Lucene search
+L

6 matches found

CNVD
CNVD
•added 2018/05/03 12:00 a.m.•18 views

Useless Ethereum Token Information Disclosure Vulnerability

Useless Ethereum Token UET is a virtual currency. A security vulnerability exists in the 'transferFrom' function implemented by smart contract in UET, which stems from the program's failure to correctly compute calculations containing the 'value' parameter. The vulnerability can be exploited by a...

7.5CVSS6.9AI score0.01541EPSS
SaveExploits3References1
NVD
NVD
•added 2018/04/28 1:29 p.m.•33 views

CVE-2018-10468

The transferFrom function of a smart contract implementation for Useless Ethereum Token UET, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all victims' balances into their account because certain computations involving value are incorrect, as exploited in the wild...

7.5CVSS7.5AI score0.01541EPSS
SaveExploits3References2
CVE
CVE
•added 2018/04/28 1:00 p.m.•86 views

CVE-2018-10468

The transferFrom function in the Useless Ethereum Token (UET) smart contract, an Ethereum ERC20 token, contains a logic flaw known as "transferFlaw" . Due to incorrect computations involving the _value parameter, an attacker can cause a balance overflow to steal assets, potentially transferring a...

7.5CVSS7.4AI score0.01541EPSS
SaveIn wildExploits3References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/28 12:00 a.m.•12 views

CVE-2018-10468: Improper Input Validation

The transferFrom function of a smart contract implementation for Useless Ethereum Token UET, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all victims' balances into their account because certain computations involving value are incorrect, as exploited in the wild...

7.5CVSS7.2AI score0.01541EPSS
SaveExploits3References2
VulnCheck KEV
VulnCheck KEV
•added 2018/04/28 12:00 a.m.•20 views

VulnCheck KEV: CVE-2018-10468

The transferFrom function of a smart contract implementation for Useless Ethereum Token UET, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all victims' balances into their account because certain computations involving value are incorrect, as exploited in the wild...

7.5CVSS7.2AI score0.01541EPSS
SaveIn wildExploits3References3
Positive Technologies
Positive Technologies
•added 2018/04/28 12:00 a.m.•8 views

PT-2018-9887

Name of the Vulnerable Software and Affected Versions: Useless Ethereum Token UET affected versions not specified Description: The issue concerns a smart contract implementation for an Ethereum ERC20 token, where the transferFrom function allows attackers to steal assets by transferring all...

7.5CVSS5.6AI score0.01541EPSS
SaveExploits3References5
Rows per page
Query Builder