Browse CVEs

HIGH 7.5 CVE-2018-13070 The mintToken function of a smart contract implementation for EncryptedToken (ECC), an Ethereum token, has an integer overflow that allows the owner … Encryptedtoken No fix yet Fix from $1,9502018-07-03 HIGH 7.5 CVE-2018-13071 The mintToken function of a smart contract implementation for CCindex10 (T10), an Ethereum token, has an integer overflow that allows the owner of th… Ccindextoken No fix yet Fix from $1,9502018-07-03 HIGH 7.5 CVE-2018-13072 The mintToken function of a smart contract implementation for Coffeecoin (COFFEE), an Ethereum token, has an integer overflow that allows the owner o… Coffeecoin No fix yet Fix from $1,9502018-07-03 HIGH 7.5 CVE-2018-13073 The mintToken function of a smart contract implementation for ETHEREUMBLACK (ETCBK), an Ethereum token, has an integer overflow that allows the owner… Ethereumblack No fix yet Fix from $1,9502018-07-03 MEDIUM 5.5 CVE-2018-12896 An issue was discovered in the Linux kernel through 4.17.3. An Integer Overflow in kernel/time/posix-timers.c in the POSIX timer code is caused by th… Linux Kernel after 4.17.3 Fix from $1,6002018-07-02 HIGH 7.5 CVE-2018-13041 The mint function of a smart contract implementation for Link Platform (LNK), an Ethereum ERC20 token, has an integer overflow that allows the owner … Linktoken No fix yet Fix from $1,9502018-07-01 MEDIUM 5.5 CVE-2018-1000524 miniSphere version 5.2.9 and earlier contains a Integer Overflow vulnerability in layer_resize() function in map_engine.c that can result in remote d… Minisphere after 5.2.9 Fix from $1,6002018-06-26 CRITICAL 9.8 CVE-2017-7657EPSS 16% In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transf… Debian Linux 9.3.24 / 9.4.11+ Fix from $2,3002018-06-26 HIGH 7.5 CVE-2018-11446 The buy function of a smart contract implementation for Gold Reward (GRX), an Ethereum ERC20 token, allows a potential trap that could be used to cau… Gold Reward Mitigation only Fix from $1,9502018-06-25 HIGH 7.5 CVE-2018-12062 The sell function of a smart contract implementation for SwftCoin (SWFTC), a tradable Ethereum ERC20 token, allows a potential trap that could be use… Swftcoin Mitigation only Fix from $1,9502018-06-25 HIGH 7.5 CVE-2018-12063 The sell function of a smart contract implementation for Internet Node Token (INT), a tradable Ethereum ERC20 token, allows a potential trap that cou… Node Token Mitigation only Fix from $1,9502018-06-25 HIGH 7.5 CVE-2018-12067 The sell function of a smart contract implementation for Substratum (SUB), a tradable Ethereum ERC20 token, allows a potential trap that could be use… Substratum Mitigation only Fix from $1,9502018-06-25 HIGH 7.5 CVE-2018-12068 The sell function of a smart contract implementation for Target Coin (TGT), a tradable Ethereum ERC20 token, allows a potential trap that could be us… Target Coin Mitigation only Fix from $1,9502018-06-25 HIGH 7.5 CVE-2018-12070 The sell function of a smart contract implementation for SEC, a tradable Ethereum ERC20 token, allows a potential trap that could be used to cause fi… Sec Mitigation only Fix from $1,9502018-06-25 HIGH 7.5 CVE-2018-12617EPSS 25% qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overflow causin… Ubuntu Linux after 2.12.50 Fix from $1,9502018-06-21 HIGH 8.8 CVE-2018-12293EPSS 11% The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prio… Ubuntu Linux 2.20.1 / 2.20.3+ Fix from $1,9502018-06-19 CRITICAL 9.8 CVE-2018-11219EPSS 7% An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2… Redis 3.2.12 / 4.0.10+ Fix from $2,3002018-06-17 HIGH 8.8 CVE-2018-12447 The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.8 and other products, has an integer overflow that leads to a h… Libbpg No fix yet Fix from $1,9502018-06-15 CRITICAL 9.8 CVE-2018-11574 Improper input validation together with an integer overflow in the EAP-TLS protocol implementation in PPPD may cause a crash, information disclosure,… Ubuntu Linux 2.4.9+ Fix from $2,3002018-06-14 HIGH 8.8 CVE-2018-12264 Exiv2 0.26 has integer overflows in LoaderTiff::getData() in preview.cpp, leading to an out-of-bounds read in Exiv2::ValueType::setDataArea in value.… Debian Linux No fix yet Fix from $1,9502018-06-13 HIGH 8.8 CVE-2018-12265 Exiv2 0.26 has an integer overflow in the LoaderExifJpeg class in preview.cpp, leading to an out-of-bounds read in Exiv2::MemIo::read in basicio.cpp. Debian Linux No fix yet Fix from $1,9502018-06-13 HIGH 7.8 CVE-2017-15854 The value of fix_param->num_chans is received from firmware and if it is too large, an integer overflow can occur in wma_radio_chan_stats_event_handl… Android Patch available Fix from $1,9502018-06-12 HIGH 7.8 CVE-2017-18070 In wma_ndp_end_response_event_handler(), the variable len_end_rsp is a uint32 which can be overflowed if the value of variable "event->num_ndp_end_rs… Android Patch available Fix from $1,9502018-06-12 HIGH 7.8 CVE-2018-5848 In the function wmi_set_ie(), the length validation code does not handle unsigned integer overflow properly. As a result, a large value of the 'ie_le… Virtualization Host Patch available Fix from $1,9502018-06-12 CRITICAL 9.8 CVE-2018-5159EPSS 21% An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of… Debian Linux 52.8.0 / 60.0+ Fix from $2,3002018-06-11 HIGH 7.3 CVE-2018-5144 An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affec… Enterprise Linux Desktop 52.7.0+ Fix from $1,9502018-06-11 CRITICAL 9.8 CVE-2018-5122 A potential integer overflow in the "DoCrypt" function of WebCrypto was identified. If a means was found of exploiting it, it could result in an out-… Firefox after 57.0.4 Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2018-5095 An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This result… Debian Linux 52.6.0 / 58.0+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2017-5428 An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimental exten… Enterprise Linux 52.0.1+ Fix from $2,3002018-06-11 CRITICAL 9.8 CVE-2016-5297 An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking issues. This vulnerability affect… Firefox 45.5.0 / 50.0+ Fix from $2,3002018-06-11