https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 10:52:12 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-04398 cnvd-2016-04398 https://cve.radiocsirt.org/vuln/cnvd-2016-04398 https://cve.radiocsirt.org/vuln/euvd-2026-85354 EUVD-2026-85354 https://cve.radiocsirt.org/vuln/euvd-2026-85354 https://cve.radiocsirt.org/vuln/fkie_cve-2016-5739 <p>The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy (CSP) protection mechanism, which makes it easier for remote attackers to conduct CSRF attacks by reading an authentication token in a Referer header, related to libraries/Header.php.</p> <p>The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy (CSP) protection mechanism, which makes it easier for remote attackers to conduct CSRF attacks by reading an authentication token in a Referer header, related to libraries/Header.php.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-5739 https://cve.radiocsirt.org/vuln/ghsa-2p7v-jm8m-g3qq <p><strong>Affected:</strong> Packagist: phpmyadmin/phpmyadmin</p> <p>The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy (CSP) protection mechanism, which makes it easier for remote attackers to conduct CSRF attacks by reading an authentication token in a Referer header, related to libraries/Header.php.</p> <p><strong>Affected:</strong> Packagist: phpmyadmin/phpmyadmin</p> <p>The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy (CSP) protection mechanism, which makes it easier for remote attackers to conduct CSRF attacks by reading an authentication token in a Referer header, related to libraries/Header.php.</p> https://cve.radiocsirt.org/vuln/ghsa-2p7v-jm8m-g3qq https://cve.radiocsirt.org/vuln/gsd-2016-5739 gsd-2016-5739 https://cve.radiocsirt.org/vuln/gsd-2016-5739 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10054-1 <p>phpMyAdmin-4.6.5.2-1.1 on GA media</p> <p>phpMyAdmin-4.6.5.2-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10054-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-5739 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: phpmyadmin, Ubuntu:Pro:16.04:LTS: phpmyadmin</p> <p>The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy (CSP) protection mechanism, which makes it easier for remote attackers to conduct CSRF attacks by reading an authentication token in a Referer header, related to libraries/Header.php.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: phpmyadmin, Ubuntu:Pro:16.04:LTS: phpmyadmin</p> <p>The Transformation implementation in phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not use the no-referrer Content Security Policy (CSP) protection mechanism, which makes it easier for remote attackers to conduct CSRF attacks by reading an authentication token in a Referer header, related to libraries/Header.php.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-5739