MyBO has a flawed logic vulnerability

MyBO is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in MyBO's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

Welfare Token Fund has a flawed logic vulnerability

Welfare Token Fund WTF is an Ether-based digital currency. An integer overflow vulnerability exists in the 'sell' function in the smart contract implementation of WTF. An attacker could exploit the vulnerability to prevent the seller from accessing the assets due to the exchange...

GSI has a logic flaw vulnerability

GSI is an Ether-based digital currency. An integer overflow vulnerability exists in the 'sell' function of GSI's smart contract implementation. An attacker could exploit the vulnerability to prevent the seller from accessing the assets due to the exchange...

ETHEREUMBLACK Logic Flaw Vulnerability

ETHEREUMBLACK ETCBK is an Ether-based digital currency. An integer overflow vulnerability exists in the 'sell' function in ETCBK's smart contract implementation. An attacker could exploit the vulnerability to prevent the seller from accessing the assets due to the exchange...

SwapToken has a flawed logic vulnerability

SwapToken is an Ether-based digital currency. An integer overflow vulnerability exists in the 'sell' function in SwapToken's smart contract implementation. An attacker could use this vulnerability to prevent the seller from obtaining the assets due to the exchange...

Logic Flaw Vulnerability in ETHERCASH

ETHERCASH ETC is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'sell' function of ETC's smart contract implementation. An attacker could exploit the vulnerability to prevent the seller from accessing the assets due to the exchange...

TongTong Coin Logic Flaw Vulnerability

TongTong Coin TTCoin is an Ether-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in TTCoin's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

OHNI has a flawed logic vulnerability

ohni2 OHNI is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'sell' function in OHNI's smart contract implementation. An attacker could exploit the vulnerability to prevent the seller from accessing the assets due to the exchange...

RiptideCoin has a logic flaw vulnerability

RiptideCoin RIPT is an Ether-based digital currency. An integer overflow vulnerability exists in the 'sell' function of RIPT's smart contract implementation. An attacker could exploit the vulnerability to prevent the seller from accessing the assets due to the exchange...

EPPCOIN Logic Flaw Vulnerability

EPPCOIN EPP is an ethereum-based digital currency. An integer overflow vulnerability exists in the 'mintToken' function in EPP's smart contract implementation. An attacker can exploit this vulnerability to set the balance of any user to an arbitrary value...

PT-2020-19005

Name of the Vulnerable Software and Affected Versions SAP Treasury and Risk Management Transaction Management versions 600, 603, 604, 605, 606, 616, 617, 618, 800 S4CORE versions 101, 102, 103, 104 Description The issue is related to a Missing Authorization Check in the selection query of SAP...

CVE-2019-20155

An issue was discovered in reportedit.jsp in Determine formerly Selectica Contract Lifecycle Management CLM v5.4. Any authenticated user may execute Groovy code when generating a report, resulting in arbitrary code execution on the underlying server...

CVE-2019-20154

An issue was discovered in Determine formerly Selectica Contract Lifecycle Management CLM v5.4. A cross-site scripting XSS vulnerability in multiple getchart.jsp parameters allows remote attackers to inject arbitrary web script or HTML...

CVE-2019-20153

An issue was discovered in Determine formerly Selectica Contract Lifecycle Management CLM in v5.4. An XML external entity XXE vulnerability in the upload definition feature in definitionuploadattach.jsp allows authenticated remote attackers to read arbitrary files including configuration files...

Code injection

An issue was discovered in reportedit.jsp in Determine formerly Selectica Contract Lifecycle Management CLM v5.4. Any authenticated user may execute Groovy code when generating a report, resulting in arbitrary code execution on the underlying server...

Cross site scripting

An issue was discovered in Determine formerly Selectica Contract Lifecycle Management CLM v5.4. A cross-site scripting XSS vulnerability in multiple getchart.jsp parameters allows remote attackers to inject arbitrary web script or HTML...

CVE-2019-20155

CVE-2019-20155 affects Determine CLM v5.4 (report_edit.jsp). The issue allows an authenticated user to cause Groovy code execution on the server during report generation, enabling arbitrary code execution. Affected component is the report generation flow in report_edit.jsp; root cause is code exe...

CVE-2019-20154

Determine Contract Lifecycle Management (CLM) v5.4 contains a Cross‑Site Scripting (XSS) vulnerability in multiple getchart.jsp parameters, enabling remote attackers to inject arbitrary web script or HTML. The affected component is CLM 5.4; root cause stems from inadequate input validation in get...

CVE-2019-20153

CVE-2019-20153 concerns Determine Contract Lifecycle Management (CLM) v5.4, where an XML External Entity (XXE) flaw in the upload definition feature (definition_upload_attach.jsp) allows authenticated remote attackers to read arbitrary files, including configuration files with administrative cred...

Determine Contract Lifecycle Management Input Validation Error Vulnerability

Determine Contract Lifecycle Management CLM is a suite of enterprise contract lifecycle management solutions from Determine Corporation. An input validation error vulnerability in the reportedit.jsp file in Determine CLM v5.4 can be exploited by an attacker to execute arbitrary code on this...