5 July 2018

133 results · Feed

• High 8.8
  CVE-2016-10522

  Cross-site request forgery in rails_admin

  rails_admin ruby gem <v1.1.1 is vulnerable to cross-site request forgery (CSRF) attacks. Non-GET methods were not validating CSRF tokens and, as a result, an attacker could hypothetically gain access to the application administrative endpoints exposed by the …

  https://github.com/sferik rails_admin ruby gem rails_admin ruby-rails-admin Ubuntu RubyGems
  Jul 5, 2018
• Unscored —
  CVE-2018-13251

  In libming 0.4.8, there is an excessive memory allocation attempt in the readBytes function of the util/read.c file, re…

  ming Ubuntu
  Jul 5, 2018
• Unscored —
  CVE-2018-13250

  libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTR…

  ming Ubuntu
  Jul 5, 2018
• Medium 5.5
  CVE-2018-8026

  XML external entity expansion in org.apache.solr:solr-core

  This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in Solr config files (currency.xml, enumsConfig.xml referred from schema.xml, TIKA parsecontext config file). In addition, Xinclude functiona…

  Apache Software Foundation Apache Solr org.apache.solr:solr-core Maven
  Jul 5, 2018
• Medium 6.5
  CVE-2018-8928

  Cross-site scripting (XSS) vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows rem…

  Synology CardDAV Server
  Jul 5, 2018
• High —
  CVE-2018-8038 Public exploit EPSS 10%

  High severity vulnerability that affects org.apache.cxf.fediz:fediz-jetty8, org.apache.cxf.fediz:fediz-jetty9, org.apache.cxf.fediz:fediz-spring, org.apache.cxf.fediz:fediz-spring2, and org.apache.cxf.fediz:fediz-spring3

  Versions of Apache CXF Fediz prior to 1.4.4 do not fully disable Document Type Declarations (DTDs) when either parsing the Identity Provider response in the application plugins, or in the Identity Provider itself when parsing certain XML-based parameters.

  Apache Software Foundation Apache CXF Fediz org.apache.cxf.fediz:fediz-spring2 org.apache.cxf.fediz:fediz-spring Maven
  Jul 5, 2018
• Unscored —
  CVE-2018-9185

  An information disclosure vulnerability in Fortinet FortiOS 6.0.0 and below versions reveals user's web portal login cr…

  Fortinet Fortinet FortiOS Network devices
  Jul 5, 2018
• Medium 6.5
  CVE-2018-10885

  In atomic-openshift before version 3.10.9 a malicious network-policy configuration can cause Openshift Routing to crash…

  [UNKNOWN] atomic-openshift
  Jul 5, 2018
• Medium 6.5
  CVE-2017-16773

  Improper authorization vulnerability in Highlight Preview in Synology Universal Search before 1.0.5-0135 allows remote …

  Synology Universal Search
  Jul 5, 2018
• Unscored —
  CVE-2015-9260

  An issue was discovered in BEdita before 3.7.0. A cross-site scripting (XSS) attack occurs via a crafted pages/showObje…

  Jul 5, 2018
• Unscored —
  CVE-2018-13199

  The sell function of a smart contract implementation for ETHEREUMBLACK (ETCBK), an Ethereum token, has an integer overf…

  Jul 5, 2018
• Unscored —
  CVE-2018-13209

  The sell function of a smart contract implementation for Nectar (NCTR), an Ethereum token, has an integer overflow in w…

  Jul 5, 2018
• Unscored —
  CVE-2018-13177

  The mintToken function of a smart contract implementation for MiningRigRentals Token (MRR), an Ethereum token, has an i…

  Jul 5, 2018
• Unscored —
  CVE-2018-13207

  The sell function of a smart contract implementation for PornCoin (PRNC), an Ethereum token, has an integer overflow in…

  Jul 5, 2018
• Unscored —
  CVE-2018-13204

  The sell function of a smart contract implementation for ETHERCASH (ETC), an Ethereum token, has an integer overflow in…

  Jul 5, 2018
• Unscored —
  CVE-2018-13203

  The sellBuyerTokens function of a smart contract implementation for SwapToken, an Ethereum token, has an integer overfl…

  Jul 5, 2018
• Unscored —
  CVE-2018-13192

  The mintToken function of a smart contract implementation for Jobscoin (JOB), an Ethereum token, has an integer overflo…

  Jul 5, 2018
• Unscored —
  CVE-2018-13190

  The mintToken function of a smart contract implementation for DVChain, an Ethereum token, has an integer overflow that …

  Jul 5, 2018
• Unscored —
  CVE-2018-13169

  The mintToken function of a smart contract implementation for Ethereum Cash Pro (ECP), an Ethereum token, has an intege…

  Jul 5, 2018
• Unscored —
  CVE-2018-13160

  The mintToken function of a smart contract implementation for etktokens (ETK), an Ethereum token, has an integer overfl…

  Jul 5, 2018
• Unscored —
  CVE-2018-13198

  The sell function of a smart contract implementation for STeX Exchange ICO (STE), an Ethereum token, has an integer ove…

  Jul 5, 2018
• Unscored —
  CVE-2018-13185

  The mintToken function of a smart contract implementation for appcoins (APPC), an Ethereum token, has an integer overfl…

  Jul 5, 2018
• Unscored —
  CVE-2018-13174

  The mintToken function of a smart contract implementation for CryptoABS (ABS), an Ethereum token, has an integer overfl…

  Jul 5, 2018
• Unscored —
  CVE-2018-13186

  The mintToken function of a smart contract implementation for MMTCoin (MMT), an Ethereum token, has an integer overflow…

  Jul 5, 2018
• Unscored —
  CVE-2018-13173

  The mintToken function of a smart contract implementation for EliteShipperToken (ESHIP), an Ethereum token, has an inte…

  Jul 5, 2018
• Unscored —
  CVE-2018-13225

  The sell function of a smart contract implementation for MyYLC, an Ethereum token, has an integer overflow in which "am…

  Jul 5, 2018
• Unscored —
  CVE-2018-13194

  The mintToken function of a smart contract implementation for TongTong Coin (TTCoin), an Ethereum token, has an integer…

  Jul 5, 2018
• Unscored —
  CVE-2018-13228

  The sell function of a smart contract implementation for Crowdnext (CNX), an Ethereum token, has an integer overflow in…

  Jul 5, 2018
• Unscored —
  CVE-2018-13168

  The mintToken function of a smart contract implementation for Yu Gi Oh (YGO) (Contract Name: NetkillerBatchToken), an E…

  Jul 5, 2018
• Unscored —
  CVE-2018-13193

  The mintToken function of a smart contract implementation for hentaisolo (HAO), an Ethereum token, has an integer overf…

  Jul 5, 2018
• Unscored —
  CVE-2018-13181

  The mintToken function of a smart contract implementation for Troo, an Ethereum token, has an integer overflow that all…

  Jul 5, 2018
• Unscored —
  CVE-2018-13162

  The mintToken function of a smart contract implementation for ALEX, an Ethereum token, has an integer overflow that all…

  Jul 5, 2018
• Unscored —
  CVE-2018-13171

  The mintToken function of a smart contract implementation for LadaToken (LDT), an Ethereum token, has an integer overfl…

  Jul 5, 2018
• Unscored —
  CVE-2018-13215

  The sell function of a smart contract implementation for Sample Token (STK) (Contract Name: cashBackMintable), an Ether…

  Jul 5, 2018
• Unscored —
  CVE-2018-13224

  The sell function of a smart contract implementation for Virtual Energy Units (VEU) (Contract Name: VEU_TokenERC20), an…

  Jul 5, 2018
• Unscored —
  CVE-2018-13229

  The sell function of a smart contract implementation for RiptideCoin (RIPT), an Ethereum token, has an integer overflow…

  Jul 5, 2018
• Unscored —
  CVE-2018-13159

  The mintToken function of a smart contract implementation for bankcoin (BNK), an Ethereum token, has an integer overflo…

  Jul 5, 2018
• Unscored —
  CVE-2018-13222

  The sell function of a smart contract implementation for ObjectToken (OBJ), an Ethereum token, has an integer overflow …

  Jul 5, 2018
• Unscored —
  CVE-2018-13188

  The mintToken function of a smart contract implementation for MyBO, an Ethereum token, has an integer overflow that all…

  Jul 5, 2018
• Unscored —
  CVE-2018-13195

  The mintToken function of a smart contract implementation for Cranoo (CRN), an Ethereum token, has an integer overflow …

  Jul 5, 2018