Read the docs

BOINC

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

BOINC records in CISA KEV

No BOINC vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Boinc Client 5 records MEDIUM Boinc Server 5 records HIGH

Records

5 records in Boinc Server · all components

TI-2025-00561 CVE-2025-0667 · GHSA-r9w7-5f7h-f659

BOINC Server Stored XSS Injection in pm.php

Priority HIGH 79

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: through 1.4.7.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00269 Published 2025-05-07 No fix listed CWE-79
TI-2025-00563 CVE-2025-0669 · GHSA-rh9j-3chv-xw4h

BOINC Server Cross-Site Request Forgery

Priority HIGH 78

Cross-Site Request Forgery (CSRF) vulnerability in BOINC Server allows Cross Site Request Forgery.This issue affects BOINC Server: before 1.4.3.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00244 Published 2025-05-07 Fixed in 1.4.3 CWE-352
TI-2025-00560 CVE-2025-0666 · GHSA-jm7c-x6r9-pc54

BOINC Server Stored XSS Injection in host_venue_action.php

Priority MEDIUM 64

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: through 1.4.7.

CVSS 4.0HIGH 7.0 Network No auth User interaction EPSS 0.00269 Published 2025-05-07 No fix listed CWE-79
TI-2025-00562 CVE-2025-0668 · GHSA-j6c5-42fq-c3hr

BOINC Server Multiple SQL Injections

Priority MEDIUM 49

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: before 1.4.5.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00609 Published 2025-05-07 Fixed in 1.4.5 CWE-89
TI-2018-16094 CVE-2018-1000875 · GHSA-8qvf-w7vv-ppqv

Berkeley Open Infrastructure for Network Computing BOINC Server and Website Code version…

Priority MEDIUM 46

Berkeley Open Infrastructure for Network Computing BOINC Server and Website Code version 0.9-1.0.2 contains a CWE-302: Authentication Bypass by Assumed-Immutable Data vulnerability in Website Terms of Service Acceptance…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01877 Published 2018-12-20 No fix listed
Open these records in search →