CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

58 matches found

Mend•added 2026/05/14 8:15 p.m.•3 views

WS-2021-0490

openzeppelin/contracts and openzeppelin/contracts-upgradeable are vulnerable to Initializer reentrancy that may lead to double initialization. Initializer functions that are invoked separate from contract creation the most prominent example being minimal proxies may be reentered if they make an...

8.2CVSS5.7AI score

SaveExploits0References1

vulnersOsv•added 2026/05/14 8:15 p.m.•2 views

@0xwen/core (>=0.0.1, <=0.0.3), @0xwen/core-v5 (>=0.0.1, <=0.0.3) +128 more potentially affected by unknown CVE via @openzeppelin/contracts-upgradeable (>=3.4.0, <=4.3.3)

@openzeppelin/contracts-upgradeable NPM version =3.4.0, =0.0.1, =0.0.1, =0.0.2, =0.0.1, =2.0.0-alpha.1, =3.0.0-alpha0, =2.0.0-alpha.0, =3.0.1-alpha, =1.0.0-beta.0, =1.0.0-beta.0, =1.0.0, =1.0.4 and more Source cves: unknown CVE Source advisory: MEND:WS-2021-0490...

5.8AI score

SaveExploits0

vulnersOsv•added 2025/07/17 9:19 p.m.•1 views

@oasisprotocol/sapphire-contracts (0.2.17), @openwhaleorg/pendle (>=0.1.0, <=0.1.14) +15 more potentially affected by CVE-2025-54070 via @openzeppelin/contracts-upgradeable (>=5.2.0, <=5.3.0)

@openzeppelin/contracts-upgradeable NPM version =5.2.0, =0.1.0, =0.1.0, =0.0.4, =1.0.0, =0.1.0, =0.3.0, =0.5.3, =7.9.0-maine3c28f1, =3.0.0-rc.0, =1.0.0-alpha.1, =0.3.0, =0.3.0, =0.3.2, =0.1.0, =0.3.1 and more Source cves: CVE-2025-54070 Source advisory: GHSA-9RCW-C2F9-2J55...

6.9CVSS0.00399EPSS

SaveExploits0

vulnersOsv•added 2024/02/29 8:09 p.m.•9 views

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +432 more potentially affected by CVE-2024-27094 via @openzeppelin/contracts-upgradeable (>=4.5.0, <=4.9.5)

@openzeppelin/contracts-upgradeable NPM version =4.5.0, =0.1.0, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.107.0, =4.0.0-prerelease-17, =2.0.0-prerelease-4, =0.2.1-alpha, =0.2.1-beta2 and more Source cves: CVE-2024-27094 Source advisory:...

7.4CVSS6.6AI score0.00763EPSS

SaveExploits0

vulnersOsv•added 2024/02/29 8:09 p.m.•11 views

@etherisc/gif-next (>=0.0.2-00080dc-272, <=0.0.2-ff8087d-237), @ethsign/sign-protocol-evm (>=1.0.0, <=1.1.3) +9 more potentially affected by CVE-2024-27094 via @openzeppelin/contracts-upgradeable (>=5.0.0, <=5.0.1)

@openzeppelin/contracts-upgradeable NPM version =5.0.0, =0.0.2-00080dc-272, =1.0.0, =2.5.5, =1.0.0, =1.0.0-beta-rc1, =0.0.1, =1.0.1, =0.1.0-alpha.8, =0.1.0 Source cves: CVE-2024-27094 Source advisory: OSV:GHSA-9VX6-7XXF-X967...

7.4CVSS6.4AI score0.00763EPSS

SaveExploits0

vulnersOsv•added 2024/02/29 8:09 p.m.•1 views

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +432 more potentially affected by CVE-2024-27094 via @openzeppelin/contracts-upgradeable (>=4.5.0, <=4.9.5)

7.4CVSS0.00763EPSS

SaveExploits0

vulnersOsv•added 2024/02/29 8:09 p.m.•2 views

7.4CVSS0.00763EPSS

SaveExploits0

vulnersOsv•added 2024/02/29 6:18 p.m.•2 views

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +432 more potentially affected by CVE-2024-27094 via @openzeppelin/contracts-upgradeable (>=4.5.0, <=4.9.5)

7.4CVSS0.00763EPSS

SaveExploits0

vulnersOsv•added 2024/02/29 6:18 p.m.•1 views

7.4CVSS0.00763EPSS

SaveExploits0

Positive Technologies•added 2023/12/08 12:00 a.m.•9 views

PT-2023-31356

Name of the Vulnerable Software and Affected Versions @openzeppelin/contracts versions 4.9.4 @openzeppelin/contracts-upgradeable versions 4.9.4 Description A merge issue when porting the 5.0.1 patch to the 4.9 branch caused a line duplication in the Multicall.sol file. This results in all subcall...

7.5CVSS5.6AI score0.00543EPSS

SaveExploits0References11

vulnersOsv•added 2023/08/11 7:00 p.m.•1 views

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +410 more potentially affected by CVE-2023-40014 via @openzeppelin/contracts-upgradeable (>=4.2.0, <=4.9.2)

@openzeppelin/contracts-upgradeable NPM version =4.2.0, =0.1.0, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.107.0, =4.0.0-prerelease-17, =2.0.0-prerelease-4, =0.2.1-alpha, =0.2.1-beta2 and more Source cves: CVE-2023-40014 Source advisory:...

5.3CVSS0.00743EPSS

SaveExploits0

vulnersOsv•added 2023/08/11 7:00 p.m.•10 views

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +410 more potentially affected by CVE-2023-40014 via @openzeppelin/contracts-upgradeable (>=4.2.0, <=4.9.2)

5.3CVSS6AI score0.00743EPSS

SaveExploits0

vulnersOsv•added 2023/08/10 7:52 p.m.•2 views

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +410 more potentially affected by CVE-2023-40014 via @openzeppelin/contracts-upgradeable (>=4.2.0, <=4.9.2)

5.3CVSS0.00743EPSS

SaveExploits0

vulnersOsv•added 2023/06/19 7:46 p.m.•1 views

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +336 more potentially affected by CVE-2023-34459 via @openzeppelin/contracts-upgradeable (>=4.7.0, <=4.8.3)

@openzeppelin/contracts-upgradeable NPM version =4.7.0, =0.1.0, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.107.0, =4.0.0-prerelease-17, =2.0.0-prerelease-4, =3.1.0 - @abheektripathy/nftpass 1.1.0 and more Source cves: CVE-2023-34459 Source...

5.9CVSS0.00371EPSS

SaveExploits0

vulnersOsv•added 2023/06/19 7:46 p.m.•12 views

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +336 more potentially affected by CVE-2023-34459 via @openzeppelin/contracts-upgradeable (>=4.7.0, <=4.8.3)

5.9CVSS6.2AI score0.00371EPSS

SaveExploits0

vulnersOsv•added 2023/06/16 10:13 p.m.•2 views

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +336 more potentially affected by CVE-2023-34459 via @openzeppelin/contracts-upgradeable (>=4.7.0, <=4.8.3)

5.9CVSS0.00371EPSS

SaveExploits0

vulnersOsv•added 2023/06/08 6:03 p.m.•1 views

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +375 more potentially affected by CVE-2023-34234 via @openzeppelin/contracts-upgradeable (>=4.3.0, <=4.8.3)

@openzeppelin/contracts-upgradeable NPM version =4.3.0, =0.1.0, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.107.0, =4.0.0-prerelease-17, =2.0.0-prerelease-4, =0.2.1-alpha, =0.2.1-beta2 and more Source cves: CVE-2023-34234 Source advisory:...

5.3CVSS0.00595EPSS

SaveExploits0

vulnersOsv•added 2023/04/20 2:11 p.m.•2 views

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +361 more potentially affected by CVE-2023-30542 via @openzeppelin/contracts-upgradeable (>=4.3.0, <=4.8.2)

8.8CVSS0.00584EPSS

SaveExploits0

vulnersOsv•added 2023/04/17 9:37 p.m.•2 views

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +468 more potentially affected by CVE-2023-30541 via @openzeppelin/contracts-upgradeable (>=3.4.0, <=4.8.2)

@openzeppelin/contracts-upgradeable NPM version =3.4.0, =0.1.0, =0.107.10, =1.9.0, =0.107.0, =0.107.0, =0.107.0, =0.69.0, =0.107.0, =0.97.1, =0.107.0, =0.107.0, =0.107.0, =0.0.1, =0.0.1, =4.0.0-prerelease-17, =4.3.4 and more Source cves: CVE-2023-30541 Source advisory: MEND:CVE-2023-30541...

5.3CVSS0.00812EPSS

SaveExploits0

vulnersOsv•added 2023/04/17 4:45 p.m.•9 views

4337-snap (>=0.1.0, <=0.1.1), @0xflair/contracts-registry (>=0.107.10, <=0.123.2) +468 more potentially affected by CVE-2023-30541 via @openzeppelin/contracts-upgradeable (>=3.4.0, <=4.8.2)

5.3CVSS6AI score0.00812EPSS

SaveExploits0

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by