Vulnerabilities (CVE)

CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-13599 1 Residualvalue Project 1 Residualvalue 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for ResidualValue, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13603 1 Briant2token Project 1 Briant2token 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for Briant2Token, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13604 1 Wellieat Project 1 Wellieat 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for wellieat, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13605 1 Extremetoken Project 1 Extremetoken 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for Extreme Coin (XT) (Contract Name: ExtremeToken), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13601 1 Galacticx Project 1 Galacticx 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for GalacticX, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13470 1 Buyertoken Project 1 Buyertoken 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for BuyerToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13552 1 Trabet Coin Preico Project 1 Trabet Coin Preico 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for Trabet_Coin_PreICO, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13469 1 Icocontract Project 1 Icocontract 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for IcoContract, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13657 1 Rice Project 1 Rice 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for Rice, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13659 1 Briancoin Project 1 Briancoin 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for BrianCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13660 1 Billionrewardstoken Project 1 Billionrewardstoken 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mint function of a smart contract implementation for BillionRewardsToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13661 1 App Project 1 App 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for APP, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13658 1 Thegodgital Project 1 Thegodgital 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for TheGoDgital, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13656 1 Cashbackmintable Project 1 Cashbackmintable 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for Sample Token (STK) (Contract Name: cashBackMintable), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13655 1 Gfcoin 1 Gfcb 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for GFC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13654 1 Ests 1 Eststoken 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for ESTSToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13653 1 Ipshoots Project 1 Ipshoots 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for ipshoots, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13652 1 Thegodigital Project 1 Thegodigital 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for TheGoDigital, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13647 1 Truegoldcoin 1 Truegoldcointoken 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for TrueGoldCoinToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13650 1 Bitmaxertoken Project 1 Bitmaxertoken 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for BitmaxerToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13651 1 Micoinnetworktoken Project 1 Micoinnetworktoken 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for MicoinNetworkToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13648 1 Bgcgtoken Project 1 Bgcgtoken 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for BGC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13649 1 Tokitdeployer Project 1 Tokitdeployer 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for Deploy, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13646 1 Datiac Project 1 Datiac 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for Datiac, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13644 1 Royalclassiccoin Project 1 Royalclassiccoin 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for RoyalClassicCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13643 1 Gcrtokenerc20 Project 1 Gcrtokenerc20 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for GCRTokenERC20, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13641 1 Mvgcoin Project 1 Mvgcoin 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for MVGcoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-1000523 1 Topydo 1 Topydo 2018-08-30 5.8 MEDIUM 8.1 HIGH
topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in Injection of arbitrary bytes to the terminal, including terminal escape code sequences. This attack appear to be exploitable via The victim must open a todo.txt with at least one specially crafted line..
CVE-2018-13642 1 Secoin Project 1 Secoin 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for SECoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13640 1 Ethereumsmart Project 1 Ethereumsmart 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for EthereumSmart, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13639 1 Veu Tokenerc20 Project 1 Veu Tokenerc20 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for Virtual Energy Units (VEU) (Contract Name: VEU_TokenERC20), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13638 1 Bitpark Project 1 Bitpark 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for Bitpark, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13636 1 Turdcoin Project 1 Turdcoin 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for TurdCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13637 1 Cikkaa 1 Cikkacoin 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for CikkaCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13847 1 Axiosys 1 Bento4 2018-08-30 5.0 MEDIUM 7.5 HIGH
An issue has been found in Bento4 1.5.1-624. It is a SEGV in AP4_StcoAtom::AdjustChunkOffsets in Core/Ap4StcoAtom.cpp.
CVE-2018-13848 1 Axiosys 1 Bento4 2018-08-30 5.0 MEDIUM 7.5 HIGH
An issue has been found in Bento4 1.5.1-624. It is a SEGV in AP4_StszAtom::GetSampleSize in Core/Ap4StszAtom.cpp.
CVE-2018-11335 1 Genesis Vision 1 Gvtoken 2018-08-30 5.0 MEDIUM 7.5 HIGH
GVToken Genesis Vision (GVT) is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner.
CVE-2018-13184 1 Travelzeditoken Project 1 Travelzeditoken 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for TravelZedi Token (ZEDI), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-1000506 1 Mediaron 1 Metronet Tag Manager 2018-08-30 6.8 MEDIUM 8.8 HIGH
Metronet Tag Manager version 1.2.7 contains a Cross ite Request Forgery (CSRF) vulnerability in Settings page /wp-admin/options-general.php?page=metronet-tag-manager that can result in allows anybody to do almost anything an admin can. This attack appear to be exploitable via Logged in user must follow a link. This vulnerability appears to have been fixed in 1.2.9.
CVE-2017-8890 2 Debian, Linux 2 Debian Linux, Linux Kernel 2018-08-30 7.2 HIGH 7.8 HIGH
The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c in the Linux kernel through 4.10.15 allows attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call.
CVE-2018-1000526 1 Openpsa2 1 Openpsa 2018-08-30 5.0 MEDIUM 7.5 HIGH
Openpsa contains a XML Injection vulnerability in RSS file upload feature that can result in Remote denial of service. This attack appear to be exploitable via Specially crafted XML file. This vulnerability appears to have been fixed in after commit 4974a26.
CVE-2018-12927 1 Northernnep 2 Northern Electric \& Power Inverter, Northern Electric \& Power Inverter Firmware 2018-08-30 5.0 MEDIUM 7.5 HIGH
Northern Electric & Power (NEP) inverter devices allow remote attackers to obtain potentially sensitive information via a direct request for the nep/status/index/1 URI.
CVE-2018-12926 1 Pharoscontrols 2 Pharos, Pharos Firmware 2018-08-30 5.0 MEDIUM 7.5 HIGH
Pharos Controls devices allow remote attackers to obtain potentially sensitive information via a direct request for the default/index.lsp or default/log.lsp URI.
CVE-2018-12702 1 Gve 1 Globalvillage Ecosystem 2018-08-30 5.0 MEDIUM 7.5 HIGH
The approveAndCallcode function of a smart contract implementation for Globalvillage ecosystem (GVE), an Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer the contract's balances into their account) because the callcode (i.e., _spender.call(_extraData)) is not verified, aka the "evilReflex" issue. NOTE: a PeckShield disclosure states "some researchers have independently discussed the mechanism of such vulnerability."
CVE-2018-12703 1 Block18 1 Block18 2018-08-30 5.0 MEDIUM 7.5 HIGH
The approveAndCallcode function of a smart contract implementation for Block 18 (18T), an tradable Ethereum ERC20 token, allows attackers to steal assets (e.g., transfer the contract's balances into their account) because the callcode (i.e., _spender.call(_extraData)) is not verified, aka the "evilReflex" issue. NOTE: a PeckShield disclosure states "some researchers have independently discussed the mechanism of such vulnerability."
CVE-2018-12735 1 Saj-electric 1 Saj Solar Inverter 2018-08-30 5.0 MEDIUM 7.5 HIGH
SAJ Solar Inverter allows remote attackers to obtain potentially sensitive information via a direct request for the inverter_info.htm or english_main.htm URI.
CVE-2018-0563 1 Ntt-east 2 Flet\'s Virus Clear Easy Setup \& Application Tool, Flet\'s Virus Clear V6 Easy Setup \& Application Tool 2018-08-30 9.3 HIGH 7.8 HIGH
Untrusted search path vulnerability in the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and earlier versions and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.13.0 and earlier versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVE-2018-13578 1 Galaxycoin Project 1 Galaxycoin 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for GalaxyCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13576 1 Juntspercreixer 1 Juntspercreixer 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for Escut (ESCT) (Contract Name: JuntsPerCreixer), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13577 1 Advancedshit Project 1 Advancedshit 2018-08-30 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for ShitCoin (SHITC) (Contract Name: AdvancedShit), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.