Vulnerability index

Browse CVEs

3,271 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Integer OverflowCWE-190 × clear
Suncontract HIGH 7.5
CVE-2018-14576

The mintTokens function of a smart contract implementation for SunContract, an Ethereum token, has an integer overflow via the _amount variable.

Mitigation only
Fix from $1,950 2018-08-03
PHP HIGH 7.5
CVE-2018-14883EPSS 9%

An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Integer Overflow leads to a heap-b…

Fix: 5.6.37 / 7.0.31+
Fix from $1,950 2018-08-03
Ttembed HIGH 7.5
CVE-2018-10921

Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially lead to corruption of the input…

No fix yet
Fix from $1,950 2018-08-02
PHP CRITICAL 9.8
CVE-2017-9120EPSS 8%

PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other…

Fix: 7.4.23 / 8.0.10+
Fix from $2,300 2018-08-02
Enterprise Linux Desktop HIGH 7.8
CVE-2016-9583

An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.

Fix: 2.0.6+
Fix from $1,950 2018-08-01
Openjpeg HIGH 8.8
CVE-2016-9580

An integer overflow vulnerability was found in tiftoimage function in openjpeg 2.1.2, resulting in heap buffer overflow.

Patch available
Fix from $1,950 2018-08-01
Curl CRITICAL 9.8
CVE-2016-8620

The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read via user controlled input.

Fix: 7.51.0+
Fix from $2,300 2018-08-01
Libcurl CRITICAL 9.8
CVE-2016-8622

The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to …

Fix: 7.51.0+
Fix from $2,300 2018-07-31
Foxit Reader HIGH 8.8
CVE-2018-14295EPSS 9%

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit PhantomPDF Phantom PDF 9.1.5096. User inter…

Fix: after 9.1.0.5096
Fix from $1,950 2018-07-31
Linux Kernel HIGH 7.8
CVE-2017-7482

In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lea…

Fix: 3.2.90 / 3.10.108+
Fix from $1,950 2018-07-30
Libdxfrw HIGH 7.5
CVE-2018-14444

libdxfrw 0.6.3 has an Integer Overflow in dwgCompressor::decompress18 in dwgutil.cpp, leading to an out-of-bounds read and application crash.

Mitigation only
Fix from $1,950 2018-07-20
Wireshark HIGH 7.5
CVE-2018-14341

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the DICOM dissector could go into a large or infinite loop. This was addressed in e…

Fix: after 2.6.1
Fix from $1,950 2018-07-19
Wireshark HIGH 7.5
CVE-2018-14343

In Wireshark 2.6.0 to 2.6.1, 2.4.0 to 2.4.7, and 2.2.0 to 2.2.15, the ASN.1 BER dissector could crash. This was addressed in epan/dissectors/packet-b…

Fix: after 2.6.1
Fix from $1,950 2018-07-19
Debian Linux HIGH 7.5
CVE-2018-14337

The CHECK macro in mrbgems/mruby-sprintf/src/sprintf.c in mruby 1.4.1 contains a signed integer overflow, possibly leading to out-of-bounds memory ac…

No fix yet
Fix from $1,950 2018-07-17
Mp4v2 HIGH 8.8
CVE-2018-14326

In MP4v2 2.0.0, there is an integer overflow (with resultant memory corruption) when resizing MP4Array for the ftyp atom in mp4array.h.

No fix yet
Fix from $1,950 2018-07-16
Ubuntu Linux MEDIUM 5.5
CVE-2018-0360

ClamAV before 0.100.1 has an HWP integer overflow with a resultant infinite loop via a crafted Hangul Word Processor file. This is in parsehwp3_parag…

Fix: 0.100.1+
Fix from $1,600 2018-07-16
Myadvancedtoken CRITICAL 9.8
CVE-2018-14084

An issue was discovered in a smart contract implementation for MKCB, an Ethereum token. If the owner sets the value of sellPrice to a large number in…

No fix yet
Fix from $2,300 2018-07-16
Mytoken CRITICAL 9.8
CVE-2018-14086

An issue was discovered in a smart contract implementation for SingaporeCoinOrigin (SCO), an Ethereum token. The contract has an integer overflow. If…

No fix yet
Fix from $2,300 2018-07-16
Encryptedtoken CRITICAL 9.8
CVE-2018-14087

An issue was discovered in a smart contract implementation for EUC (EUC), an Ethereum token. The contract has an integer overflow. If the owner sets …

No fix yet
Fix from $2,300 2018-07-16
Stex White List CRITICAL 9.8
CVE-2018-14088

An issue was discovered in a smart contract implementation for STeX White List (STE(WL)), an Ethereum token. The contract has an integer overflow. If…

No fix yet
Fix from $2,300 2018-07-16
Tracto CRITICAL 9.8
CVE-2018-14063

The increaseApproval function of a smart contract implementation for Tracto (TRCT), an Ethereum ERC20 token, has an integer overflow.

Mitigation only
Fix from $2,300 2018-07-15
Rocket Coin HIGH 7.5
CVE-2018-13836

An integer overflow vulnerability exists in the function multiTransfer of Rocket Coin (XRC), an Ethereum token smart contract. An attacker could use …

No fix yet
Fix from $1,950 2018-07-12
Sharktech HIGH 7.5
CVE-2018-14001

An integer overflow vulnerability exists in the function batchTransfer of SHARKTECH (SKT), an Ethereum token smart contract. An attacker could use it…

No fix yet
Fix from $1,950 2018-07-12
Mp3 Coin HIGH 7.5
CVE-2018-14002

An integer overflow vulnerability exists in the function distribute of MP3 Coin (MP3), an Ethereum token smart contract. An attacker could use it to …

No fix yet
Fix from $1,950 2018-07-12
Wmctoken HIGH 7.5
CVE-2018-14003

An integer overflow vulnerability exists in the function batchTransfer of WeMediaChain (WMC), an Ethereum token smart contract. An attacker could use…

No fix yet
Fix from $1,950 2018-07-12
Globecoin HIGH 7.5
CVE-2018-14004

An integer overflow vulnerability exists in the function transfer_tokens_after_ICO of GlobeCoin (GLB), an Ethereum token smart contract. An attacker …

No fix yet
Fix from $1,950 2018-07-12
Malaysiancoin HIGH 7.5
CVE-2018-14005

An integer overflow vulnerability exists in the function transferAny of Malaysia coins (Xmc), an Ethereum token smart contract. An attacker could use…

No fix yet
Fix from $1,950 2018-07-12
Ngtoken HIGH 7.5
CVE-2018-14006

An integer overflow vulnerability exists in the function multipleTransfer of Neo Genesis Token (NGT), an Ethereum token smart contract. An attacker c…

No fix yet
Fix from $1,950 2018-07-12
Debian Linux HIGH 8.1
CVE-2018-10887

A flaw was found in libgit2 before version 0.27.3. It has been discovered that an unexpected sign extension in git_delta_apply function in delta.c fi…

Fix: 0.27.3+
Fix from $1,950 2018-07-10
Enterprise Linux Desktop MEDIUM 6.5
CVE-2018-5000EPSS 14%

Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability. Successful exploitation could lead to information disclosu…

Fix: after 29.0.0.171
Fix from $1,600 2018-07-09