodle exposed the names of hidden groups to users who had permission to create calendar events but not to view hidden groups. This could reveal private or restricted group information.

1 affected package

moodle

Package 16.04 LTS
moodle Needs evaluation
Show less packages

CVE-2025-62399

Medium priority
Needs evaluation

Moodle’s mobile and web service authentication endpoints did not sufficiently restrict repeated password attempts, making them susceptible to brute-force attacks.

1 affected package

moodle

Package 16.04 LTS
moodle Needs evaluation
Show less packages

CVE-2025-62398

Medium priority
Needs evaluation

A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially compromising user accounts.

1 affected package

moodle

Package 16.04 LTS
moodle Needs evaluation
Show less packages

CVE-2025-62397

Medium priority
Needs evaluation

The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.

1 affected package

moodle

Package 16.04 LTS
moodle Needs evaluation
Show less packages

CVE-2025-62396

Medium priority
Needs evaluation

An error-handling issue in the Moodle router (r.php) could cause the application to display internal directory listings when specific HTTP headers were not properly configured.

1 affected package

moodle

Package 16.04 LTS
moodle Needs evaluation
Show less packages

CVE-2025-62395

Medium priority
Needs evaluation

A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data.

1 affected package

moodle

Package 16.04 LTS
moodle Needs evaluation
Show less packages

CVE-2025-62394

Medium priority
Needs evaluation

Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information.

1 affected package

moodle

Package 16.04 LTS
moodle Needs evaluation
Show less packages

CVE-2025-62393

Medium priority
Needs evaluation

A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to,...

1 affected package

moodle

Package 16.04 LTS
moodle Needs evaluation
Show less packages