TI-2013-01790 CVE-2013-2018 · GHSA-xh9c-cqj7-g26j
SQL injection in BOINC
Priority MEDIUM 46
Multiple SQL injection vulnerabilities in BOINC allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
BOINC
Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
BOINC records in CISA KEVNo BOINC vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Boinc Client · all components
TI-2013-02047 CVE-2013-2298 · GHSA-pjjf-j58m-gr8m
Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to…
Priority MEDIUM 45
Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.
TI-2013-01791 CVE-2013-2019 · GHSA-qhx9-f5x8-c543
Stack-based buffer overflow in BOINC 6.10.58 and 6.12.34 allows remote attackers to have…
Priority MEDIUM 45
Stack-based buffer overflow in BOINC 6.10.58 and 6.12.34 allows remote attackers to have unspecified impact via multiple file_signature elements.
TI-2013-06050 CVE-2013-7386 · GHSA-gf7f-q52v-9537
Format string vulnerability in the PROJECT::write_account_file function in…
Priority LOW 30
Format string vulnerability in the PROJECT::write_account_file function in client/cs_account.cpp in BOINC, possibly 7.2.33, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code…
TI-2011-04553 CVE-2011-5280 · GHSA-x4mx-r8f8-rwrf
Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a…
Priority LOW 28
Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a denial of service (crash) via a long trickle-up to (1) client/cs_trickle.cpp or (2) db/db_base.cpp.