Search vulnerabilities

Results 425,979

CVE-2018-13257

The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service (CAS) service ticket validation, enabling a phishing attack from the CAS server login page.

CVSS 3.1 · 6.1 Medium EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2018-13251

In libming 0.4.8, there is an excessive memory allocation attempt in the readBytes function of the util/read.c file, related to parseSWF_DEFINEBITSJPEG2. Remote attackers could leverage this vulnerability to cause a denial-of-service via a crafted swf file.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2018-13250

libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted swf file.

CVSS 3.0 · 6.5 Medium EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2018-13233

The sell function of a smart contract implementation for GSI, an Ethereum token, has an integer overflow in which "amount * sellPrice" can be zero, consequently reducing a seller's assets.

CVSS 3.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
Gsi
CVE-2018-13232

The sell function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterCoin), an Ethereum token, has an integer overflow in which "amount * sellPrice" can be zero, consequently reducing a seller's assets.

CVSS 3.0 · 7.5 High EPSS 1.0% KEV · Not listed
Products
CVE-2018-13231

The sell function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterToken), an Ethereum token, has an integer overflow in which "amount * sellPrice" can be zero, consequently reducing a seller's assets.

CVSS 3.0 · 7.5 High EPSS 1.0% KEV · Not listed
Products
CVE-2018-13230

The sell function of a smart contract implementation for DestiNeed (DSN), an Ethereum token, has an integer overflow in which "amount * sellPrice" can be zero, consequently reducing a seller's assets.

CVSS 3.0 · 7.5 High EPSS 1.0% KEV · Not listed
Products
CVE-2018-13229

The sell function of a smart contract implementation for RiptideCoin (RIPT), an Ethereum token, has an integer overflow in which "amount * sellPrice" can be zero, consequently reducing a seller's assets.

CVSS 3.0 · 7.5 High EPSS 1.0% KEV · Not listed
Products
CVE-2018-13228

The sell function of a smart contract implementation for Crowdnext (CNX), an Ethereum token, has an integer overflow in which "amount * sellPrice" can be zero, consequently reducing a seller's assets.

CVSS 3.0 · 7.5 High EPSS 1.0% KEV · Not listed
Products
CVE-2018-13227

The sell function of a smart contract implementation for MoneyChainNet (MCN), an Ethereum token, has an integer overflow in which "amount * sellPrice" can be zero, consequently reducing a seller's assets.

CVSS 3.0 · 7.5 High EPSS 1.0% KEV · Not listed
Products
CVE-2018-13226

The sell function of a smart contract implementation for YLCToken, an Ethereum token, has an integer overflow in which "amount * sellPrice" can be zero, consequently reducing a seller's assets.

CVSS 3.0 · 7.5 High EPSS 1.0% KEV · Not listed
Products
CVE-2018-13225

The sell function of a smart contract implementation for MyYLC, an Ethereum token, has an integer overflow in which "amount * sellPrice" can be zero, consequently reducing a seller's assets.

CVSS 3.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Products
CVE-2018-13224

The sell function of a smart contract implementation for Virtual Energy Units (VEU) (Contract Name: VEU_TokenERC20), an Ethereum token, has an integer overflow in which "amount * sellPrice" can be zero, consequently reducing a seller's assets.

CVSS 3.0 · 7.5 High EPSS < 1% KEV · Not listed
CVE-2018-13223

The sell function of a smart contract implementation for R Time Token v3 (RS) (Contract Name: RTokenMain), an Ethereum token, has an integer overflow in which "amount * sellPrice" can be zero, consequently reducing a seller's assets.

CVSS 3.0 · 7.5 High EPSS < 1% KEV · Not listed
Products
CVE-2018-13222

The sell function of a smart contract implementation for ObjectToken (OBJ), an Ethereum token, has an integer overflow in which "amount * sellPrice" can be zero, consequently reducing a seller's assets.

CVSS 3.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2018-13221

The sell function of a smart contract implementation for Extreme Coin (XT) (Contract Name: ExtremeToken), an Ethereum token, has an integer overflow in which "amount * sellPrice" can be zero, consequently reducing a seller's assets.

CVSS 3.0 · 7.5 High EPSS < 1% KEV · Not listed
Products
CVE-2018-13220

The sell function of a smart contract implementation for MAVCash, an Ethereum token, has an integer overflow in which "amount * sellPrice" can be zero, consequently reducing a seller's assets.

CVSS 3.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2018-13219

The sell function of a smart contract implementation for YourCoin (ICO) (Contract Name: ETH033), an Ethereum token, has an integer overflow in which "amount * sellPrice" can be zero, consequently reducing a seller's assets.

CVSS 3.0 · 7.5 High EPSS < 1% KEV · Not listed
Products