Lucene search
+L

5843 matches found

VulnCheck KEV
VulnCheck KEV
•added 2018/05/22 12:00 a.m.•15 views

VulnCheck KEV: CVE-2018-11329

The DrugDealer function of a smart contract implementation for Ether Cartel, an Ethereum game, allows attackers to take over the contract's ownership, aka ceoAnyone. After that, all the digital assets including Ether balance and tokens might be manipulated by the attackers, as exploited in the wi...

7.5CVSS7.2AI score0.00868EPSS
SaveIn wildExploits1References2
Prion
Prion
•added 2018/05/19 6:29 p.m.•29 views

Integer overflow

An integer overflow in the transfer function of a smart contract implementation for Hexagon HXG, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a to argument in conjunction with a large value argument, as exploited in the wild in Ma...

5CVSS7.6AI score0.00912EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2018/05/19 6:00 p.m.•35 views

CVE-2018-11239

An integer overflow in the transfer function of a smart contract implementation for Hexagon HXG, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a to argument in conjunction with a large value argument, as exploited in the wild in Ma...

7.7AI score0.00912EPSS
SaveExploits2References1
CVE
CVE
•added 2018/05/19 6:00 p.m.•85 views

CVE-2018-11239

The Hexagon (HXG) Ethereum ERC20 token is vulnerable to an integer overflow in its _transfer function, known as the "burnOverflow" issue. By providing a large _value argument (e.g., 0xffff...fffe) in conjunction with a _to argument, an attacker can trigger an overflow when the contract calculates...

7.5CVSS7.6AI score0.00912EPSS
SaveIn wildExploits2References1Affected Software1
VulnCheck KEV
VulnCheck KEV
•added 2018/05/19 12:00 a.m.•12 views

VulnCheck KEV: CVE-2018-11239

An integer overflow in the transfer function of a smart contract implementation for Hexagon HXG, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets by providing a to argument in conjunction with a large value argument, as exploited in the wild in Ma...

7.5CVSS7.3AI score0.00912EPSS
SaveIn wildExploits2References2
CNVD
CNVD
•added 2018/05/16 12:00 a.m.•12 views

Unspecified vulnerability in ROC 'request_divend' function

ROC aka Rasputin Online Coin is a virtual currency. There is a security vulnerability in the 'requestdivend' function in ROC's smart contract implementation. An attacker could use this vulnerability to steal the entire contract's Ether...

5.9CVSS5.8AI score0.00968EPSS
SaveExploits1References1
CNVD
CNVD
•added 2018/05/15 12:00 a.m.•16 views

KoreaShow Integer Overflow Vulnerability

KoreaShow is a system for trading cryptocurrencies. An integer overflow vulnerability exists in the 'transferMulti' function of the smart contract implementation in KoreaShow. An attacker can exploit this vulnerability to increase digital assets with the help of the 'value' parameter...

7.5CVSS7.1AI score0.00912EPSS
SaveExploits2References1
Prion
Prion
•added 2018/05/14 1:29 a.m.•19 views

Design/Logic Flaw

The requestdividend function of a smart contract implementation for ROC aka Rasputin Online Coin, an Ethereum ERC20 token, allows attackers to steal all of the contract's Ether...

4.3CVSS5.7AI score0.00968EPSS
SaveExploits1References1
NVD
NVD
•added 2018/05/14 1:29 a.m.•22 views

CVE-2018-10944

The requestdividend function of a smart contract implementation for ROC aka Rasputin Online Coin, an Ethereum ERC20 token, allows attackers to steal all of the contract's Ether...

5.9CVSS5.7AI score0.00968EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2018/05/14 1:00 a.m.•28 views

CVE-2018-10944

The requestdividend function of a smart contract implementation for ROC aka Rasputin Online Coin, an Ethereum ERC20 token, allows attackers to steal all of the contract's Ether...

5.7AI score0.00968EPSS
SaveExploits1References1
CVE
CVE
•added 2018/05/14 1:00 a.m.•68 views

CVE-2018-10944

CVE-2018-10944 concerns ROC (Rasputin Online Coin), an Ethereum ERC20 token. The smart contract’s request_dividend() function is vulnerable: it computes holder_token_balance and holder_profit and then sends Ether to the address without updating the sender’s balance, and it is declared public with...

5.9CVSS5.7AI score0.00968EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/05/14 12:00 a.m.•4 views

CVE-2018-10944: Undefined Security Weakness

The requestdividend function of a smart contract implementation for ROC aka Rasputin Online Coin, an Ethereum ERC20 token, allows attackers to steal all of the contract's Ether...

5.9CVSS6.2AI score0.00968EPSS
SaveExploits1References1
CNVD
CNVD
•added 2018/05/11 12:00 a.m.•14 views

Aurora DAO Denial of Service Vulnerability

Aurora DAO AURA is a decentralized trading system for Ether ECR-20 tokens. A security vulnerability exists in the Owned smart contract implementation in AURA. An attacker could exploit the vulnerability to gain ownership of the contract, causing a denial of service...

7.5CVSS6.9AI score0.01092EPSS
SaveExploits2References1
NVD
NVD
•added 2018/05/10 5:29 p.m.•31 views

CVE-2018-10706

An integer overflow in the transferMulti function of a smart contract implementation for Social Chain SCA, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets, aka the "multiOverflow" issue...

7.5CVSS7.6AI score0.00945EPSS
SaveExploits2References1
Prion
Prion
•added 2018/05/10 5:29 p.m.•23 views

Integer overflow

An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters...

5CVSS7.6AI score0.00912EPSS
SaveExploits2References1
NVD
NVD
•added 2018/05/10 5:29 p.m.•32 views

CVE-2018-10973

An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters...

7.5CVSS7.6AI score0.00912EPSS
SaveExploits2References1
Prion
Prion
•added 2018/05/10 5:29 p.m.•23 views

Integer overflow

An integer overflow in the transferMulti function of a smart contract implementation for Social Chain SCA, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets, aka the "multiOverflow" issue...

5CVSS7.6AI score0.00945EPSS
SaveExploits2References1
CVE
CVE
•added 2018/05/10 5:00 p.m.•58 views

CVE-2018-10973

KoreaShow (an Ethereum ERC20 token) is affected by CVE-2018-10973 due to an integer overflow in the transferMulti function. The vulnerability arises from accumulating _value into amount with a for loop and then transferring funds, allowing a crafted _value array to overflow the total and bypass b...

7.5CVSS7.6AI score0.00912EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2018/05/10 5:00 p.m.•32 views

CVE-2018-10973

An integer overflow in the transferMulti function of a smart contract implementation for KoreaShow, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted value parameters...

7.6AI score0.00912EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2018/05/10 5:00 p.m.•36 views

CVE-2018-10706

An integer overflow in the transferMulti function of a smart contract implementation for Social Chain SCA, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets, aka the "multiOverflow" issue...

7.6AI score0.00945EPSS
SaveExploits2References1
Rows per page
Query Builder