Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-19127 State: PUBLISHED Published: 2018-11-09T12:00:00 Last Updated: 2024-08-05T11:30:03.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: A code injection vulnerability in /type.php in PHPCMS 2008 allows attackers to write arbitrary content to a website cache file with a controllable filename, leading to arbitrary code execution. The PHP code is sent via the template parameter, and is written to a data/cache_template/*.tpl.php file along with a "<?php function " substring. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ab1gale/phpcms-2008-CVE-2018-19127
CVE ID: CVE-2018-19128 State: PUBLISHED Published: 2018-11-09T11:00:00 Last Updated: 2024-08-05T11:30:04.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Libav 12.3, there is a heap-based buffer over-read in decode_frame in libavcodec/lcldec.c that allows an attacker to cause denial-of-service via a crafted avi file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1137 - https://lists.debian.org/debian-lts-announce/2019/12/msg00003.html
CVE ID: CVE-2018-19129 State: PUBLISHED Published: 2018-11-09T11:00:00 Last Updated: 2024-08-05T11:30:03.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Libav 12.3, a NULL pointer dereference (RIP points to zero) issue in ff_mpa_synth_filter_float in libavcodec/mpegaudiodsp_template.c can cause a segmentation fault (application crash) via a crafted mov file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1138
CVE ID: CVE-2018-19130 State: PUBLISHED Published: 2018-11-09T11:00:00 Last Updated: 2024-08-05T11:30:03.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Libav 12.3, there is an invalid memory access in vc1_decode_frame in libavcodec/vc1dec.c that allows attackers to cause a denial-of-service via a crafted aac file. NOTE: This may be a duplicate of CVE-2017-17127 Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.libav.org/show_bug.cgi?id=1139 - https://lists.debian.org/debian-lts-announce/2019/12/msg00003.html
CVE ID: CVE-2018-19131 State: PUBLISHED Published: 2018-11-09T11:00:00Z Last Updated: 2024-09-16T18:33:29.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors. Additional Analyst Notes: - CVE Program Container: References: - http://www.squid-cache.org/Versions/v5/changesets/squid-5-6feeb15ff312f3e145763adf8d234ed6a0b3f11d.patch - http://www.squid-cache.org/Advisories/SQUID-2018_4.txt - https://github.com/squid-cache/squid/pull/306
CVE ID: CVE-2018-19132 State: PUBLISHED Published: 2018-11-09T11:00:00 Last Updated: 2024-08-05T11:30:03.999Z Vendors: n/a Products: n/a Problem Types: n/a Description: Squid before 4.4, when SNMP is enabled, allows a denial of service (Memory Leak) via an SNMP packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/squid-cache/squid/pull/313 - http://www.squid-cache.org/Versions/v5/changesets/squid-5-644131ff1e00c1895d77561f561d29c104ba6b11.patch - http://www.squid-cache.org/Advisories/SQUID-2018_5.txt - https://lists.debian.org/debian-lts-announce/2018/11/msg00032.html - https://usn.ubuntu.com/4059-1/ - https://lists.debian.org/debian-lts-announce/2020/0
ts-announce/2018/11/msg00032.html - https://usn.ubuntu.com/4059-1/ - https://lists.debian.org/debian-lts-announce/2020/07/msg00009.html
CVE ID: CVE-2018-19133 State: PUBLISHED Published: 2018-11-09T11:00:00Z Last Updated: 2024-09-16T18:54:07.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Flarum Core 0.1.0-beta.7.1, a serious leak can get everyone's email address. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/flarum/core/issues/1628
CVE ID: CVE-2018-19134 State: PUBLISHED Published: 2018-12-20T22:00:00 Last Updated: 2024-08-05T11:30:03.970Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Artifex Ghostscript through 9.25, the setpattern operator did not properly validate certain types. A specially crafted PostScript document could exploit this to crash Ghostscript or, possibly, execute arbitrary code in the context of the Ghostscript process. This is a type confusion issue because of failure to check whether the Implementation of a pattern dictionary was a structure type. Additional Analyst Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3834 - https://bugs.ghostscri
t Notes: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2018:3834 - https://bugs.ghostscript.com/show_bug.cgi?id=700141 - http://git.ghostscript.com/?p=ghostpdl.git%3Ba=commitdiff%3Bh=693baf02152119af6e6afd30bb8ec76d14f84bbf - https://semmle.com/news/semmle-discovers-severe-vulnerability-ghostscript-postscript-pdf - http://www.securityfocus.com/bid/106278 - https://lists.debian.org/debian-lts-announce/2018/12/msg00019.html - https://www.ghostscript.com/doc/9.26/News.htm
CVE ID: CVE-2018-19135 State: PUBLISHED Published: 2018-11-11T04:00:00 Last Updated: 2024-08-05T11:30:04.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: ClipperCMS 1.3.3 does not have CSRF protection on its kcfinder file upload (enabled by default). This can be used by an attacker to perform actions for an admin (or any user with the file upload capability). With this vulnerability, one can automatically upload files (by default, it allows html, pdf, xml, zip, and many other file types). A file can be accessed publicly under the "/assets/files" directory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ClipperCMS/ClipperCMS/issues/494 - htt
ditional Analyst Notes: - CVE Program Container: References: - https://github.com/ClipperCMS/ClipperCMS/issues/494 - https://www.exploit-db.com/exploits/45839/
CVE ID: CVE-2018-19136 State: PUBLISHED Published: 2018-11-09T19:00:00 Last Updated: 2024-08-05T11:30:04.014Z Vendors: n/a Products: n/a Problem Types: n/a Description: DomainMOD through 4.11.01 has XSS via the assets/edit/registrar-account.php raid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/domainmod/domainmod/issues/79 - https://www.exploit-db.com/exploits/45883/
CVE ID: CVE-2018-19137 State: PUBLISHED Published: 2018-11-09T19:00:00Z Last Updated: 2024-09-16T19:04:17.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: DomainMOD through 4.11.01 has XSS via the assets/edit/ip-address.php ipid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/domainmod/domainmod/issues/79
CVE ID: CVE-2018-19138 State: PUBLISHED Published: 2018-11-09T21:00:00 Last Updated: 2024-08-05T11:30:04.113Z Vendors: n/a Products: n/a Problem Types: n/a Description: WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/46036/ - https://github.com/yanchongchong/swallow/issues/11
CVE ID: CVE-2018-19139 State: PUBLISHED Published: 2018-11-09T21:00:00 Last Updated: 2024-08-05T11:30:04.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2019/01/msg00003.html - https://github.com/mdadams/jasper/issues/188 - http://www.securityfocus.com/bid/105956 - https://www.oracle.com/security-alerts/cpuapr2020.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html - http://lists.opensuse.org/opensuse-security-an
p://lists.opensuse.org/opensuse-security-announce/2020-09/msg00082.html - http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00085.html
CVE ID: CVE-2018-19141 State: PUBLISHED Published: 2018-11-11T05:00:00 Last Updated: 2024-08-05T11:30:04.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Ticket Request System (OTRS) 4.0.x before 4.0.33 and 5.0.x before 5.0.31 allows an admin to conduct an XSS attack via a modified URL because user and customer preferences are mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://lists.debian.org/debian-lts-announce/2018/11/msg00028.html - https://community.otrs.com/security-advisory-2018-09-security-update-for-otrs-framework/
CVE ID: CVE-2018-19142 State: PUBLISHED Published: 2018-11-11T05:00:00 Last Updated: 2024-08-05T11:30:04.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Ticket Request System (OTRS) 6.0.x before 6.0.13 allows an admin to conduct an XSS attack via a modified URL. Additional Analyst Notes: - CVE Program Container: References: - https://community.otrs.com/security-advisory-2018-08-security-update-for-otrs-framework/
CVE ID: CVE-2018-19143 State: PUBLISHED Published: 2018-11-11T05:00:00 Last Updated: 2024-08-05T11:30:04.078Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Ticket Request System (OTRS) 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0.13 allows an authenticated user to delete files via a modified submission form because upload caching is mishandled. Additional Analyst Notes: - CVE Program Container: References: - https://community.otrs.com/security-advisory-2018-07-security-update-for-otrs-framework/ - https://lists.debian.org/debian-lts-announce/2018/11/msg00028.html
CVE ID: CVE-2018-19145 State: PUBLISHED Published: 2018-11-09T23:00:00 Last Updated: 2024-08-05T11:30:04.020Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter. Additional Analyst Notes: - CVE Program Container: References: - https://kingflyme.blogspot.com/2018/11/the-poc-of-s-cmsxss.html
CVE ID: CVE-2018-19146 State: PUBLISHED Published: 2019-06-17T19:53:48 Last Updated: 2024-08-05T11:30:04.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Concrete5 8.4.3 has XSS because config/concrete.php allows uploads (by administrators) of SVG files that may contain HTML data with a SCRIPT element. Additional Analyst Notes: - CVE Program Container: References: - https://www.w3.org/TR/SVG2/intro.html#W3CCompatibility - https://hackerone.com/concrete5?view_policy=true - https://www.concrete5.org/ - https://hackerone.com/reports/437863
CVE ID: CVE-2018-19148 State: PUBLISHED Published: 2018-11-10T19:00:00 Last Updated: 2024-08-05T11:30:04.037Z Vendors: n/a Products: n/a Problem Types: n/a Description: Caddy through 0.11.0 sends incorrect certificates for certain invalid requests, making it easier for attackers to enumerate hostnames. Specifically, when unable to match a Host header with a vhost in its configuration, it serves the X.509 certificate for a randomly selected vhost in its configuration. Repeated requests (with a nonexistent hostname in the Host header) permit full enumeration of all certificates on the server. This generally permits an attacker to easily and accurately discover the existence of and relationship
es on the server. This generally permits an attacker to easily and accurately discover the existence of and relationships among hostnames that weren't meant to be public, though this information could likely have been discovered via other methods with additional effort. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mholt/caddy/pull/2015 - https://github.com/mholt/caddy/issues/1303 - https://github.com/mholt/caddy/issues/2334
CVE ID: CVE-2018-19149 State: PUBLISHED Published: 2018-11-10T19:00:00 Last Updated: 2024-08-05T11:30:04.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Poppler before 0.70.0 has a NULL pointer dereference in _poppler_attachment_new when called from poppler_annot_file_attachment_get_attachment. Additional Analyst Notes: - CVE Program Container: References: - https://gitlab.freedesktop.org/poppler/poppler/issues/664 - http://www.securityfocus.com/bid/106031 - https://usn.ubuntu.com/3837-2/ - https://usn.ubuntu.com/3837-1/ - https://security.gentoo.org/glsa/201904-04 - https://access.redhat.com/errata/RHSA-2019:2022
CVE ID: CVE-2018-19150 State: PUBLISHED Published: 2018-11-10T19:00:00 Last Updated: 2024-08-05T11:30:04.177Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory corruption in PDMODELProvidePDModelHFT in pdmodel.dll in pdfforge PDF Architect 6 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact because of a "Data from Faulting Address controls Code Flow" issue. Additional Analyst Notes: - CVE Program Container: References: - https://nafiez.github.io/security/integer/2018/09/18/pdf-architect-corruption.html - https://github.com/nafiez/nafiez.github.io/blob/master/_posts/2018-09-19-pdf-architect-corruption.md
CVE ID: CVE-2018-19151 State: PUBLISHED Published: 2019-10-29T19:51:54 Last Updated: 2024-08-05T11:30:04.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: qtum through 0.16 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. The attacker sends invalid headers/blocks. The attack requires no stake and can fill the victim's disk and RAM. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806 - http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE ID: CVE-2018-19152 State: PUBLISHED Published: 2019-11-05T20:04:01 Last Updated: 2024-08-05T11:30:04.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: emercoin through 0.7 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. The attacker sends invalid headers/blocks. The attack requires no stake and can fill the victim's disk and RAM. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806 - http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE ID: CVE-2018-19153 State: PUBLISHED Published: 2019-11-05T20:05:10 Last Updated: 2024-08-05T11:30:04.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: particl through 0.17 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. The attacker sends invalid headers/blocks. The attack requires no stake and can fill the victim's disk and RAM. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806 - http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE ID: CVE-2018-19154 State: PUBLISHED Published: 2019-11-05T20:05:48 Last Updated: 2024-08-05T11:30:04.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: HTMLCOIN through 2.12 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. The attacker sends invalid headers/blocks. The attack requires no stake and can fill the victim's disk and RAM. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806 - http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE ID: CVE-2018-19155 State: PUBLISHED Published: 2019-11-05T20:06:21 Last Updated: 2024-08-05T11:30:04.052Z Vendors: n/a Products: n/a Problem Types: n/a Description: navcoin through 4.3.0 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. The attacker sends invalid headers/blocks. The attack requires no stake and can fill the victim's disk and RAM. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806 - http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE ID: CVE-2018-19156 State: PUBLISHED Published: 2019-11-05T20:07:16 Last Updated: 2024-08-05T11:30:04.035Z Vendors: n/a Products: n/a Problem Types: n/a Description: PIVX through 3.1.03 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806 - http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE ID: CVE-2018-19157 State: PUBLISHED Published: 2019-11-05T20:08:06 Last Updated: 2024-08-05T11:30:04.060Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phore through 1.3.3.1 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806 - http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE ID: CVE-2018-19158 State: PUBLISHED Published: 2019-03-17T21:22:48 Last Updated: 2024-08-05T11:30:04.112Z Vendors: n/a Products: n/a Problem Types: n/a Description: ColossusCoinXT through 1.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806 - http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf - https://gith
-proof-of-stake-cryptocurrencies-b8b05723f806 - http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf - https://github.com/ColossusCoinXT/ColossusCoinXT/compare/0223904...9666bb8
CVE ID: CVE-2018-19159 State: PUBLISHED Published: 2019-11-05T20:09:09 Last Updated: 2024-08-05T11:30:04.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: lux through 5.2.2 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806 - http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE ID: CVE-2018-19160 State: PUBLISHED Published: 2019-11-05T20:09:51 Last Updated: 2024-08-05T11:30:04.040Z Vendors: n/a Products: n/a Problem Types: n/a Description: Diamond through 3.0.1.2 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806 - http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE ID: CVE-2018-19161 State: PUBLISHED Published: 2019-11-05T20:10:35 Last Updated: 2024-08-05T11:30:03.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: alqo through 4.1 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806 - http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE ID: CVE-2018-19162 State: PUBLISHED Published: 2019-11-05T20:11:21 Last Updated: 2024-08-05T11:30:04.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: Divi through 4.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806 - http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE ID: CVE-2018-19163 State: PUBLISHED Published: 2019-11-05T20:12:07 Last Updated: 2024-08-05T11:30:04.140Z Vendors: n/a Products: n/a Problem Types: n/a Description: stratisX through 2.0.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806 - http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE ID: CVE-2018-19164 State: PUBLISHED Published: 2019-11-05T20:12:49 Last Updated: 2024-08-05T11:30:04.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: reddcoin through 2.1.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806 - http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE ID: CVE-2018-19165 State: PUBLISHED Published: 2019-11-05T20:13:54 Last Updated: 2024-08-05T11:30:04.041Z Vendors: n/a Products: n/a Problem Types: n/a Description: neblio through 1.5.1 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806 - http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE ID: CVE-2018-19166 State: PUBLISHED Published: 2019-11-05T20:14:36 Last Updated: 2024-08-05T11:30:04.036Z Vendors: n/a Products: n/a Problem Types: n/a Description: peercoin through 0.6.4 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk. Additional Analyst Notes: - CVE Program Container: References: - https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806 - http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf