1840 matches found
SingaporeCoinOrigin Digital Error Vulnerability
SingaporeCoinOrigin SCO is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'sell' function in SCO's smart contract implementation. An attacker can exploit this vulnerability by setting the sell price to a large value to execute arbitrary code on the system...
CVE-2020-6270
SAP NetWeaver AS ABAP Banking Services, versions - 710, 711, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not perform necessary authorization checks for an authenticated user due to Missing Authorization Check, allowing wrong and unexpected change of individual conditions by a malicious user...
PT-2020-19065 · Sap · Sap Netweaver As Abap
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP Banking Services versions 710, 711, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E Description: The issue arises due to a missing authorization check, allowing an authenticated user to make unauthorized changes to individua...
osake.good-price-japan.com Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1189595 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
CVE-2019-20809
The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to set an invalid asset price via the setPrice function, and consequently violate the intended limits on price swings...
CVE-2019-20809
The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to set an invalid asset price via the setPrice function, and consequently violate the intended limits on price swings...
Design/Logic Flaw
The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to set an invalid asset price via the setPrice function, and consequently violate the intended limits on price swings...
CVE-2019-20809
The price oracle in PriceOracle.sol in Compound Finance Compound Price Oracle 1.0 through 2.0 allows a price poster to set an invalid asset price via the setPrice function, and consequently violate the intended limits on price swings...
CVE-2019-20809
CVE-2019-20809 affects Compound Finance’s PriceOracle.sol (Compound Price Oracle 1.0–2.0). A price poster can call setPrice to set an invalid asset price, violating intended swing limits and potentially manipulating downstream pricing. Exploitation details are not provided in the connected docume...
The vulnerability of the User Interface sub-component of the Oracle Financial Services Price Creation and Discovery component in the bank analytics system’s simulation model allows a perpetrator to create, delete, or modify access rights to protected information, or gain read-only access to data.
The vulnerability of the User Interface sub-component of the Oracle Financial Services Price Creation and Discovery component in the bank analytics system’s simulation model relates to the lack of protection for operational data. Exploiting this vulnerability allows an attacker to create, delete,...
Gold Reward has a flawed logic vulnerability
Gold Reward GRX is an ethereum-based virtual currency.A security vulnerability in the 'sell' function in the smart contract implementation of GRX arises from the ability of an attacker to specify a selling price. The vulnerability can be exploited by an attacker to cause financial loss to the buy...
SwftCoin has a logic flaw vulnerability
SwftCoin SWFTC is an ethereum-based virtual currency. The 'buy' function in SWFTC's smart contract implementation has a security vulnerability that stems from the fact that an attacker can specify the price at which to buy. The vulnerability can be exploited by an attacker to cause financial loss...
Logic Flaw Vulnerability in Internet Node Token
Internet Node Token TNT is an ethereum-based virtual currency. A security vulnerability exists in the 'sell' function in INT's smart contract implementation, which stems from the ability of an attacker to specify a selling price. The vulnerability can be exploited by an attacker to cause a...
Talos Incident Response announces new, lower price through July 25
Today’s world looks very different than three months ago. More people work remotely than ever before. IT teams work around the clock to expand capacity and new software and services are being deployed to handle the load. Within this new remote environment, we have seen new malware families and...
DedeCMS 7.5 SP2 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Title: DedeCMS 7.5 SP2 - Persistent Cross-Site Scripting Vendor Link: http://www.dedecms.com Software Link: http://www.dedecms.com/products/dedecms/downloads/ CVE: N/A Document Title: =============== DedeCMS v7.5 SP2 - Multiple Persistent Web...
Unspecified Vulnerability in Oracle Financial Services Applications Financial Services Price Creation and Discovery
Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking and property management. An unspecified vulnerability exists in Oracle Financial Services Applications Financial Services Price Creation and Discover...
CVE-2020-2942
Vulnerability in the Oracle Financial Services Price Creation and Discovery product of Oracle Financial Services Applications component: User Interface. The supported version that is affected is 8.0.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2020-2942
Vulnerability in the Oracle Financial Services Price Creation and Discovery product of Oracle Financial Services Applications component: User Interface. The supported version that is affected is 8.0.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
Design/Logic Flaw
Vulnerability in the Oracle Financial Services Price Creation and Discovery product of Oracle Financial Services Applications component: User Interface. The supported version that is affected is 8.0.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2020-2942
Vulnerability in the Oracle Financial Services Price Creation and Discovery product of Oracle Financial Services Applications component: User Interface. The supported version that is affected is 8.0.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...