Universityofcalifornia

10 CVEs across 2 Universityofcalifornia products. Browse Universityofcalifornia vulnerabilities, severities, and proof-of-concept exploits.

Universityofcalifornia products with known CVEs

ProductCVEs
Boinc Client5
Boinc Server5
Universityofcalifornia CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-0669High8.82025-05-07Cross-Site Request Forgery (CSRF) vulnerability in BOINC Server allows Cross Site Request Forgery.This issue affects BOINC Server: before 1.4.3.
CVE-2025-0668Critical9.82025-05-07Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects…
CVE-2025-0667Medium5.42025-05-07Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects…
CVE-2025-0666Medium5.42025-05-07Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BOINC Server allows Stored XSS.This issue affects…
CVE-2013-2018Critical9.82020-02-20Multiple SQL injection vulnerabilities in BOINC allow remote attackers to execute arbitrary SQL commands via unspecified vectors.
CVE-2018-1000875Critical9.82018-12-20Berkeley Open Infrastructure for Network Computing BOINC Server and Website Code version 0.9-1.0.2 contains a CWE-302: Authentication Bypass by Assumed-Immutab…
CVE-2013-73862014-06-02Format string vulnerability in the PROJECT::write_account_file function in client/cs_account.cpp in BOINC, possibly 7.2.33, allows remote attackers to cause a…
CVE-2013-22982014-06-02Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the schedule…
CVE-2013-20192014-06-02Stack-based buffer overflow in BOINC 6.10.58 and 6.12.34 allows remote attackers to have unspecified impact via multiple file_signature elements.
CVE-2011-52802014-06-02Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a denial of service (crash) via a long trickle-up to (1) client/cs_trickl…