5081 matches found
CVE-2012-1909
The Bitcoin protocol, as used in bitcoind before 0.4.4, wxBitcoin, Bitcoin-Qt, and other programs, does not properly handle multiple transactions with the same identifier, which allows remote attackers to cause a denial of service unspendable transaction by leveraging the ability to create a...
CVE-2010-5138
Removed by vendor...
CVE-2012-1909
CVE-2012-1909 affects the Bitcoin protocol implementations (e.g., bitcoind before 0.4.4, wxBitcoin, Bitcoin-Qt). The vulnerability arises from improper handling of multiple transactions sharing the same identifier, enabling remote attackers to trigger a denial of service by creating a duplicate c...
CVE-2010-5141
The CVE-2010-5141 issue affects bitcoind and wxBitcoin up to version 0.3.4, with the root cause being improper handling of script opcodes in Bitcoin transactions. The vulnerability allows remote attackers to spend bitcoins owned by other users via unspecified vectors, as described in the provided...
CVE-2010-5137
The CVE-2010-5137 entry affects wxBitcoin and bitcoind prior to 0.3.5, where processing a Bitcoin transaction containing an OP_LSHIFT script opcode can trigger a daemon crash (DoS). The vulnerability is described consistently across multiple sources (Red Hat, Ubuntu, Debian security trackers, CVE...
CVE-2010-5140
CVE-2010-5140 affects wxBitcoin and bitcoind prior to 0.3.13. The issue arises when handling bitcoins in transactions with zero confirmations, enabling a remote attacker to trigger a denial-of-service through an invalid-transaction flood by sending low-value transactions without fees. The describ...
CVE-2010-5138
wxBitcoin and bitcoind 0.3.x allow remote attackers to cause a denial of service electricity consumption via a Bitcoin transaction containing multiple OPCHECKSIG script opcodes...
CVE-2010-5141
Removed by vendor...
CVE-2012-1909: Undefined Security Weakness
The Bitcoin protocol, as used in bitcoind before 0.4.4, wxBitcoin, Bitcoin-Qt, and other programs, does not properly handle multiple transactions with the same identifier, which allows remote attackers to cause a denial of service unspendable transaction by leveraging the ability to create a...
CVE-2010-5140: Improper Restriction of Operations within the Bounds of a Memory Buffer
wxBitcoin and bitcoind before 0.3.13 do not properly handle bitcoins associated with Bitcoin transactions that have zero confirmations, which allows remote attackers to cause a denial of service invalid-transaction flood by sending low-valued transactions without transaction fees...
CVE-2010-5138: Undefined Security Weakness
wxBitcoin and bitcoind 0.3.x allow remote attackers to cause a denial of service electricity consumption via a Bitcoin transaction containing multiple OPCHECKSIG script opcodes...
Researchers Find Serious Flaws in Popular Point-of-Sale System
A security researcher has found several serious vulnerabilities in a widely deployed point-of-sale system that enables an attacker to change transactions, steal card data and take other malicious actions. The attacks could be executed remotely under certain circumstances or done through a local...
CentOS 5 : kernel (CESA-2012:1061)
Updated kernel packages that fix one security issue and multiple bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...
USN-1414-1: Aptdaemon vulnerability
It was discovered that Aptdaemon incorrectly handled installing packages without performing a transaction simulation. An attacker could possibly use this flaw to install altered packages...
CVE-2011-3955
Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors that trigger the aborting of an IndexedDB transaction...
Design/Logic Flaw
Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via vectors that trigger the aborting of an IndexedDB transaction...
CVE-2011-3955
Removed by vendor...
Postal savings banks the UKEY useless-vulnerability warning-the black bar safety net
Today to the postal Savings Bank postal savings bank of china to go to the opening of the postal green card through the online banking, in order to safeguard the Bank account of the funding security, the requirements for online banking opened UKEY protection, the Bank staff attitude good, and...
Facing Post-Transaction Attacks, Banks Should Reassess Fraud Protection
Banks will have to continue to upgrade their fraud protection controls, especially in the face of new and evolving attacks exclusively designed to evade them, researchers now say. A blog post, penned by Trusteer’s CTO Amit Klein, offers some research on these so-called post-transaction attack...
