https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T10:23:29.324437+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-04398 cnvd-2016-04398 2026-10-05T10:23:29.415974+00:00 cnvd-2016-04398 https://cve.radiocsirt.org/vuln/euvd-2026-85354 EUVD-2026-85354 2026-10-05T10:23:29.416017+00:00 EUVD-2026-85354 https://cve.radiocsirt.org/vuln/fkie_cve-2016-5739 fkie_cve-2016-5739 2026-10-05T10:23:29.416032+00:00

The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy (CSP) protection mechanism, which makes it easier for remote attackers to conduct CSRF attacks by reading an authentication token in a Referer header, related to libraries/Header.php.

 https://cve.radiocsirt.org/vuln/ghsa-2p7v-jm8m-g3qq GHSA-2p7v-jm8m-g3qq — phpMyAdmin vulnerable to Cross-Site Request Forgery 2026-10-05T10:23:29.416067+00:00

Affected: Packagist: phpmyadmin/phpmyadmin

The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy (CSP) protection mechanism, which makes it easier for remote attackers to conduct CSRF attacks by reading an authentication token in a Referer header, related to libraries/Header.php.

 https://cve.radiocsirt.org/vuln/gsd-2016-5739 gsd-2016-5739 2026-10-05T10:23:29.416096+00:00 gsd-2016-5739 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10054-1 openSUSE-SU-2024:10054-1 — phpMyAdmin-4.6.5.2-1.1 on GA media 2026-10-05T10:23:29.416109+00:00

phpMyAdmin-4.6.5.2-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-5739 UBUNTU-CVE-2016-5739 2026-10-05T10:23:29.416197+00:00

Affected: Ubuntu:Pro:14.04:LTS: phpmyadmin, Ubuntu:Pro:16.04:LTS: phpmyadmin

The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy (CSP) protection mechanism, which makes it easier for remote attackers to conduct CSRF attacks by reading an authentication token in a Referer header, related to libraries/Header.php.