Search CVE reports
21 – 30 of 29276 results
Not in release
A serious authentication flaw allowed attackers with valid credentials to bypass multi-factor authentication under certain conditions, potentially compromising user accounts.
1 affected package
moodle
| Package | 24.04 LTS |
|---|---|
| moodle | Not in release |
Not in release
The router’s inconsistent response to invalid course IDs allowed attackers to infer which course IDs exist, potentially aiding reconnaissance.
1 affected package
moodle
| Package | 24.04 LTS |
|---|---|
| moodle | Not in release |
Not in release
An error-handling issue in the Moodle router (r.php) could cause the application to display internal directory listings when specific HTTP headers were not properly configured.
1 affected package
moodle
| Package | 24.04 LTS |
|---|---|
| moodle | Not in release |
Not in release
A flaw in the cohort search web service allowed users with permissions in lower contexts to access cohort information from the system context, revealing restricted administrative data.
1 affected package
moodle
| Package | 24.04 LTS |
|---|---|
| moodle | Not in release |
Not in release
Moodle failed to verify enrolment status correctly when sending quiz notifications. As a result, suspended or inactive users might receive quiz-related messages, leaking limited course information.
1 affected package
moodle
| Package | 24.04 LTS |
|---|---|
| moodle | Not in release |
Not in release
A flaw was found in the course overview output function where user access permissions were not fully enforced. This could allow unauthorized users to view information about courses they should not have access to,...
1 affected package
moodle
| Package | 24.04 LTS |
|---|---|
| moodle | Not in release |
security update
2 affected packages
request-tracker4, request-tracker5
| Package | 24.04 LTS |
|---|---|
| request-tracker4 | Needs evaluation |
| request-tracker5 | Needs evaluation |
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Difficult to exploit vulnerability allows low privileged attacker with logon...
1 affected package
virtualbox
| Package | 24.04 LTS |
|---|---|
| virtualbox | Needs evaluation |
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows low privileged attacker with logon...
1 affected package
virtualbox
| Package | 24.04 LTS |
|---|---|
| virtualbox | Needs evaluation |
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 21.0.8 and 25; Oracle...
13 affected packages
openjdk-8, openjdk-9, openjdk-lts, openjdk-13, openjdk-16...
| Package | 24.04 LTS |
|---|---|
| openjdk-8 | Needs evaluation |
| openjdk-9 | Not in release |
| openjdk-lts | Needs evaluation |
| openjdk-13 | Not in release |
| openjdk-16 | Not in release |
| openjdk-17 | Needs evaluation |
| openjdk-17-crac | Not in release |
| openjdk-18 | Not in release |
| openjdk-19 | Not in release |
| openjdk-21 | Needs evaluation |
| openjdk-21-crac | Not in release |
| openjdk-24 | Not in release |
| openjdk-25 | Needs evaluation |