Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
657 results · page 3 of 14
Sep 7, 2021An issue in the noReentrance() modifier of the Ethereum-based contract Accounting 1.0 allows attackers to carry out a reentrancy attack.CVE-2020-19765 · Other software · Proofofdiligencetoken Project · reported by MITREHigh 7.5
An issue in the noReentrance() modifier of the Ethereum-based contract Accounting 1.0 allows attackers to carry out a reentrancy attack.
- Product
- Proofofdiligencetoken
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2021Frontier is Substrate's Ethereum compatibility layer.CVE-2021-39193 · Other software · paritytech · reported by GitHubMedium 5.3
Frontier is Substrate's Ethereum compatibility layer. Prior to commit number 0b962f218f0cdd796dadfe26c3f09e68f7861b26, a bug in `pallet-ethereum` can cause invalid transactions to be included in the Ethereum block state in `pallet-ethereum` due to not validating the input data size. Any invalid transactions included this way have no possibility to alter the internal Ethereum or Substrate state. The transaction will appear to have be included, but is of no effect as it is rejected by the EVM engine. The impact is further limited by Substrate extrinsic size constraints. A patch is available in commit number 0b962f218f0cdd796dadfe26c3f09e68f7861b26. There are no workarounds aside from applying the patch.
- Product
- frontier
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 24, 2021go-ethereum is the official Go implementation of the Ethereum protocol.CVE-2021-39137 · Other software · ethereum · reported by GitHubMedium 6.5
go-ethereum is the official Go implementation of the Ethereum protocol. In affected versions a consensus-vulnerability in go-ethereum (Geth) could cause a chain split, where vulnerable versions refuse to accept the canonical chain. Further details about the vulnerability will be disclosed at a later date. A patch is included in the upcoming `v1.10.8` release. No workaround are available.
- Product
- go-ethereum
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 3, 2021A security flaw in the 'owned' function of a smart contract implementation for BTC2X (B2X), a tradeable Ethereum ERC20 token, allows attackers to hijack victim CVE-2021-34273 · Other software · B2x Project · reported by MITREHigh 7.5
A security flaw in the 'owned' function of a smart contract implementation for BTC2X (B2X), a tradeable Ethereum ERC20 token, allows attackers to hijack victim accounts and arbitrarily increase the digital supply of assets.
- Product
- B2x
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 3, 2021A security flaw in the 'owned' function of a smart contract implementation for RobotCoin (RBTC), a tradeable Ethereum ERC20 token, allows attackers to hijack viCVE-2021-34272 · Other software · Robotbtc Project · reported by MITREHigh 7.5
A security flaw in the 'owned' function of a smart contract implementation for RobotCoin (RBTC), a tradeable Ethereum ERC20 token, allows attackers to hijack victim accounts and arbitrarily increase the digital supply of assets.
- Product
- Robotbtc
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 3, 2021An integer overflow in the mintToken function of a smart contract implementation for Doftcoin Token, an Ethereum ERC20 token, allows the owner to cause unexpectCVE-2021-34270 · Other software · Doft · reported by MITREHigh 7.5
An integer overflow in the mintToken function of a smart contract implementation for Doftcoin Token, an Ethereum ERC20 token, allows the owner to cause unexpected financial losses.
- Product
- Doftcoin
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 3, 2021An integer overflow in the transfer function of a smart contract implementation for Lancer Token, an Ethereum ERC20 token, allows the owner to cause unexpected CVE-2021-33403 · Other software · Blocklancertoken Project · reported by MITREHigh 7.5
An integer overflow in the transfer function of a smart contract implementation for Lancer Token, an Ethereum ERC20 token, allows the owner to cause unexpected financial losses between two large accounts during a transaction.
- Product
- Blocklancertoken
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcn.etherscan.comgithub.com
Jun 24, 2021An issue was discovered in function addMeByRC in the smart contract implementation for RC, an Ethereum token, allows attackers to transfer an arbitrary amount oCVE-2020-17753 · Other software · RC Project · reported by MITREMedium 6.5
An issue was discovered in function addMeByRC in the smart contract implementation for RC, an Ethereum token, allows attackers to transfer an arbitrary amount of tokens to an arbitrary address.
- Product
- RC
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordetherscan.ioetherscan.io
Jun 24, 2021Integer overflow vulnerability in payable function of a smart contract implementation for an Ethereum token, as demonstrated by the smart contract implemented aCVE-2020-17752 · Other software · MON Project · reported by MITRECritical 9.8
Integer overflow vulnerability in payable function of a smart contract implementation for an Ethereum token, as demonstrated by the smart contract implemented at address 0xB49E984A83d7A638E7F2889fc8328952BA951AbE, an implementation for MillionCoin (MON).
- Product
- MON
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordetherscan.iogithub.com
May 24, 2021Ethereum 0xe933c0cd9784414d5f278c114904f5a84b396919#code.sol latest version is affected by a denial of service vulnerability in the affected payout function.CVE-2020-20178 · Other software · Whohas Project · reported by MITREHigh 7.5
Ethereum 0xe933c0cd9784414d5f278c114904f5a84b396919#code.sol latest version is affected by a denial of service vulnerability in the affected payout function. Once the length of this array is too long, it will result in an exception. Attackers can make attacks by creating a series of account addresses.
- Product
- Whohas
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordetherscan.ioetherscan.io
May 12, 2021evm is a pure Rust implementation of Ethereum Virtual Machine.CVE-2021-29511 · Other software · rust-blockchain · reported by GitHubMedium 6.5
evm is a pure Rust implementation of Ethereum Virtual Machine. Prior to the patch, when executing specific EVM opcodes related to memory operations that use `evm_core::Memory::copy_large`, the `evm` crate can over-allocate memory when it is not needed, making it possible for an attacker to perform denial-of-service attack. The flaw was corrected in commit `19ade85`. Users should upgrade to `==0.21.1, ==0.23.1, ==0.24.1, ==0.25.1, >=0.26.1`. There are no workarounds. Please upgrade your `evm` crate version.
- Product
- evm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 9, 2021Hyperledger Besu is an open-source, MainNet compatible, Ethereum client written in Java.CVE-2021-21369 · Other software · hyperledger · reported by GitHubMedium 6.5
Hyperledger Besu is an open-source, MainNet compatible, Ethereum client written in Java. In Besu before version 1.5.1 there is a denial-of-service vulnerability involving the HTTP JSON-RPC API service. If username and password authentication is enabled for the HTTP JSON-RPC API service, then prior to making any requests to an API endpoint the requestor must use the login endpoint to obtain a JSON web token (JWT) using their credentials. A single user can readily overload the login endpoint with invalid requests (incorrect password). As the supplied password is checked for validity on the main vertx event loop and takes a relatively long time this can cause the processing of other valid requests to fail. A valid username is required for this vulnerability to be exposed. This has been fixed in version 1.5.1.
- Product
- besu
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 11, 2021A stack overflow vulnerability in Aleth Ethereum C++ client version <= 1.8.0 using a specially crafted a config.json file may result in a denial of service.CVE-2020-26800 · Other software · Ethereum · reported by MITREMedium 5.5
A stack overflow vulnerability in Aleth Ethereum C++ client version <= 1.8.0 using a specially crafted a config.json file may result in a denial of service.
- Product
- Aleth
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordethereum.orggithub.com
Jan 3, 2021The sellTokenForLRC function in the vault protocol in the smart contract implementation for Loopring (LRC), an Ethereum token, lacks access control for fee swapCVE-2020-35962 · Other software · Loopring · reported by MITREHigh 7.5
The sellTokenForLRC function in the vault protocol in the smart contract implementation for Loopring (LRC), an Ethereum token, lacks access control for fee swapping and thus allows price manipulation.
- Product
- Loopring
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblocksecteam.medium.cometherscan.io
Jan 3, 2021The breed function in the smart contract implementation for Farm in Seal Finance (Seal), an Ethereum token, lacks access control and thus allows price manipulatCVE-2021-3006 · Other software · Seal Finance Project · reported by MITREHigh 7.5
The breed function in the smart contract implementation for Farm in Seal Finance (Seal), an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021.
- Product
- Seal Finance
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblocksecteam.medium.cometherscan.io
Jan 2, 2021The _deposit function in the smart contract implementation for Stable Yield Credit (yCREDIT), an Ethereum token, has certain incorrect calculations.CVE-2021-3004 · Other software · Stableyieldcredit Project · reported by MITREHigh 7.5
The _deposit function in the smart contract implementation for Stable Yield Credit (yCREDIT), an Ethereum token, has certain incorrect calculations. An attacker can obtain more yCREDIT tokens than they should.
- Product
- Stableyieldcredit
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblocksecteam.medium.cometherscan.io
Dec 30, 2020An issue was discovered in a smart contract implementation for MORPH Token through 2019-06-05, an Ethereum token.CVE-2019-15080 · Other software · Morph Project · reported by MITREHigh 7.5
An issue was discovered in a smart contract implementation for MORPH Token through 2019-06-05, an Ethereum token. A typo in the constructor of the Owned contract (which is inherited by MORPH Token) allows attackers to acquire contract ownership. A new owner can subsequently obtain MORPH Tokens for free and can perform a DoS attack.
- Product
- Morph
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordetherscan.iogithub.com
Dec 30, 2020A typo exists in the constructor of a smart contract implementation for EAI through 2019-06-05, an Ethereum token.CVE-2019-15079 · Other software · EAI Project · reported by MITREHigh 7.5
A typo exists in the constructor of a smart contract implementation for EAI through 2019-06-05, an Ethereum token. This vulnerability could be used by an attacker to acquire EAI tokens for free.
- Product
- EAI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 30, 2020An issue was discovered in a smart contract implementation for AIRDROPX BORN through 2019-05-29, an Ethereum token.CVE-2019-15078 · Other software · Xbornid · reported by MITREHigh 7.5
An issue was discovered in a smart contract implementation for AIRDROPX BORN through 2019-05-29, an Ethereum token. The name of the constructor has a typo (wrong case: XBornID versus XBORNID) that allows an attacker to change the owner of the contract and obtain cryptocurrency for free.
- Product
- Xbornid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 11, 2020Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.CVE-2020-26265 · Other software · ethereum · reported by GitHubMedium 5.3
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth from version 1.9.4 and before version 1.9.20 a consensus-vulnerability could cause a chain split, where vulnerable versions refuse to accept the canonical chain. The fix was included in the Paragade release version 1.9.20. No individual workaround patches have been made -- all users are recommended to upgrade to a newer version.
- Product
- go-ethereum
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 11, 2020Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.CVE-2020-26264 · Other software · ethereum · reported by GitHubMedium 6.5
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.25 a denial-of-service vulnerability can make a LES server crash via malicious GetProofsV2 request from a connected LES client. This vulnerability only concerns users explicitly enabling les server; disabling les prevents the exploit. The vulnerability was patched in version 1.9.25.
- Product
- go-ethereum
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 2, 2020An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Virtual Machine) of CPP-Ethereum.CVE-2017-14451 · Other software · Ethereum · reported by talos-cna@cisco.comCritical 10
An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Virtual Machine) of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read which can subsequently trigger an out-of-bounds write resulting in remote code execution. An attacker can create/send malicious smart contract to trigger this vulnerability.
- Product
- Ethereum
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Nov 24, 2020Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.CVE-2020-26242 · Other software · ethereum · reported by GitHubMedium 6.5
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. In Geth before version 1.9.18, there is a Denial-of-service (crash) during block processing. This is fixed in 1.9.18.
- Product
- go-ethereum
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.ethereum.orggithub.com
Nov 24, 2020Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.CVE-2020-26241 · Other software · ethereum · reported by GitHubMedium 6.5
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. This is a Consensus vulnerability in Geth before version 1.9.17 which can be used to cause a chain-split where vulnerable nodes reject the canonical chain. Geth's pre-compiled dataCopy (at 0x00...04) contract did a shallow copy on invocation. An attacker could deploy a contract that writes X to an EVM memory region R, then calls 0x00..04 with R as an argument, then overwrites R to Y, and finally invokes the RETURNDATACOPY opcode. When this contract is invoked, a consensus-compliant node would push X on the EVM stack, whereas Geth would push Y. This is fixed in version 1.9.17.
- Product
- go-ethereum
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.ethereum.orggithub.com
Nov 24, 2020Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol.CVE-2020-26240 · Other software · ethereum · reported by GitHubMedium 5.3
Go Ethereum, or "Geth", is the official Golang implementation of the Ethereum protocol. An ethash mining DAG generation flaw in Geth before version 1.9.24 could cause miners to erroneously calculate PoW in an upcoming epoch (estimated early January, 2021). This happened on the ETC chain on 2020-11-06. This issue is relevant only for miners, non-mining nodes are unaffected. This issue is fixed as of 1.9.24
- Product
- go-ethereum
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.ethereum.orggithub.com
Dec 31, 2019The quaker function of a smart contract implementation for BOMBBA (BOMB), an tradable Ethereum ERC20 token, allows attackers to change the owner of the contractCVE-2018-19834 · Other software · Bombba Project · reported by MITREHigh 7.5
The quaker function of a smart contract implementation for BOMBBA (BOMB), an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity.
- Product
- Bombba
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 31, 2019The owned function of a smart contract implementation for DDQ, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because tCVE-2018-19833 · Other software · DDQ Project · reported by MITREHigh 7.5
The owned function of a smart contract implementation for DDQ, an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity.
- Product
- DDQ
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 31, 2019The NETM() function of a smart contract implementation for NewIntelTechMedia (NETM), an tradable Ethereum ERC20 token, allows attackers to change the owner of tCVE-2018-19832 · Other software · Newinteltechmedia Project · reported by MITREHigh 7.5
The NETM() function of a smart contract implementation for NewIntelTechMedia (NETM), an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity.
- Product
- Newinteltechmedia
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 31, 2019The ToOwner() function of a smart contract implementation for Cryptbond Network (CBN), an tradable Ethereum ERC20 token, allows attackers to change the owner ofCVE-2018-19831 · Other software · Cryptbond Network Project · reported by MITREHigh 7.5
The ToOwner() function of a smart contract implementation for Cryptbond Network (CBN), an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function does not check the caller's identity.
- Product
- Cryptbond Network
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 31, 2019The UBSexToken() function of a smart contract implementation for Business Alliance Financial Circle (BAFC), an tradable Ethereum ERC20 token, allows attackers tCVE-2018-19830 · Other software · Business Alliance Financial Circle Project · reported by MITREHigh 7.5
The UBSexToken() function of a smart contract implementation for Business Alliance Financial Circle (BAFC), an tradable Ethereum ERC20 token, allows attackers to change the owner of the contract, because the function is public (by default) and does not check the caller's identity.
- Product
- Business Alliance Financial Circle
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 20, 2019An issue was discovered in EthereumJ 1.8.2.CVE-2018-15890 · Other software · Ethereum · reported by MITRECritical 9.8
An issue was discovered in EthereumJ 1.8.2. There is Unsafe Deserialization in ois.readObject in mine/Ethash.java and decoder.readObject in crypto/ECKey.java. When a node syncs and mines a new block, arbitrary OS commands can be run on the server.
- Product
- Ethereumj
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 19, 2019The doAirdrop function of a smart contract implementation for Primeo (PEO), an Ethereum token, does not check the numerical relationship between the amount of tCVE-2018-18425 · Other software · Primeo Project · reported by MITREMedium 6.5
The doAirdrop function of a smart contract implementation for Primeo (PEO), an Ethereum token, does not check the numerical relationship between the amount of the air drop and the token's total supply, which lets the owner of the contract issue an arbitrary amount of currency. (Increasing the total supply by using 'doAirdrop' ignores the hard cap written in the contract and devalues the token.)
- Product
- Primeo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordetherscan.iojianshu.com
Mar 15, 2019An Integer overflow vulnerability exists in the batchTransfer function of a smart contract implementation for CryptoBotsBattle (CBTB), an Ethereum token.CVE-2018-17882 · Other software · Cryptobots · reported by MITREHigh 7.5
An Integer overflow vulnerability exists in the batchTransfer function of a smart contract implementation for CryptoBotsBattle (CBTB), an Ethereum token. This vulnerability could be used by an attacker to create an arbitrary amount of tokens for any user.
- Product
- Battletoken
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordetherscan.iogithub.com
Dec 28, 2018The mintToken function of Pylon (PYLNT) aka PylonToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of aCVE-2018-18667 · Other software · Pylon-network · reported by MITREHigh 7.5
The mintToken function of Pylon (PYLNT) aka PylonToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value, a related issue to CVE-2018-11812.
- Product
- Pylontoken
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordetherscan.iogithub.com
Dec 28, 2018The mintToken function of SwftCoin (SWFTC) aka SwftCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of CVE-2018-18666 · Other software · Swft · reported by MITREHigh 7.5
The mintToken function of SwftCoin (SWFTC) aka SwftCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
- Product
- Swftcoin
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordetherscan.iogithub.com
Dec 28, 2018The mintToken function of Nexxus (NXX) aka NexxusToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of aCVE-2018-18665 · Other software · Nexxuscoin · reported by MITREHigh 7.5
The mintToken function of Nexxus (NXX) aka NexxusToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
- Product
- Nexxustoken
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordetherscan.iogithub.com
Dec 26, 2018The determineWinner function of a smart contract implementation for HashHeroes Tiles, an Ethereum game, uses a certain blockhash value in an attempt to generateCVE-2018-17987 · Other software · Hashheroes · reported by MITREHigh 7.5
The determineWinner function of a smart contract implementation for HashHeroes Tiles, an Ethereum game, uses a certain blockhash value in an attempt to generate a random number for the case where NUM_TILES equals the number of people who purchased a tile, which allows an attacker to control the awarding of the prize by being the last person to purchase a tile.
- Product
- Hashheroes
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 23, 2018Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array in memory, and then CVE-2018-20421 · Other software · Ethereum · reported by MITREHigh 7.5
Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array in memory, and then writing data to a single memory location with a large index number, as demonstrated by use of "assembly { mstore }" followed by a "c[0xC800000] = 0xFF" assignment.
- Product
- GO Ethereum
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 11, 2018cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode.CVE-2018-19184 · Other software · Ethereum · reported by MITREHigh 7.5
cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode.
- Product
- GO Ethereum
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 11, 2018ethereumjs-vm 2.4.0 allows attackers to cause a denial of service (vm.runCode failure and REVERT) via a "code: Buffer.from(my_code, 'hex')" attribute.CVE-2018-19183 · Other software · Ethereumjs-vm Project · reported by MITREHigh 7.5
ethereumjs-vm 2.4.0 allows attackers to cause a denial of service (vm.runCode failure and REVERT) via a "code: Buffer.from(my_code, 'hex')" attribute. NOTE: the vendor disputes this because REVERT is a normal bytecode that can be triggered from high-level source code, leading to a normal programmatic execution result.
- Product
- Ethereumjs-vm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 11, 2018Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers computation._stack.values with '"stack": [100, 100, 0]' where b'\x' wasCVE-2018-18920 · Other software · Ethereum · reported by MITREHigh 8.8
Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers computation._stack.values with '"stack": [100, 100, 0]' where b'\x' was expected, resulting in an execution failure because of an invalid opcode. This is reportedly related to "smart contracts can be executed indefinitely without gas being paid."
- Product
- Py-evm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 23, 2018A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is predictable by an external contract call.CVE-2018-17968 · Other software · Ruletkaio · reported by MITREHigh 7.5
A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is predictable by an external contract call. The developer wrote a random() function that uses a block timestamp and block hash from the Ethereum blockchain. This can be predicted by writing the same random function code in an exploit contract to determine the deadSeat value.
- Product
- Ruletkaio
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 23, 2018A lottery smart contract implementation for Greedy 599, an Ethereum gambling game, generates a random value that is predictable via an external contract call.CVE-2018-17877 · Other software · Greedy599 · reported by MITREHigh 7.5
A lottery smart contract implementation for Greedy 599, an Ethereum gambling game, generates a random value that is predictable via an external contract call. The developer used the extcodesize() function to prevent a malicious contract from being called, but the attacker can bypass it by writing the core code in the constructor of their exploit code. Therefore, it allows attackers to always win and get rewards.
- Product
- Greedy 599
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 24, 2018The random() function of the smart contract implementation for CryptoSaga, an Ethereum game, generates a random value with publicly readable variables such as tCVE-2018-12975 · Other software · Cryptosaga · reported by MITREHigh 7.5
The random() function of the smart contract implementation for CryptoSaga, an Ethereum game, generates a random value with publicly readable variables such as timestamp, the current block's blockhash, and a private variable (which can be read with a getStorageAt call). Therefore, attackers can precompute the random number and manipulate the game (e.g., get powerful characters or get critical damages).
- Product
- Cryptosaga
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 21, 2018The mintToken function of a smart contract implementation for PolyAi (AI), an Ethereum token, has an integer overflow that allows the owner of the contract to sCVE-2018-17050 · Other software · Polyai Project · reported by MITREHigh 7.5
The mintToken function of a smart contract implementation for PolyAi (AI), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
- Product
- Polyai
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 21, 2018In the mintToken function of a smart contract implementation for Substratum (SUB), an Ethereum ERC20 token, the administrator can control mintedAmount, leverageCVE-2018-12511 · Other software · Substratum · reported by MITREHigh 7.5
In the mintToken function of a smart contract implementation for Substratum (SUB), an Ethereum ERC20 token, the administrator can control mintedAmount, leverage an integer overflow, and modify a user account's balance arbitrarily.
- Product
- Substratum
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2018The onlyOwner modifier of a smart contract implementation for Coinlancer (CL), an Ethereum ERC20 token, has a potential access control vulnerability.CVE-2018-17111 · Other software · Coinlancer · reported by MITRECritical 9.8
The onlyOwner modifier of a smart contract implementation for Coinlancer (CL), an Ethereum ERC20 token, has a potential access control vulnerability. All contract users can access functions that use this onlyOwner modifier, because the comparison between msg.sender and owner is incorrect.
- Product
- Coinlancer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2018The fallback function of a simple lottery smart contract implementation for Lucky9io, an Ethereum gambling game, generates a random value with the publicly readCVE-2018-17071 · Other software · Lucky9 · reported by MITREHigh 7.5
The fallback function of a simple lottery smart contract implementation for Lucky9io, an Ethereum gambling game, generates a random value with the publicly readable variable entry_number. This variable is private, yet it is readable by eth.getStorageAt function. Also, attackers can purchase a ticket at a low price by directly calling the fallback function with small msg.value, because the developer set the currency unit incorrectly. Therefore, it allows attackers to always win and get rewards.
- Product
- Lucky9io
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 8, 2018In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the start block.CVE-2018-16733 · Other software · Ethereum · reported by MITREHigh 7.5
In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the start block.
- Product
- GO Ethereum
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 7, 2018The "PayWinner" function of a simplelottery smart contract implementation for The Ethereum Lottery, an Ethereum gambling game, generates a random value with pubCVE-2018-15552 · Other software · Theethereumlottery · reported by MITREHigh 7.5
The "PayWinner" function of a simplelottery smart contract implementation for The Ethereum Lottery, an Ethereum gambling game, generates a random value with publicly readable variable "maxTickets" (which is private, yet predictable and readable by the eth.getStorageAt function). Therefore, it allows attackers to always win and get rewards.
- Product
- The Ethereum Lottery
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.