Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read just now.
At a glance
Published CVEs; rejected ones are not counted.
- 406,598All CVEsplus 19,172 rejected
- 75Last 24 hours4,669 in the last 7 days
- 16,297Last 30 days1,436 of them critical
- 1,781Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 0 | 0 | 2 | 0 | 0 | 2 | 25 |
| 2025 | 0 | 1 | 2 | 0 | 0 | 3 | 23 |
| 2024 | 0 | 2 | 5 | 0 | 0 | 7 | 20 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 | 13 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 | 13 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 | 13 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 | 13 |
| 2019 | 0 | 4 | 7 | 2 | 0 | 13 | 13 |
| Title | ||
|---|---|---|
| CVE-2022-50943 | Moodle LMS 4.0 Cross-Site Scripting via course search.phpPublic exploitMoodle · Moodle LMS | Medium5.1 |
| CVE-2021-47857 | Moodle 3.10.3 - 'label' Persistent Cross Site ScriptingPublic exploitMoodle · Moodle | Medium5.1 |
| CVE-2025-34032 | Moodle LMS Jmol Plugin Cross-site Scripting (XSS)Public exploitMoodle · Jmol Plugin | Medium5.1 |
| CVE-2025-34031 | Moodle LMS Jmol Plugin Path TraversalPublic exploitMoodle · Jmol Plugin | High8.7 |
| CVE-2025-53021 | A session fixation vulnerability in Moodle 3.x through 3.11.18 allows unauthenticated attackers to hijack user sessions via the sesskey parameter. The sesskey…Public exploitMoodle · Moodle | Medium4.2 |
| CVE-2024-38277 | moodle: QR login key and auto-login key for the Moodle mobile app should be generated as separate keysMoodle · Moodle | Medium5.4 |
| CVE-2024-38276 | moodle: CSRF risks due to misuse of confirm_sesskeyMoodle · Moodle | High8.8 |
| CVE-2024-38275 | moodle: HTTP authorization header is preserved between "emulated redirects"Moodle · Moodle | High7.5 |
| CVE-2024-38274 | moodle: stored XSS via calendar's event title when deleting the eventMoodle · Moodle | Medium6.1 |
| CVE-2024-38273 | moodle: BigBlueButton web service leaks meeting joining information to users who should not have accessMoodle · Moodle | Medium5.4 |
| CVE-2024-33996 | moodle: broken access control when setting calendar event typeMoodle · Moodle | Medium6.2 |
| CVE-2024-1439 | Inadequate access control vulnerability in MoodleMoodle · LMS | Medium6.5 |
| CVE-2012-1161 | Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search resultsMoodle · Moodle | Medium4.3 |
| CVE-2012-1170 | Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thoroughMoodle · Moodle | High7.5 |
| CVE-2012-1169 | Moodle before 2.2.2 has Personal information disclosure, when administrative setting users name display is set to first name only full names are shown in page…Moodle · Moodle | Medium5.3 |
| CVE-2012-1160 | Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.phpMoodle · Moodle | Low2.7 |
| CVE-2012-1159 | Moodle before 2.2.2: Overview report allows users to see hidden coursesMoodle · Moodle | Medium4.3 |
| CVE-2012-1158 | Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in exportMoodle · Moodle | Medium4.3 |
| CVE-2012-1157 | Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by defaultMoodle · Moodle | Medium4.3 |
| CVE-2012-1156 | Moodle before 2.2.2 has users' private files included in course backupsMoodle · Moodle | High7.5 |
| CVE-2012-1168 | Moodle before 2.2.2 has a password and web services issue where when the user profile is updated the user password is reset if not specified.Moodle · Moodle | High8.2 |
| CVE-2012-1155 | Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the…Moodle · Moodle | High7.5 |
| CVE-2019-10154 | A flaw was found in Moodle before versions 3.7, 3.6.4. A web service fetching messages was not restricted to the current user's conversations.Moodle · moodle | Medium6.5 |
| CVE-2019-10134 | A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The size of users' private file uploads via email were not correctly checked, so their…Moodle · moodle | Medium4.2 |
| CVE-2019-10133 | A flaw was found in Moodle before 3.7, 3.6.4, 3.5.6, 3.4.9 and 3.1.18. The form to upload cohorts contained a redirect field, which was not restricted to…Moodle · moodle | Low3.1 |