Archive
2 July 2018
Vulnerabilities first published on this day (UTC), newest first.
66 results · Feed
-
Unscored —
The mintToken function of a smart contract implementation for Plaza Token (PLAZA), an Ethereum token, has an integer ov…
-
Unscored —
The mintToken function of a smart contract implementation for Goutex (GTX), an Ethereum token, has an integer overflow …
-
Unscored —
The mintToken function of a smart contract implementation for Coinstar (CSTR), an Ethereum token, has an integer overfl…
-
Unscored —
The mintToken function of a smart contract implementation for Futures Pease (FP), an Ethereum token, has an integer ove…
-
Unscored —
The mintToken function of a smart contract implementation for CTB, an Ethereum token, has an integer overflow that allo…
-
Unscored —
The mintToken function of a smart contract implementation for Good Time Coin (GTY), an Ethereum token, has an integer o…
-
Unscored —
The mintToken function of a smart contract implementation for FreeCoin (FREE), an Ethereum token, has an integer overfl…
-
Unscored —
The mintToken function of a smart contract implementation for GoodTo (GTO), an Ethereum token, has an integer overflow …
-
Unscored —
The mintToken function of a smart contract implementation for Reimburse Token (REIM), an Ethereum token, has an integer…
-
Unscored —
The mintToken function of a smart contract implementation for FIBToken (FIB), an Ethereum token, has an integer overflo…
-
Unscored —
The mintToken function of a smart contract implementation for YiTongCoin (YTC), an Ethereum token, has an integer overf…
-
Unscored —
The mintToken function of a smart contract implementation for CCindex10 (T10), an Ethereum token, has an integer overfl…
-
Unscored —
The mintToken function of a smart contract implementation for Coffeecoin (COFFEE), an Ethereum token, has an integer ov…
-
Unscored —
The mintToken function of a smart contract implementation for Universal Coin (UCOIN), an Ethereum token, has an integer…
-
Unscored —
The mintToken function of a smart contract implementation for EncryptedToken (ECC), an Ethereum token, has an integer o…
-
Unscored —
The mintToken function of a smart contract implementation for sumocoin (SUMO), an Ethereum token, has an integer overfl…
-
Unscored —
The mintToken function of a smart contract implementation for MODI Token (MODI), an Ethereum token, has an integer over…
-
Unscored —
The mintToken function of a smart contract implementation for GZS Token (GZS), an Ethereum token, has an integer overfl…
-
Unscored —
The mintToken function of a smart contract implementation for IADOWR Coin (IAD), an Ethereum token, has an integer over…
-
Unscored —
The mintToken function of a smart contract implementation for DYchain (DYC), an Ethereum token, has an integer overflow…
-
Unscored —
The mintToken function of a smart contract implementation for ETHEREUMBLACK (ETCBK), an Ethereum token, has an integer …
-
Unscored —
The mintToken function of a smart contract implementation for AzurionToken (AZU), an Ethereum token, has an integer ove…
-
Unscored —
The mintToken function of a smart contract implementation for Jitech (JTH), an Ethereum token, has an integer overflow …
-
Unscored —
The mintToken function of a smart contract implementation for Betcash (BC), an Ethereum token, has an integer overflow …
-
Unscored —
The mintToken function of a smart contract implementation for Carbon Exchange Coin Token (CEC), an Ethereum token, has …
-
High 7.5
Dogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, under certain configurations, causes th…
-
Medium 4.8
setup before version 2.11.4-1.fc28 in Fedora and Red Hat Enterprise Linux added /sbin/nologin and /usr/sbin/nologin to …
-
Medium 6.2
Medtronic MyCareLink Patient Monitor Exposed Dangerous Method or Function
Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains debug code meant to test the functionality of the monitor's communication interfaces, including the interface between the monitor and implantable cardiac device. An attacker with physica…
-
Medium 6.4
Medtronic MyCareLink Patient Monitor Use of Hard-coded Password
Medtronic 24950 MyCareLink Monitor and 24952 MyCareLink Monitor contains a hard-coded operating system password. An attacker with physical access can remove the case of the device, connect to the debug port, and use the password to gain privileged access to t…
-
Medium 5.9
Ansible exposes sensitive data in log files and on the terminal
Ansible 2.5 prior to 2.5.5, and 2.4 prior to 2.4.5, do not honor the no_log task flag for failed tasks. When the no_log flag has been used to protect sensitive data passed to a task from being logged, and that task does not run successfully, Ansible will expo…
-
High 7.1
Medtronic 2090 Carelink Programmer Improper Restriction of Communication Channel to Intended Endpoints
Medtronic 2090 CareLink Programmer uses a virtual private network connection to securely download updates. It does not verify it is still connected to this virtual private network before downloading updates. The affected products initially establish an encaps…
-
Medium 5.3
Podman Elevated Container Privileges
It has been discovered that podman before version 0.6.1 does not drop capabilities when executing a container as a non-root user. This results in unnecessary privileges being granted to the container.
-
Medium 5.5
Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access iss…
-
Medium 6.5
iDRAC9 versions prior to 3.21.21.21 did not enforce the use of TLS/SSL for a connection to iDRAC web server for certain URLs
Dell EMC iDRAC9 versions prior to 3.21.21.21 did not enforce the use of TLS/SSL for a connection to iDRAC web server for certain URLs. A man-in-the-middle attacker could use this vulnerability to strip the SSL/TLS protection from a connection between a client…
-
High 8.8
iDRAC7/iDRAC8/iDrac9 contains a command injection vulnerability in the SNMP agent.
Dell EMC iDRAC7/iDRAC8, versions prior to 2.60.60.60, and iDRAC9 versions prior to 3.21.21.21 contain a command injection vulnerability in the SNMP agent. A remote authenticated malicious iDRAC user with configuration privileges could potentially exploit this…
-
High 8.8
Authenticated remote code execution in iDRAC 6
The web-based diagnostics console in Dell EMC iDRAC6 (Monolithic versions prior to 2.91 and Modular all versions) contains a command injection vulnerability. A remote authenticated malicious iDRAC user with access to the diagnostics console could potentially …
-
High 7.5
iDRAC6/iDRAC7/iDRAC8 - Weak CGI session ID vulnerability
Dell EMC iDRAC6, versions prior to 2.91, iDRAC7/iDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to 3.21.21.21, contain a weak CGI session ID vulnerability. The sessions invoked via CGI binaries use 96-bit numeric-only session ID values, which …
-
Unscored —
There is a memory leak in util/parser.c in libming 0.4.8, which will lead to a denial of service via parseSWF_DEFINEBUT…
-
High 8.8
OpenCart Cross-Site Request Forgery (CSRF)
/upload/catalog/controller/account/password.php in OpenCart through 3.0.2.0 has CSRF via the index.php?route=account/password URI to change a user's password.
-
Unscored —
An issue was discovered in the Linux kernel through 4.17.3. An Integer Overflow in kernel/time/posix-timers.c in the PO…