Lucene search
+L

7 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/10 12:00 a.m.•5 views

CVE-2018-10769: Undefined Security Weakness

The transferProxy and approveProxy functions of a smart contract implementation for SmartMesh SMT, an Ethereum ERC20 token, allow attackers to accomplish an unauthorized transfer of digital assets because replay attacks can occur with the same-named functions with the same signatures in other...

7.5CVSS7.2AI score0.01202EPSS
SaveExploits1References1
CNVD
CNVD
•added 2018/04/27 12:00 a.m.•48 views

SmartMesh smart contract 'transferProxy' function integer overflow vulnerability

SmartMesh is a blockchain-based underlying protocol for the Internet of Things IoT, targeting areas such as meshless communication and meshless payment. smart contract is one of the smart contracts. An integer overflow vulnerability exists in the 'transferProxy' function of the smart contract...

7.5CVSS7.1AI score0.01797EPSS
SaveExploits2References1
Prion
Prion
•added 2018/04/25 9:29 a.m.•18 views

Integer overflow

An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh aka SMT, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted fee and value parameters, as exploited in the wild in April 2018, aka the...

5CVSS7.6AI score0.01797EPSS
SaveExploits2References3
NVD
NVD
•added 2018/04/25 9:29 a.m.•33 views

CVE-2018-10376

An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh aka SMT, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted fee and value parameters, as exploited in the wild in April 2018, aka the...

7.5CVSS7.6AI score0.01797EPSS
SaveExploits2References3
CVE
CVE
•added 2018/04/25 9:00 a.m.•76 views

CVE-2018-10376

The SmartMesh (SMT) Ethereum ERC20 token is vulnerable to an integer overflow within the transferProxy (or proxyTransfer) function. Attackers can exploit this by providing specially crafted _fee and _value parameters; if the sum of these parameters overflows to zero, it can bypass sanity checks, ...

7.5CVSS7.6AI score0.01797EPSS
SaveIn wildExploits2References3Affected Software1
VulnCheck KEV
VulnCheck KEV
•added 2018/04/25 12:00 a.m.•26 views

VulnCheck KEV: CVE-2018-10376

An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh aka SMT, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted fee and value parameters, as exploited in the wild in April 2018, aka the...

7.5CVSS7.3AI score0.01797EPSS
SaveIn wildExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/25 12:00 a.m.•5 views

CVE-2018-10376: Integer Overflow or Wraparound

An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh aka SMT, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted fee and value parameters, as exploited in the wild in April 2018, aka the...

7.5CVSS7.3AI score0.01797EPSS
SaveExploits2References2
Rows per page
Query Builder