Lucene search
+L

3 matches found

Mend
Mend
•added 2021/11/16 12:09 p.m.•0 views

WS-2021-0423

When ERC1155 tokens are minted, a callback is invoked on the receiver of those tokens, as required by the spec. When including the "ERC1155Supply" extension, total supply is not updated until after the callback, thus during the callback the reported total supply is lower than the real number of...

6.9CVSS5.9AI score
SaveExploits0References3
Mend
Mend
•added 2020/04/16 6:20 p.m.•2 views

CVE-2020-11007

In Shopizer before version 2.11.0, using API or Controller based versions negative quantity is not adequately validated hence creating incorrect shopping cart and order total. This vulnerability makes it possible to create a negative total in the shopping cart. This has been patched in version...

7.1CVSS0.00852EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/16 12:00 a.m.•5 views

CVE-2020-11007: Improper Input Validation

In Shopizer before version 2.11.0, using API or Controller based versions negative quantity is not adequately validated hence creating incorrect shopping cart and order total. This vulnerability makes it possible to create a negative total in the shopping cart. This has been patched in version...

6.5CVSS6.4AI score0.00852EPSS
SaveExploits0References3
Rows per page
Query Builder