CVE-2018-13877

The doPayouts function of the smart contract implementation for MegaCryptoPolis, an Ethereum game, has a Denial of Service vulnerability. If a smart contract that has a fallback function always causing exceptions buys a land, users cannot buy lands near that contract's land, because those purchas...

CVE-2018-14576

The mintTokens function of a smart contract implementation for SunContract, an Ethereum token, has an integer overflow via the amount variable...

CVE-2018-14715

The endCoinFlip function and throwSlammer function of the smart contract implementations for Cryptogs, an Ethereum game, generate random numbers with an old block's hash. Therefore, attackers can predict the random number and always win the game...

Code injection

The endCoinFlip function and throwSlammer function of the smart contract implementations for Cryptogs, an Ethereum game, generate random numbers with an old block's hash. Therefore, attackers can predict the random number and always win the game...

Integer overflow

The mintTokens function of a smart contract implementation for SunContract, an Ethereum token, has an integer overflow via the amount variable...

CVE-2018-14576

The CVE-2018-14576 entry concerns an integer overflow in the mintTokens function of a SunContract Ethereum token smart contract, triggered via the _amount variable. Documents in the connected set corroborate this overflow condition and point to SunContract’s token contract as the affected compone...

CVE-2018-14715

The endCoinFlip function and throwSlammer function of the smart contract implementations for Cryptogs, an Ethereum game, generate random numbers with an old block's hash. Therefore, attackers can predict the random number and always win the game...

CVE-2018-14715

CVE-2018-14715 affects Cryptogs’ Ethereum smart contracts, specifically the endCoinFlip and throwSlammer functions. The vulnerability arises from generating randomness using an old block hash, enabling an attacker to predict outcomes and consistently win the game. The connected CNVD/NVD entries c...

Buffer overflow

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a buffer overflow...

CVE-2018-3666

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a non-paged pool overflow...

CVE-2018-3670

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a buffer overflow...

CVE-2018-3672

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a system calls...

CVE-2018-3670

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a buffer overflow...

CVE-2018-3666

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a non-paged pool overflow...

Buffer overflow

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a non-paged pool overflow...

CVE-2018-3672

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a system calls...

Code injection

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a system calls...

CVE-2018-3672

Driver module in Intel Smart Sound Technology before version 9.21.00.3541 potentially allows a local attacker to execute arbitrary code as administrator via a system calls...

CVE-2018-3672

CVE-2018-3672 is an Intel Smart Sound Technology (SST) driver vulnerability. The driver module prior to version 9.21.00.3541 may allow a local attacker to execute arbitrary code as administrator via system calls. Affected products include Intel SST components integrated in certain Intel Core/Atom...

CVE-2018-3670

CVE-2018-3670 affects Intel Smart Sound Technology driver prior to version 9.21.00.3541. The flaw is a buffer overflow in the driver module that could allow a local attacker to execute arbitrary code as administrator (high severity, local access, no user interaction required per the documents). A...