https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 13:41:40 +0000 https://db.gcve.eu/sighting/23bea025-8b6b-42bd-bd90-035fbfd2f014/export {"uuid": "23bea025-8b6b-42bd-bd90-035fbfd2f014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43439", "type": "seen", "source": "https://t.me/cvedetector/10512", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43439 - Moodle H5P XSS\", \n \"Content\": \"CVE ID : CVE-2024-43439 \nPublished : Nov. 11, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : A flaw was found in moodle. H5P error messages require additional sanitizing to prevent a reflected cross-site scripting (XSS) risk. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"11 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T17:46:45.000000Z"} {"uuid": "23bea025-8b6b-42bd-bd90-035fbfd2f014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43439", "type": "seen", "source": "https://t.me/cvedetector/10512", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43439 - Moodle H5P XSS\", \n \"Content\": \"CVE ID : CVE-2024-43439 \nPublished : Nov. 11, 2024, 4:15 p.m. | 25\u00a0minutes ago \nDescription : A flaw was found in moodle. H5P error messages require additional sanitizing to prevent a reflected cross-site scripting (XSS) risk. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"11 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T17:46:45.000000Z"} https://db.gcve.eu/sighting/23bea025-8b6b-42bd-bd90-035fbfd2f014/export Mon, 11 Nov 2024 17:46:45 +0000 https://db.gcve.eu/sighting/c4e42069-827a-4b99-b2ce-bed387e6e4c6/export {"uuid": "c4e42069-827a-4b99-b2ce-bed387e6e4c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43439", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113465169984944694", "content": "", "creation_timestamp": "2024-11-11T16:04:55.261273Z"} {"uuid": "c4e42069-827a-4b99-b2ce-bed387e6e4c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43439", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113465169984944694", "content": "", "creation_timestamp": "2024-11-11T16:04:55.261273Z"} https://db.gcve.eu/sighting/c4e42069-827a-4b99-b2ce-bed387e6e4c6/export Mon, 11 Nov 2024 16:04:55 +0000 https://db.gcve.eu/sighting/511d08d6-b45c-4345-ac5f-9263ccd72e0c/export {"uuid": "511d08d6-b45c-4345-ac5f-9263ccd72e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43437", "type": "seen", "source": "https://t.me/cvedetector/10494", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43437 - Moodle Cross-Site Scripting Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-43437 \nPublished : Nov. 11, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : A flaw was found in moodle. Insufficient sanitizing of data when performing a restore could result in a cross-site scripting (XSS) risk from malicious backup files. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"11 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T15:15:59.000000Z"} {"uuid": "511d08d6-b45c-4345-ac5f-9263ccd72e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43437", "type": "seen", "source": "https://t.me/cvedetector/10494", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43437 - Moodle Cross-Site Scripting Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-43437 \nPublished : Nov. 11, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : A flaw was found in moodle. Insufficient sanitizing of data when performing a restore could result in a cross-site scripting (XSS) risk from malicious backup files. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"11 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T15:15:59.000000Z"} https://db.gcve.eu/sighting/511d08d6-b45c-4345-ac5f-9263ccd72e0c/export Mon, 11 Nov 2024 15:15:59 +0000 https://db.gcve.eu/sighting/29fef2d9-384a-4bfd-8e09-f985c97602bd/export {"uuid": "29fef2d9-384a-4bfd-8e09-f985c97602bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43435", "type": "seen", "source": "https://t.me/cvedetector/10493", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43435 - Moodle Capability Check Bypass Vulnerability (Privilege Escalation)\", \n \"Content\": \"CVE ID : CVE-2024-43435 \nPublished : Nov. 11, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"11 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T15:15:59.000000Z"} {"uuid": "29fef2d9-384a-4bfd-8e09-f985c97602bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43435", "type": "seen", "source": "https://t.me/cvedetector/10493", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43435 - Moodle Capability Check Bypass Vulnerability (Privilege Escalation)\", \n \"Content\": \"CVE ID : CVE-2024-43435 \nPublished : Nov. 11, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : A flaw was found in moodle. Insufficient capability checks make it possible for users with access to restore glossaries in courses to restore them into the global site glossary. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"11 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T15:15:59.000000Z"} https://db.gcve.eu/sighting/29fef2d9-384a-4bfd-8e09-f985c97602bd/export Mon, 11 Nov 2024 15:15:59 +0000 https://db.gcve.eu/sighting/671d2783-8923-48ac-b982-24ecb431b4cc/export {"uuid": "671d2783-8923-48ac-b982-24ecb431b4cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43433", "type": "seen", "source": "https://t.me/cvedetector/10492", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43433 - Moodle Suspended Account Matrix Room Membership Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-43433 \nPublished : Nov. 11, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : A flaw was found in moodle. Matrix room membership and power levels are incorrectly applied and revoked for suspended Moodle users. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"11 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T15:15:58.000000Z"} {"uuid": "671d2783-8923-48ac-b982-24ecb431b4cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43433", "type": "seen", "source": "https://t.me/cvedetector/10492", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43433 - Moodle Suspended Account Matrix Room Membership Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-43433 \nPublished : Nov. 11, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : A flaw was found in moodle. Matrix room membership and power levels are incorrectly applied and revoked for suspended Moodle users. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"11 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T15:15:58.000000Z"} https://db.gcve.eu/sighting/671d2783-8923-48ac-b982-24ecb431b4cc/export Mon, 11 Nov 2024 15:15:58 +0000 https://db.gcve.eu/sighting/682c7ee3-050a-43cc-b4d5-81bbced2019f/export {"uuid": "682c7ee3-050a-43cc-b4d5-81bbced2019f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43432", "type": "seen", "source": "https://t.me/cvedetector/10491", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43432 - Moodle HTTP Authorization Header Information Exposure Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-43432 \nPublished : Nov. 11, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"11 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T15:15:57.000000Z"} {"uuid": "682c7ee3-050a-43cc-b4d5-81bbced2019f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43432", "type": "seen", "source": "https://t.me/cvedetector/10491", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43432 - Moodle HTTP Authorization Header Information Exposure Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-43432 \nPublished : Nov. 11, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : A flaw was found in moodle. The cURL wrapper in Moodle strips HTTPAUTH and USERPWD headers during emulated redirects, but retains other original request headers, so HTTP authorization header information could be unintentionally sent in requests to redirect URLs. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"11 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T15:15:57.000000Z"} https://db.gcve.eu/sighting/682c7ee3-050a-43cc-b4d5-81bbced2019f/export Mon, 11 Nov 2024 15:15:57 +0000 https://db.gcve.eu/sighting/b5f19727-08c4-413e-a5e0-940650b590ce/export {"uuid": "b5f19727-08c4-413e-a5e0-940650b590ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43430", "type": "seen", "source": "https://t.me/cvedetector/10490", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43430 - Moodle External API Access Control Overwrite\", \n \"Content\": \"CVE ID : CVE-2024-43430 \nPublished : Nov. 11, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : A flaw was found in moodle. External API access to Quiz can override contained insufficient access control. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"11 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T15:15:56.000000Z"} {"uuid": "b5f19727-08c4-413e-a5e0-940650b590ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43430", "type": "seen", "source": "https://t.me/cvedetector/10490", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-43430 - Moodle External API Access Control Overwrite\", \n \"Content\": \"CVE ID : CVE-2024-43430 \nPublished : Nov. 11, 2024, 1:15 p.m. | 35\u00a0minutes ago \nDescription : A flaw was found in moodle. External API access to Quiz can override contained insufficient access control. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"11 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-11T15:15:56.000000Z"} https://db.gcve.eu/sighting/b5f19727-08c4-413e-a5e0-940650b590ce/export Mon, 11 Nov 2024 15:15:56 +0000 https://db.gcve.eu/sighting/a732e753-525a-4783-95ff-fc59dc6ad730/export {"uuid": "a732e753-525a-4783-95ff-fc59dc6ad730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43437", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113464396104511348", "content": "", "creation_timestamp": "2024-11-11T12:48:06.854207Z"} {"uuid": "a732e753-525a-4783-95ff-fc59dc6ad730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43437", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113464396104511348", "content": "", "creation_timestamp": "2024-11-11T12:48:06.854207Z"} https://db.gcve.eu/sighting/a732e753-525a-4783-95ff-fc59dc6ad730/export Mon, 11 Nov 2024 12:48:06 +0000 https://db.gcve.eu/sighting/4c80bc47-8d7c-47ca-949b-2c0322206875/export {"uuid": "4c80bc47-8d7c-47ca-949b-2c0322206875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43435", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113464396090485915", "content": "", "creation_timestamp": "2024-11-11T12:48:06.498837Z"} {"uuid": "4c80bc47-8d7c-47ca-949b-2c0322206875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43435", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113464396090485915", "content": "", "creation_timestamp": "2024-11-11T12:48:06.498837Z"} https://db.gcve.eu/sighting/4c80bc47-8d7c-47ca-949b-2c0322206875/export Mon, 11 Nov 2024 12:48:06 +0000 https://db.gcve.eu/sighting/83fd4098-3c45-4754-9edf-cc625bdb9e94/export {"uuid": "83fd4098-3c45-4754-9edf-cc625bdb9e94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43433", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113464396074303145", "content": "", "creation_timestamp": "2024-11-11T12:48:06.298255Z"} {"uuid": "83fd4098-3c45-4754-9edf-cc625bdb9e94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-43433", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113464396074303145", "content": "", "creation_timestamp": "2024-11-11T12:48:06.298255Z"} https://db.gcve.eu/sighting/83fd4098-3c45-4754-9edf-cc625bdb9e94/export Mon, 11 Nov 2024 12:48:06 +0000