CVE-2018-12070

The sell function of a smart contract implementation for SEC, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause financial damage to the seller, because of overflow of the multiplication of its argument amount and a manipulable variable sellPrice, aka the...

PT-2018-18619

Name of the Vulnerable Software and Affected Versions LDAP Account Manager versions prior to 6.3 Description The issue makes it easier for remote attackers to defeat a CSRF protection mechanism by leveraging logging, as the CSRF token is placed in the sec token parameter of a URI. Recommendations...