Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: BOINC Component: Boinc Server Clear all filters
TI-2025-00563 CVE-2025-0669 · GHSA-rh9j-3chv-xw4h

BOINC Server Cross-Site Request Forgery

Priority HIGH 78

Cross-Site Request Forgery (CSRF) vulnerability in BOINC Server allows Cross Site Request Forgery.This issue affects BOINC Server: before 1.4.3.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00244 Published 2025-05-07 Fixed in 1.4.3 CWE-352
TI-2025-00562 CVE-2025-0668 · GHSA-j6c5-42fq-c3hr

BOINC Server Multiple SQL Injections

Priority MEDIUM 49

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: before 1.4.5.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00609 Published 2025-05-07 Fixed in 1.4.5 CWE-89
TI-2025-00561 CVE-2025-0667 · GHSA-r9w7-5f7h-f659

BOINC Server Stored XSS Injection in pm.php

Priority HIGH 79

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: through 1.4.7.

CVSS 4.0HIGH 8.7 Network No auth User interaction EPSS 0.00269 Published 2025-05-07 No fix listed CWE-79
TI-2025-00560 CVE-2025-0666 · GHSA-jm7c-x6r9-pc54

BOINC Server Stored XSS Injection in host_venue_action.php

Priority MEDIUM 64

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: through 1.4.7.

CVSS 4.0HIGH 7.0 Network No auth User interaction EPSS 0.00269 Published 2025-05-07 No fix listed CWE-79
TI-2018-16094 CVE-2018-1000875 · GHSA-8qvf-w7vv-ppqv

Berkeley Open Infrastructure for Network Computing BOINC Server and Website Code version…

Priority MEDIUM 46

Berkeley Open Infrastructure for Network Computing BOINC Server and Website Code version 0.9-1.0.2 contains a CWE-302: Authentication Bypass by Assumed-Immutable Data vulnerability in Website Terms of Service Acceptance…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01877 Published 2018-12-20 No fix listed