Lucene search
+L

15 matches found

NVD
NVD
•added 2020/07/30 3:15 p.m.•35 views

CVE-2020-15130

In SLPJS npm package slpjs before version 0.27.4, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any of the NFT1...

7.5CVSS7.3AI score0.01036EPSS
SaveExploits0References2
NVD
NVD
•added 2020/07/30 3:15 p.m.•39 views

CVE-2020-15131

In SLP Validate npm package slp-validate before version 1.2.2, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any ...

7.5CVSS7.4AI score0.01036EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2020/07/30 3:15 p.m.•39 views

CVE-2020-15131

In SLP Validate npm package slp-validate before version 1.2.2, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any ...

7.5CVSS7.4AI score
SaveExploits0References2
osv_cve
osv_cve
•added 2020/07/30 3:15 p.m.•27 views

CVE-2020-15130

In SLPJS npm package slpjs before version 0.27.4, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any of the NFT1...

7.5CVSS7.4AI score
SaveExploits0References2
Prion
Prion
•added 2020/07/30 3:15 p.m.•37 views

Input validation

In SLP Validate npm package slp-validate before version 1.2.2, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any ...

5CVSS7.3AI score0.01036EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2020/07/30 3:15 p.m.•28 views

Input validation

In SLPJS npm package slpjs before version 0.27.4, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any of the NFT1...

5CVSS7.3AI score0.01036EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2020/07/30 3:00 p.m.•6 views

CVE-2020-15130

In SLPJS npm package slpjs before version 0.27.4, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any of the NFT1...

8.7CVSS0.01036EPSS
SaveExploits0References3
CVE
CVE
•added 2020/07/30 3:00 p.m.•68 views

CVE-2020-15131

The CVE-2020-15131 issue affects the npm package slp-validate prior to v1.2.2, where a wallet could yield false‑positive NFT1 Child Genesis validations (NFT1 tokens could appear valid without burning the NFT1 Group token as required by the NFT1 spec). This is a software validation flaw in the NFT...

7.5CVSS7.3AI score0.01036EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/07/30 3:00 p.m.•47 views

CVE-2020-15131 False-positive validity for NFT1 genesis transactions in SLP Validate

In SLP Validate npm package slp-validate before version 1.2.2, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any ...

7.5CVSS7.4AI score0.01036EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2020/07/30 2:58 p.m.•64 views

False-positive validity for NFT1 genesis transactions

Impact In the npm package named "slp-validate", versions prior to 1.2.2 are vulnerable to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any o...

7.5CVSS0.9AI score0.01036EPSS
SaveExploits0References4Affected Software1
Github Security Blog
Github Security Blog
•added 2020/07/30 2:58 p.m.•65 views

False-positive validity for NFT1 genesis transactions in SLPJS

Impact In the npm package named "slpjs", versions prior to 0.27.4 are vulnerable to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any of the...

7.5CVSS0.8AI score0.01036EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2020/07/30 12:00 a.m.•8 views

PT-2020-14210

Name of the Vulnerable Software and Affected Versions slpjs versions prior to 0.27.4 Description The issue concerns false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child...

7.5CVSS0.01036EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/30 12:00 a.m.•8 views

CVE-2020-15131: Incorrect Comparison

In SLP Validate npm package slp-validate before version 1.2.2, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any ...

7.5CVSS5.9AI score0.01036EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2020/07/30 12:00 a.m.•6 views

PT-2020-14211

Name of the Vulnerable Software and Affected Versions slp-validate versions prior to 1.2.2 Description The issue concerns false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1...

7.5CVSS0.01036EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/30 12:00 a.m.•9 views

CVE-2020-15130: Incorrect Comparison

In SLPJS npm package slpjs before version 0.27.4, there is a vulnerability to false-positive validation outcomes for the NFT1 Child Genesis transaction type. A poorly implemented SLP wallet or opportunistic attacker could create a seemingly valid NFT1 child token without burning any of the NFT1...

7.5CVSS5.9AI score0.01036EPSS
SaveExploits0References3
Rows per page
Query Builder