<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 09 Oct 2026 23:13:44 +0000</lastBuildDate>
    <item>
      <title>CERTFR-2015-AVI-228 — De multiples vulnérabilités ont été corrigées dans &lt;span
class="textit"&gt;Moodle&lt;/span&gt;. Elles permettent à un attaquant…</title>
      <link>https://vulnerability.circl.lu/vuln/CERTFR-2015-AVI-228</link>
      <description>CERTFR-2015-AVI-228</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/CERTFR-2015-AVI-228</guid>
    </item>
    <item>
      <title>bdu:2015-10892</title>
      <link>https://vulnerability.circl.lu/vuln/bdu:2015-10892</link>
      <description>bdu:2015-10892</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/bdu:2015-10892</guid>
    </item>
    <item>
      <title>cnvd-2015-03316</title>
      <link>https://vulnerability.circl.lu/vuln/cnvd-2015-03316</link>
      <description>cnvd-2015-03316</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cnvd-2015-03316</guid>
    </item>
    <item>
      <title>fkie_cve-2015-3179</title>
      <link>https://vulnerability.circl.lu/vuln/fkie_cve-2015-3179</link>
      <description>&lt;p&gt;login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/fkie_cve-2015-3179</guid>
    </item>
    <item>
      <title>GHSA-4ppg-2mx6-fqx9 — Moodle allows attackers to bypass intended login restrictions</title>
      <link>https://vulnerability.circl.lu/vuln/ghsa-4ppg-2mx6-fqx9</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Packagist: moodle/moodle&lt;/p&gt;
&lt;p&gt;login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Packagist: moodle/moodle&lt;/p&gt;
&lt;p&gt;login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ghsa-4ppg-2mx6-fqx9</guid>
    </item>
    <item>
      <title>gsd-2015-3179</title>
      <link>https://vulnerability.circl.lu/vuln/gsd-2015-3179</link>
      <description>gsd-2015-3179</description>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/gsd-2015-3179</guid>
    </item>
    <item>
      <title>Withdrawn: UBUNTU-CVE-2015-3179</title>
      <link>https://vulnerability.circl.lu/vuln/ubuntu-cve-2015-3179</link>
      <description>&lt;p&gt;&lt;strong&gt;Withdrawn by the publisher.&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:16.04:LTS: moodle, Ubuntu:18.04:LTS: moodle&lt;/p&gt;
&lt;p&gt;login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Withdrawn by the publisher.&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:16.04:LTS: moodle, Ubuntu:18.04:LTS: moodle&lt;/p&gt;
&lt;p&gt;login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ubuntu-cve-2015-3179</guid>
    </item>
  </channel>
</rss>
