PT-2021-16810 · Cosmos Network · Ethermint

Name of the Vulnerable Software and Affected Versions: Cosmos Network Ethermint versions = v0.4.0 Description: The issue is related to a cross-chain transaction replay vulnerability in the EVM module. This vulnerability is caused by the use of the same chainID and signature schemes with Ethereum...

Ethereum Aleth Denial of Service Vulnerability

Ethereum Aleth is a C++-based client application from the Ethereum community that supports the Ethereum protocol. A denial of service vulnerability exists in Aleth Ethereum C++ client version =1.8.0, which originates in the config.json file and may result in a denial of service. No details of the...

Ethereum Go-ethereum Resource Management Error Vulnerability

Ethereum Go-ethereum is a codebase from the Ethereum community that implements the ethereum protocol in the Go language. A security vulnerability exists in Ethereum Go-ethereum versions prior to 1.9.25, which stems from a denial of service vulnerability that can crash the LES server via a malicio...

CVE-2020-26800

A stack overflow vulnerability in Aleth Ethereum C++ client version = 1.8.0 using a specially crafted a config.json file may result in a denial of service...

CVE-2020-26800

A stack overflow vulnerability in Aleth Ethereum C++ client version = 1.8.0 using a specially crafted a config.json file may result in a denial of service...

Stack overflow

A stack overflow vulnerability in Aleth Ethereum C++ client version = 1.8.0 using a specially crafted a config.json file may result in a denial of service...

CVE-2020-26800

The CVE-2020-26800 entry concerns Aleth Ethereum C++ client, affected in versions

CVE-2020-26800

A stack overflow vulnerability in Aleth Ethereum C++ client version = 1.8.0 using a specially crafted a config.json file may result in a denial of service...

Ethereum Aleth 缓冲区错误漏洞

Ethereum Aleth is a C++-based client application from the Ethereum community that supports the Ethereum protocol. A denial of service vulnerability exists in Aleth Ethereum C++ client version =1.8.0, which originates in the config.json file and may result in a denial of service. No details of the...

Code injection

The sellTokenForLRC function in the vault protocol in the smart contract implementation for Loopring LRC, an Ethereum token, lacks access control for fee swapping and thus allows price manipulation...

CVE-2020-35962

The sellTokenForLRC function in the vault protocol in the smart contract implementation for Loopring LRC, an Ethereum token, lacks access control for fee swapping and thus allows price manipulation...

CVE-2020-35962

The CVE-2020-35962 issue affects Loopring (LRC) by the vault protocol’s sellTokenForLRC function in its smart contract, which lacks access control for fee swapping. This vulnerability enables price manipulation within the on-chain logic. The documented impact is a HIGH severity in CVSS 3.1 (I:H) ...

Design/Logic Flaw

The breed function in the smart contract implementation for Farm in Seal Finance Seal, an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021...

CVE-2021-3006

The breed function in the smart contract implementation for Farm in Seal Finance Seal, an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021...

CVE-2021-3006

The CVE-2021-3006 entry concerns the Seal Finance (Seal) Ethereum token. The breed function in its smart contract lacks access control, enabling price manipulation. Exploitation occurred in the wild during December 2020 and January 2021. The available documents confirm the root cause (unauthorize...

CVE-2021-3006

The breed function in the smart contract implementation for Farm in Seal Finance Seal, an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021...

CVE-2021-3004

The deposit function in the smart contract implementation for Stable Yield Credit yCREDIT, an Ethereum token, has certain incorrect calculations. An attacker can obtain more yCREDIT tokens than they should...

Design/Logic Flaw

The deposit function in the smart contract implementation for Stable Yield Credit yCREDIT, an Ethereum token, has certain incorrect calculations. An attacker can obtain more yCREDIT tokens than they should...

CVE-2021-3004

The deposit function in the smart contract implementation for Stable Yield Credit yCREDIT, an Ethereum token, has certain incorrect calculations. An attacker can obtain more yCREDIT tokens than they should...

CVE-2021-3004

Technical details about CVE-2021-3004 are not present in the connected documents. The description notes incorrect calculations in the yCREDIT deposit function, but no vendor/version/exploit specifics are supplied here; monitor for updates.