5613 matches found
CVE-2018-18425
The doAirdrop function of a smart contract implementation for Primeo PEO, an Ethereum token, does not check the numerical relationship between the amount of the air drop and the token's total supply, which lets the owner of the contract issue an arbitrary amount of currency. Increasing the total...
Hardcoded credentials
The doAirdrop function of a smart contract implementation for Primeo PEO, an Ethereum token, does not check the numerical relationship between the amount of the air drop and the token's total supply, which lets the owner of the contract issue an arbitrary amount of currency. Increasing the total...
CVE-2018-18425
CVE-2018-18425 concerns Primeo (PEO), an Ethereum token. The doAirdrop function does not enforce a correct relation between the airdropped amount and the token’s total supply, allowing the contract owner to issue arbitrary currency. This bypasses the hard cap written in the contract and can deval...
CVE-2018-18425
The doAirdrop function of a smart contract implementation for Primeo PEO, an Ethereum token, does not check the numerical relationship between the amount of the air drop and the token's total supply, which lets the owner of the contract issue an arbitrary amount of currency. Increasing the total...
CVE-2018-1961
IBM Emptoris Contract Management 10.0.0 and 10.1.3.0 could disclose sensitive information from detailed information from error messages. IBM X-Force ID: 153657...
Information disclosure
IBM Emptoris Contract Management 10.0.0 and 10.1.3.0 could disclose sensitive information from detailed information from error messages. IBM X-Force ID: 153657...
CVE-2018-1961
IBM Emptoris Contract Management 10.0.0 and 10.1.3.0 could disclose sensitive information from detailed information from error messages. IBM X-Force ID: 153657...
CVE-2018-1961
IBM Emptoris Contract Management 10.0.0 and 10.1.3.0 could disclose sensitive information from detailed information from error messages. IBM X-Force ID: 153657...
CVE-2018-1961
CVE-2018-1961 affects IBM Emptoris Contract Management 10.0.x through 10.1.3.x. The vulnerability arises from the product generating more detailed error messages, potentially allowing disclosure of sensitive information. IBM’s security bulletin confirms the issue and lists remediation as applying...
IBM Emptoris Contract Management Information Disclosure Vulnerability (CNVD-2019-13396)
IBM Emptoris Contract Management is a suite of software from IBM USA that automates the contract lifecycle. The software automates and manages all phases of the contract lifecycle, from the creation, execution and renegotiation of contracts and amendments, to performance monitoring, analysis and...
Experts: Breach at IT Outsourcing Giant Wipro
Indian information technology IT outsourcing and consulting giant Wipro Ltd. NYSE:WIT is investigating reports that its own IT systems have been hacked and are being used to launch attacks against some of the company's customers, multiple sources tell KrebsOnSecurity. Wipro has refused to respond...
CryptoBotsBattle Integer Overflow Vulnerability
CryptoBotsBattle CBTB is an Ether-based digital currency. An integer overflow vulnerability exists in the 'batchTransfer' function in CBTB's smart contract implementation. An attacker could exploit the vulnerability to create an arbitrary number of tokens for any user...
Integer overflow
An Integer overflow vulnerability exists in the batchTransfer function of a smart contract implementation for CryptoBotsBattle CBTB, an Ethereum token. This vulnerability could be used by an attacker to create an arbitrary amount of tokens for any user...
CVE-2018-17882
Summary: CVE-2018-17882 concerns CryptoBotsBattle (CBTB), an Ethereum token. The flaw is an integer overflow in the smart contract’s batchTransfer function, enabling an attacker to create an arbitrary number of tokens for a user. Concrete details across connected sources confirm the affected comp...
CVE-2018-17882
An Integer overflow vulnerability exists in the batchTransfer function of a smart contract implementation for CryptoBotsBattle CBTB, an Ethereum token. This vulnerability could be used by an attacker to create an arbitrary amount of tokens for any user...
Cynet is offering unhappy competitors' customers a refund for the time remaining on existing contracts
Cynet goes head-to-head with CrowdStrike, DarkTrace, Cylance, Carbon Black & Symantec, offering their unhappy customers a refund for the time remaining on their existing contracts. Cynet, the automated threat discovery and mitigation platform was built to address the advanced threats that AV and...
Microsoft Exchange Server Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could gain the same rights as any other user of the Exchange server. This could allow the attacker to perform activities such as accessing the mailboxes of other...
Integer overflow
The mintToken function of SwftCoin SWFTC aka SwftCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value...