Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-13097 State: PUBLISHED Published: 2018-07-03T05:00:00 Last Updated: 2024-08-05T08:52:50.343Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3. There is an out-of-bounds read or a divide-by-zero error for an incorrect user_block_count in a corrupted f2fs image, leading to a denial of service (BUG). Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.kernel.org/show_bug.cgi?id=200171 - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - https://seclists.org/bugtraq/2019/Jan/52 - http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00
017.html - https://seclists.org/bugtraq/2019/Jan/52 - http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00033.html - http://packetstormsecurity.com/files/151420/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://usn.ubuntu.com/3932-1/ - https://usn.ubuntu.com/3932-2/ - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4118-1/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9dc956b2c8523aed39d1e6508438be9fea28c8fc
CVE ID: CVE-2018-13098 State: PUBLISHED Published: 2018-07-03T05:00:00 Last Updated: 2024-08-05T08:52:50.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in fs/f2fs/inode.c in the Linux kernel through 4.17.3. A denial of service (slab out-of-bounds read and BUG) can occur for a modified f2fs filesystem image in which FI_EXTRA_ATTR is set in an inode. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.kernel.org/show_bug.cgi?id=200173 - http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00033.html - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4118-1/ - https://git.kernel.org/pub/scm/linux/kernel/git
html - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4118-1/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=76d56d4ab4f2a9e4f085c7d77172194ddaccf7d2
CVE ID: CVE-2018-13099 State: PUBLISHED Published: 2018-07-03T05:00:00 Last Updated: 2024-08-05T08:52:50.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in fs/f2fs/inline.c in the Linux kernel through 4.4. A denial of service (out-of-bounds memory access and BUG) can occur for a modified f2fs filesystem image in which an inline inode contains an invalid reserved blkaddr. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/10/msg00003.html - https://sourceforge.net/p/linux-f2fs/mailman/message/36356878/ - http://www.securityfocus.com/bid/104680 - https://www.debian.org/security/2018/dsa-4308
f2fs/mailman/message/36356878/ - http://www.securityfocus.com/bid/104680 - https://www.debian.org/security/2018/dsa-4308 - https://bugzilla.kernel.org/show_bug.cgi?id=200179 - https://seclists.org/bugtraq/2019/Jan/52 - http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00033.html - http://packetstormsecurity.com/files/151420/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://seclists.org/bugtraq/2018/Oct/4 - https://usn.ubuntu.com/3932-1/ - https://usn.ubuntu.com/3932-2/ - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4118-1/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4dbe38dc386910c668c75ae616b99b823b59f3eb -
ttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4dbe38dc386910c668c75ae616b99b823b59f3eb - https://git.kernel.org/pub/scm/linux/kernel/git/tip/tip.git/commit/?id=3bfe2049c222b23342ff2a216cd5a869e8a14897
CVE ID: CVE-2018-13100 State: PUBLISHED Published: 2018-07-03T05:00:00 Last Updated: 2024-08-05T08:52:50.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in fs/f2fs/super.c in the Linux kernel through 4.17.3, which does not properly validate secs_per_zone in a corrupted f2fs image, as demonstrated by a divide-by-zero error. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/104679 - https://bugzilla.kernel.org/show_bug.cgi?id=200183 - https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html - https://seclists.org/bugtraq/2019/Jan/52 - http://lists.opensuse.org/opensuse-security-announce/2018-10/ms
g00017.html - https://seclists.org/bugtraq/2019/Jan/52 - http://lists.opensuse.org/opensuse-security-announce/2018-10/msg00033.html - http://packetstormsecurity.com/files/151420/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.html - https://usn.ubuntu.com/3932-1/ - https://usn.ubuntu.com/3932-2/ - https://usn.ubuntu.com/4094-1/ - https://usn.ubuntu.com/4118-1/ - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=42bf546c1fe3f3654bdf914e977acbc2b80a5be5
CVE ID: CVE-2018-13101 State: PUBLISHED Published: 2018-07-03T11:00:00 Last Updated: 2024-08-05T08:52:50.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: KioskSimpleService.exe in RedSwimmer KioskSimple 1.4.7.0 suffers from a privilege escalation vulnerability in the WCF endpoint. The exposed methods allow read and write access to the Windows registry and control of services. These methods may be abused to achieve privilege escalation via execution of attacker controlled binaries. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/VerSprite/research/blob/master/advisories/VS-2018-026.md
CVE ID: CVE-2018-13102 State: PUBLISHED Published: 2018-07-03T16:00:00 Last Updated: 2024-08-05T08:52:50.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: AnyDesk before "12.06.2018 - 4.1.3" on Windows 7 SP1 has a DLL preloading vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://download.anydesk.com/changelog.txt
CVE ID: CVE-2018-13103 State: PUBLISHED Published: 2019-03-17T18:55:40 Last Updated: 2024-08-05T08:52:50.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite 7.8.4 and earlier allows SSRF. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151243/Open-Xchange-OX-App-Suite-Cross-Site-Scripting-SSRF.html - http://seclists.org/fulldisclosure/2019/Jan/46
CVE ID: CVE-2018-13104 State: PUBLISHED Published: 2019-03-17T19:01:06 Last Updated: 2024-08-05T08:52:50.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: OX App Suite 7.8.4 and earlier allows XSS. Internal reference: 58742 (Bug ID) Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/151243/Open-Xchange-OX-App-Suite-Cross-Site-Scripting-SSRF.html - http://seclists.org/fulldisclosure/2019/Jan/46
CVE ID: CVE-2018-13106 State: PUBLISHED Published: 2018-07-03T16:00:00 Last Updated: 2024-08-05T08:52:50.348Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClipperCMS 1.3.3 has stored XSS via the "Tools -> Configuration" screen of the manager/ URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ClipperCMS/ClipperCMS/issues/489
CVE ID: CVE-2018-13108 State: PUBLISHED Published: 2018-07-06T14:00:00 Last Updated: 2024-08-05T08:52:50.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: All ADB broadband gateways / routers based on the Epicentro platform are affected by a local root jailbreak vulnerability where attackers are able to gain root access on the device, and extract further information such as sensitive configuration data of the ISP (e.g., VoIP credentials) or attack the internal network of the ISP. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Jul/17 - http://packetstormsecurity.com/files/148424/ADB-Local-Root-Jailbreak.html - https://www
org/fulldisclosure/2018/Jul/17 - http://packetstormsecurity.com/files/148424/ADB-Local-Root-Jailbreak.html - https://www.exploit-db.com/exploits/44983/ - http://www.securityfocus.com/archive/1/542117/100/0/threaded - https://www.sec-consult.com/en/blog/advisories/local-root-jailbreak-via-network-file-sharing-flaw-in-all-adb-broadband-gateways-routers/
CVE ID: CVE-2018-13109 State: PUBLISHED Published: 2018-07-06T14:00:00 Last Updated: 2024-08-05T08:52:50.405Z Vendors: n/a Products: n/a Problem Types: n/a Description: All ADB broadband gateways / routers based on the Epicentro platform are affected by an authorization bypass vulnerability where attackers are able to access and manipulate settings within the web interface that are forbidden to end users (e.g., by the ISP). An attacker would be able to enable the TELNET server or other settings as well. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/Jul/18 - https://www.exploit-db.com/exploits/44982/ - http://packetstormsecurity.com/f
/seclists.org/fulldisclosure/2018/Jul/18 - https://www.exploit-db.com/exploits/44982/ - http://packetstormsecurity.com/files/148429/ADB-Authorization-Bypass.html - http://www.securityfocus.com/archive/1/542119/100/0/threaded - https://www.sec-consult.com/en/blog/advisories/authorization-bypass-in-all-adb-broadband-gateways-routers/
CVE ID: CVE-2018-13110 State: PUBLISHED Published: 2018-07-06T14:00:00 Last Updated: 2024-08-05T08:52:50.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: All ADB broadband gateways / routers based on the Epicentro platform are affected by a privilege escalation vulnerability where attackers can gain access to the command line interface (CLI) if previously disabled by the ISP, escalate their privileges, and perform further attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.sec-consult.com/en/blog/advisories/privilege-escalation-via-linux-group-manipulation-in-all-adb-broadband-gateways-routers/ - http://www.securityfocus.com/archive/1/542118/1
on-via-linux-group-manipulation-in-all-adb-broadband-gateways-routers/ - http://www.securityfocus.com/archive/1/542118/100/0/threaded - https://www.exploit-db.com/exploits/44984/ - http://packetstormsecurity.com/files/148430/ADB-Group-Manipulation-Privilege-Escalation.html - http://seclists.org/fulldisclosure/2018/Jul/19
CVE ID: CVE-2018-13111 State: PUBLISHED Published: 2018-09-21T17:00:00 Last Updated: 2024-08-05T08:52:50.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: There exists a partial Denial of Service vulnerability in Wanscam HW0021 IP Cameras. An attacker could craft a malicious POST request to crash the ONVIF service on such a device. Additional Analyst Notes: - CVE Program Container: References: - https://hackinganarchy.wordpress.com/2018/09/20/cve-2018-13111/
CVE ID: CVE-2018-13112 State: PUBLISHED Published: 2018-07-03T17:00:00 Last Updated: 2024-08-05T08:52:50.396Z Vendors: n/a Products: n/a Problem Types: n/a Description: get_l2len in common/get.c in Tcpreplay 4.3.0 beta1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via crafted packets, as demonstrated by tcpprep. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/appneta/tcpreplay/issues/477
CVE ID: CVE-2018-13113 State: PUBLISHED Published: 2018-07-03T00:00:00 Last Updated: 2024-08-05T08:52:50.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: The transfer and transferFrom functions of a smart contract implementation for Easy Trading Token (ETT), an Ethereum token, have an integer overflow. NOTE: this has been disputed by a third party. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/safecomet/EtherTokens/tree/master/Easy%20Trading%20Token%20%28ETT%29 - https://github.com/soohoio/VeriSmartBench/wiki/CVE-False-Reported-Case
CVE ID: CVE-2018-13114 State: PUBLISHED Published: 2018-10-22T20:00:00 Last Updated: 2024-08-05T08:52:50.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Missing authentication and improper input validation in KERUI Wifi Endoscope Camera (YPC99) allow an attacker to execute arbitrary commands (with a length limit of 19 characters) via the "ssid" value, as demonstrated by ssid:;ping 192.168.1.2 in the body of a SETSSID command. Additional Analyst Notes: - CVE Program Container: References: - https://utkusen.com/blog/multiple-vulnerabilities-on-kerui-endoscope-camera.html
CVE ID: CVE-2018-13115 State: PUBLISHED Published: 2018-10-22T20:00:00 Last Updated: 2024-08-05T08:52:50.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: Lack of an authentication mechanism in KERUI Wifi Endoscope Camera (YPC99) allows an attacker to watch or block the camera stream. The RTSP server on port 7070 accepts the command STOP to stop streaming, and the command SETSSID to disconnect a user. Additional Analyst Notes: - CVE Program Container: References: - https://utkusen.com/blog/multiple-vulnerabilities-on-kerui-endoscope-camera.html
CVE ID: CVE-2018-13116 State: PUBLISHED Published: 2018-07-03T19:00:00 Last Updated: 2024-08-05T08:52:50.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: /user/del.php in zzcms 8.3 allows SQL injection via the tablename parameter after leveraging use of the zzcms_ask table. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/actionyz/ZZCMS/blob/master/SQL/1/del.php.md
CVE ID: CVE-2018-13121 State: PUBLISHED Published: 2018-07-03T22:00:00 Last Updated: 2024-08-05T08:52:50.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: RealOne Player 2.0 Build 6.0.11.872 allows remote attackers to cause a denial of service (array out-of-bounds access and application crash) via a crafted .aiff file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/921580451/RealOnePlayer-sBug/issues/1
CVE ID: CVE-2018-13122 State: PUBLISHED Published: 2018-07-03T22:00:00 Last Updated: 2024-08-05T08:52:50.606Z Vendors: n/a Products: n/a Problem Types: n/a Description: onefilecms.php in OneFileCMS through 2017-10-08 might allow attackers to delete arbitrary files via the Delete File(s) screen, as demonstrated by a ?i=var/www/html/&f=123.php&p=edit&p=deletefile URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Self-Evident/OneFileCMS/issues/49
CVE ID: CVE-2018-13123 State: PUBLISHED Published: 2018-07-03T22:00:00 Last Updated: 2024-08-05T08:52:50.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: onefilecms.php in OneFileCMS through 2017-10-08 might allow attackers to read arbitrary files via the i and f parameters, as demonstrated by ?i=etc/&f=passwd&p=raw_view for the /etc/passwd file. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Self-Evident/OneFileCMS/issues/50
CVE ID: CVE-2018-13126 State: PUBLISHED Published: 2018-07-04T00:00:00Z Last Updated: 2024-09-17T03:02:42.315Z Vendors: n/a Products: n/a Problem Types: n/a Description: MoxyOnePresale is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dwfault/AirTokens/blob/master/SPXToken/mint%20interger%20overflow.md - https://github.com/dwfault/AirTokens/tree/master/MoxyOnePresale
CVE ID: CVE-2018-13127 State: PUBLISHED Published: 2018-07-04T00:00:00Z Last Updated: 2024-09-17T00:01:42.309Z Vendors: n/a Products: n/a Problem Types: n/a Description: SP8DE PreSale Token (DSPX) is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dwfault/AirTokens/blob/master/SPXToken/mint%20interger%20overflow.md - https://github.com/dwfault/AirTokens/tree/master/DSPX
CVE ID: CVE-2018-13128 State: PUBLISHED Published: 2018-07-04T00:00:00Z Last Updated: 2024-09-17T02:01:16.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: Etherty Token (ETY) is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dwfault/AirTokens/blob/master/SPXToken/mint%20interger%20overflow.md - https://github.com/dwfault/AirTokens/tree/master/ETY
CVE ID: CVE-2018-13129 State: PUBLISHED Published: 2018-07-04T00:00:00Z Last Updated: 2024-09-16T17:53:40.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: SP8DE Token (SPX) is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dwfault/AirTokens/blob/master/SPXToken/mint%20interger%20overflow.md
CVE ID: CVE-2018-13130 State: PUBLISHED Published: 2018-07-04T00:00:00Z Last Updated: 2024-09-17T02:48:13.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bitotal (TFUND) is a smart contract running on Ethereum. The mintTokens function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dwfault/AirTokens/tree/master/Bitotal - https://github.com/dwfault/AirTokens/blob/master/SPXToken/mint%20interger%20overflow.md
CVE ID: CVE-2018-13131 State: PUBLISHED Published: 2018-07-04T00:00:00Z Last Updated: 2024-09-17T04:03:44.059Z Vendors: n/a Products: n/a Problem Types: n/a Description: SpadePreSale is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dwfault/AirTokens/blob/master/SPXToken/mint%20interger%20overflow.md - https://github.com/dwfault/AirTokens/tree/master/SpadePreSale
CVE ID: CVE-2018-13132 State: PUBLISHED Published: 2018-07-04T00:00:00Z Last Updated: 2024-09-17T01:36:56.731Z Vendors: n/a Products: n/a Problem Types: n/a Description: Spadeico is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dwfault/AirTokens/blob/master/SPXToken/mint%20interger%20overflow.md - https://github.com/dwfault/AirTokens/tree/master/SpadeICO
CVE ID: CVE-2018-13133 State: PUBLISHED Published: 2018-07-04T08:00:00 Last Updated: 2024-08-05T08:52:50.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Golden Frog VyprVPN before 2018-06-21 has a vulnerability associated with the installation process on Windows. Additional Analyst Notes: - CVE Program Container: References: - https://www.goldenfrog.com/blog/vyprvpn-secured-installation-vulnerability - https://fortiguard.com/zeroday/FG-VD-18-049
CVE ID: CVE-2018-13134 State: PUBLISHED Published: 2018-07-04T08:00:00 Last Updated: 2024-08-05T08:52:50.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATH_INFO to the /webpages/data URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.xc0re.net/2018/05/25/tp-link-wireless-router-archer-c1200-cross-site-scripting/ - https://www.exploit-db.com/exploits/45970/
CVE ID: CVE-2018-13136 State: PUBLISHED Published: 2018-07-04T08:00:00 Last Updated: 2024-08-05T08:52:50.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ultimate Member (aka ultimatemember) plugin before 2.0.18 for WordPress has XSS via the wp-admin settings screen. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ultimatemember/ultimatemember/issues/456 - https://github.com/ultimatemember/ultimatemember/releases/tag/2.0.18 - https://wpvulndb.com/vulnerabilities/9708
CVE ID: CVE-2018-13137 State: PUBLISHED Published: 2019-04-12T17:52:07 Last Updated: 2024-08-05T08:52:50.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Events Manager plugin 5.9.4 for WordPress has XSS via the dbem_event_reapproved_email_body parameter to the wp-admin/edit.php?post_type=event&page=events-manager-options URI. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/events-manager/#developers - https://gist.github.com/ansarisec/12737c207c0851d52865ed60c08891b7 - https://ansawaf.blogspot.com/2019/04/cve-2018-13137-xss-in-events-manager.html - https://wpvulndb.com/vulnerabilities/9612
CVE ID: CVE-2018-13139 State: PUBLISHED Published: 2018-07-04T14:00:00 Last Updated: 2024-08-05T08:52:50.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack-based buffer overflow in psf_memset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted audio file. The vulnerability can be triggered by the executable sndfile-deinterleave. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/12/msg00016.html - https://github.com/erikd/libsndfile/issues/397 - https://security.gentoo.org/glsa/201811-23 - https://us
msg00016.html - https://github.com/erikd/libsndfile/issues/397 - https://security.gentoo.org/glsa/201811-23 - https://usn.ubuntu.com/4013-1/
CVE ID: CVE-2018-13140 State: PUBLISHED Published: 2018-09-24T22:00:00 Last Updated: 2024-08-05T08:52:50.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Druide Antidote through 9.5.1 on Windows and Linux allows remote code execution through the update mechanism by leveraging use of HTTP to download installation packages. Additional Analyst Notes: - CVE Program Container: References: - https://sysdream.com/news/lab/2018-09-21-cve-2018-13140-antidote-remote-code-execution-against-the-update-component/ - http://seclists.org/fulldisclosure/2018/Sep/38 - http://packetstormsecurity.com/files/149468/Antidote-9.5.1-Code-Execution.html
CVE ID: CVE-2018-13144 State: PUBLISHED Published: 2018-07-04T00:00:00 Last Updated: 2024-08-05T08:52:50.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: The transfer and transferFrom functions of a smart contract implementation for Pandora (PDX), an Ethereum token, have an integer overflow. NOTE: this has been disputed by a third party. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/safecomet/EtherTokens/blob/master/Pandora%20%28PDX%29/Pandora%20%28PDX%29.md - https://github.com/soohoio/VeriSmartBench/wiki/CVE-False-Reported-Case
CVE ID: CVE-2018-13145 State: PUBLISHED Published: 2018-07-04T15:00:00Z Last Updated: 2024-09-16T23:41:32.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken function of a smart contract implementation for JavaSwapTest (JST), an Ethereum token, has an integer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/safecomet/EtherTokens/blob/master/JavaSwapTest%20%28JST%29/JavaSwapTest%20%28JST%29.md
CVE ID: CVE-2018-13146 State: PUBLISHED Published: 2018-07-04T15:00:00Z Last Updated: 2024-09-17T01:36:16.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mintToken, buy, and sell functions of a smart contract implementation for LEF, an Ethereum token, have an integer overflow. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/safecomet/EtherTokens/blob/master/LEF%20%28LEF%29/LEF%20%28LEF%29.md
CVE ID: CVE-2018-13153 State: PUBLISHED Published: 2018-07-05T02:00:00 Last Updated: 2024-08-05T08:52:50.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/1195 - http://www.securitytracker.com/id/1041219 - https://usn.ubuntu.com/3711-1/ - http://www.securityfocus.com/bid/104687