|
249211
|
7.5 |
HIGH
Network
|
encryptedtoken_project
|
encryptedtoken
|
The mintToken function of a smart contract implementation for EncryptedToken (ECC), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2018-13070
|
2024-11-21 12:46 |
2018-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249212
|
7.5 |
HIGH
Network
|
dychain_project
|
dychain
|
The mintToken function of a smart contract implementation for DYchain (DYC), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user t…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2018-13069
|
2024-11-21 12:46 |
2018-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249213
|
7.5 |
HIGH
Network
|
azuriontoken_project
|
azuriontoken
|
The mintToken function of a smart contract implementation for AzurionToken (AZU), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary u…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2018-13068
|
2024-11-21 12:46 |
2018-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249214
|
8.8 |
HIGH
Network
|
opencart
|
opencart
|
/upload/catalog/controller/account/password.php in OpenCart through 3.0.2.0 has CSRF via the index.php?route=account/password URI to change a user's password.
|
CWE-352
Origin Validation Error
|
CVE-2018-13067
|
2024-11-21 12:46 |
2018-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249215
|
7.5 |
HIGH
Network
|
libming
|
libming
|
There is a memory leak in util/parser.c in libming 0.4.8, which will lead to a denial of service via parseSWF_DEFINEBUTTON2, parseSWF_DEFINEFONT, parseSWF_DEFINEFONTINFO, parseSWF_DEFINELOSSLESS, par…
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2018-13066
|
2024-11-21 12:46 |
2018-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249216
|
5.5 |
MEDIUM
Local
|
linux
debian
canonical
|
linux_kernel
debian_linux
ubuntu_linux
|
An issue was discovered in the Linux kernel through 4.17.3. An Integer Overflow in kernel/time/posix-timers.c in the POSIX timer code is caused by the way the overrun accounting works. Depending on i…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2018-12896
|
2024-11-21 12:46 |
2018-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249217
|
6.5 |
MEDIUM
Local
|
xen
debian
|
xen
debian_linux
|
An issue was discovered in Xen through 4.10.x. One of the fixes in XSA-260 added some safety checks to help prevent Xen livelocking with debug exceptions. Unfortunately, due to an oversight, at least…
|
NVD-CWE-noinfo
|
CVE-2018-12893
|
2024-11-21 12:46 |
2018-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249218
|
9.9 |
CRITICAL
Network
|
debian
xen
|
debian_linux
xen
|
An issue was discovered in Xen 4.7 through 4.10.x. libxl fails to pass the readonly flag to qemu when setting up a SCSI disk, due to what was probably an erroneous merge conflict resolution. Maliciou…
|
CWE-200
Information Exposure
|
CVE-2018-12892
|
2024-11-21 12:46 |
2018-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249219
|
6.5 |
MEDIUM
Local
|
debian
xen
|
debian_linux
xen
|
An issue was discovered in Xen through 4.10.x. Certain PV MMU operations may take a long time to process. For that reason Xen explicitly checks for the need to preempt the current vCPU at certain poi…
|
NVD-CWE-noinfo
|
CVE-2018-12891
|
2024-11-21 12:46 |
2018-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
249220
|
7.5 |
HIGH
Network
|
zzcms
|
zzcms
|
An issue was discovered on zzcms 8.3. There is a vulnerability at /user/del.php that can delete any file by placing its relative path into the zzcms_main table and then making an img add request. Thi…
|
CWE-20
Improper Input Validation
|
CVE-2018-13056
|
2024-11-21 12:46 |
2018-07-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
