Filtered by vendor Universityofcalifornia Subscriptions
Filtered by product Boinc Server Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-1000875 1 Universityofcalifornia 1 Boinc Server 2025-07-08 9.8 Critical
Berkeley Open Infrastructure for Network Computing BOINC Server and Website Code version 0.9-1.0.2 contains a CWE-302: Authentication Bypass by Assumed-Immutable Data vulnerability in Website Terms of Service Acceptance Page that can result in Access to any user account. This attack appear to be exploitable via Specially crafted URL. This vulnerability appears to have been fixed in 1.0.3.
CVE-2025-0669 1 Universityofcalifornia 1 Boinc Server 2025-07-08 8.8 High
Cross-Site Request Forgery (CSRF) vulnerability in BOINC Server allows Cross Site Request Forgery.This issue affects BOINC Server: before 1.4.3.
CVE-2025-0667 1 Universityofcalifornia 1 Boinc Server 2025-07-08 5.4 Medium
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: through 1.4.7.
CVE-2025-0668 1 Universityofcalifornia 1 Boinc Server 2025-07-08 9.8 Critical
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: before 1.4.5.
CVE-2025-0666 1 Universityofcalifornia 1 Boinc Server 2025-07-08 5.4 Medium
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects BOINC Server: through 1.4.7.