deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-6275
Published: 2019-11-05
Description: Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: http://archives.neohapsis.com/archives/bugtraq/2013-10/0134.html; http://www.exploit-db.com/exploits/29274; http://www.securityfocus.com/bid/63377
CVE: CVE-2019-12625
Published: 2019-11-05
Description: ClamAV versions prior to 0.101.3 are susceptible to a zip bomb vulnerability where an unauthenticated attacker can cause a denial of service condition by sending crafted messages to an affected system.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-404
References: http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00078.html; http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00000.html; https://blog.clamav.net/2019/08/clamav-01014-security-patch-release-has.html
CVE: CVE-2019-15966
Published: 2019-11-05
Description: A vulnerability in the web application of Cisco TelePresence Advanced Media Gateway could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the lack of input validation in the web application. An attacker could exploit this vulnerability by sending a crafted authenticated HTTP request to the device. An exploit could allow the attacker to stop services on an affected device. The device may become inoperable and results in a denial of service (DoS) condition.
CVSS Score: 7.7 (HIGH)
CWE: CWE-20, CWE-20
References: https://quickview.cloudapps.cisco.com/quickview/bug/CSCvr69362; https://quickview.cloudapps.cisco.com/quickview/bug/CSCvr69362
CVE: CVE-2019-1789
Published: 2019-11-05
Description: ClamAV versions prior to 0.101.2 are susceptible to a denial of service (DoS) vulnerability. An out-of-bounds heap read condition may occur when scanning PE files. An example is Windows EXE and DLL files that have been packed using Aspack as a result of inadequate bound-checking.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-125
References: https://blog.clamav.net/2019/03/clamav-01012-and-01003-patches-have.html; https://blog.clamav.net/2019/03/clamav-01012-and-01003-patches-have.html
CVE: CVE-2005-2354
Published: 2019-11-05
Description: Nvu 0.99+1.0pre uses an old copy of Mozilla XPCOM which can result in multiple security issues.
CVSS Score: 9.8 (CRITICAL)
References: http://www.attrition.org/pipermail/vim/2014-February/002758.html; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=306822; https://security-tracker.debian.org/tracker/CVE-2005-2354
CVE: CVE-2010-2222
Published: 2019-11-05
Description: The _ger_parse_control function in Red Hat Directory Server 8 and the 389 Directory Server allows attackers to cause a denial of service (NULL pointer dereference) via a crafted search query.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://access.redhat.com/security/cve/cve-2010-2222; https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-2222; https://access.redhat.com/security/cve/cve-2010-2222
CVE: CVE-2010-3670
Published: 2019-11-05
Description: TYPO3 before 4.3.4 and 4.4.x before 4.4.1 contains insecure randomness during generation of a hash with the "forgot password" function.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-326
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719; https://security-tracker.debian.org/tracker/CVE-2010-3670; https://typo3.org/security/advisory/typo3-sa-2010-012/#Insecure_Randomness
CVE: CVE-2010-3671
Published: 2019-11-05
Description: TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 is open to a session fixation attack which allows remote attackers to hijack a victim's session.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-384
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719; https://security-tracker.debian.org/tracker/CVE-2010-3671; https://typo3.org/security/advisory/typo3-sa-2010-012/#Broken_Authentication_and_Session_Management
CVE: CVE-2010-3672
Published: 2019-11-05
Description: TYPO3 before 4.3.4 and 4.4.x before 4.4.1 allows XSS in the textarea view helper in an extbase extension.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719; https://security-tracker.debian.org/tracker/CVE-2010-3672; https://typo3.org/security/advisory/typo3-sa-2010-012/#XSS
CVE: CVE-2010-3673
Published: 2019-11-05
Description: TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows information disclosure in the mail header of the HTML mailing API.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719; https://security-tracker.debian.org/tracker/CVE-2010-3673; https://typo3.org/security/advisory/typo3-sa-2010-012/#Information_Disclosure
CVE: CVE-2010-3674
Published: 2019-11-05
Description: TYPO3 before 4.4.1 allows XSS in the frontend search box.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719; https://security-tracker.debian.org/tracker/CVE-2010-3674; https://typo3.org/security/advisory/typo3-sa-2010-012/#XSS
CVE: CVE-2019-10084
Published: 2019-11-05
Description: In Apache Impala 2.7.0 to 3.2.0, an authenticated user with access to the IDs of active Impala queries or sessions can interact with those sessions or queries via a specially-constructed request and thereby potentially bypass authorization and audit mechanisms. Session and query IDs are unique and random, but have not been documented or consistently treated as sensitive secrets. Therefore they may be exposed in logs or interfaces. They were also not generated with a cryptographically secure random number generator, so are vulnerable to random number generator attacks that predict future IDs based on past IDs. Impala deployments with Apache Sentry or Apache Ranger authorization enabled may be vulnerable to privilege escalation if an authenticated attacker is able to hijack a session or query from another authenticated user with privileges not assigned to the attacker. Impala deployments with audit logging enabled may be vulnerable to incorrect audit logging as a user could undertake actions that were logged under the name of a different authenticated user. Constructing an attack requires a high degree of technical sophistication and access to the Impala system as an authenticated user.
CVSS Score: 7.5 (HIGH)
CWE: CWE-311, CWE-330, CWE-384, CWE-532, CWE-732
References: http://www.openwall.com/lists/oss-security/2019/11/04/1; https://lists.apache.org/thread.html/ee73dd8dc38ac3b3b132c79c9a02cf9524af9aa11190474c0ebd1f13%40%3Cdev.impala.apache.org%3E; http://www.openwall.com/lists/oss-security/2019/11/04/1
CVE: CVE-2019-18780
Published: 2019-11-05
Description: An arbitrary command injection vulnerability in the Cluster Server component of Veritas InfoScale allows an unauthenticated remote attacker to execute arbitrary commands as root or administrator. These Veritas products are affected: Access 7.4.2 and earlier, Access Appliance 7.4.2 and earlier, Flex Appliance 1.2 and earlier, InfoScale 7.3.1 and earlier, InfoScale between 7.4.0 and 7.4.1, Veritas Cluster Server (VCS) 6.2.1 and earlier on Linux/UNIX, Veritas Cluster Server (VCS) 6.1 and earlier on Windows, Storage Foundation HA (SFHA) 6.2.1 and earlier on Linux/UNIX, and Storage Foundation HA (SFHA) 6.1 and earlier on Windows.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77
References: https://www.veritas.com/content/support/en_US/security/VTS19-003; https://www.veritas.com/content/support/en_US/security/VTS19-004; https://www.veritas.com/content/support/en_US/security/VTS19-005
CVE: CVE-2019-1734
Published: 2019-11-05
Description: A vulnerability in the implementation of a CLI diagnostic command in Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to view sensitive system files that should be restricted. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to incomplete role-based access control (RBAC) verification. An attacker could exploit this vulnerability by authenticating to the device and issuing a specific CLI diagnostic command with crafted user-input parameters. An exploit could allow the attacker to perform an arbitrary read of a file on the device, and the file may contain sensitive information. The attacker needs valid device credentials to exploit this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-nxos-fxos-info; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-nxos-fxos-info
CVE: CVE-2019-1877
Published: 2019-11-05
Description: A vulnerability in the HTTP API of Cisco Enterprise Chat and Email could allow an unauthenticated, remote attacker to download files attached through chat sessions. The vulnerability is due to insufficient authentication mechanisms on the file download function of the API. An attacker could exploit this vulnerability by sending a crafted request to the API. A successful exploit could allow the attacker to download files that other users attach through the chat feature. This vulnerability affects versions prior to 12.0(1)ES1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-287
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-ecea-dwnload; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-ecea-dwnload
CVE: CVE-2019-1978
Published: 2019-11-05
Description: A vulnerability in the stream reassembly component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to improper reassembly of traffic streams. An attacker could exploit this vulnerability by sending crafted streams through an affected device. An exploit could allow the attacker to bypass filtering and deliver malicious requests to protected systems that would otherwise be blocked.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190816-ftd-srb; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190816-ftd-srb
CVE: CVE-2019-1980
Published: 2019-11-05
Description: A vulnerability in the protocol detection component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to improper detection of the initial use of a protocol on a nonstandard port. An attacker could exploit this vulnerability by sending traffic on a nonstandard port for the protocol in use through an affected device. An exploit could allow the attacker to bypass filtering and deliver malicious requests to protected systems that would otherwise be blocked. Once the initial protocol flow on the nonstandard port is detected, future flows on the nonstandard port will be successfully detected and handled as configured by the applied policy.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-264, CWE-287
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190816-ftd-nspd; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190816-ftd-nspd
CVE: CVE-2019-1981
Published: 2019-11-05
Description: A vulnerability in the normalization functionality of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to insufficient normalization of a text-based payload. An attacker could exploit this vulnerability by sending traffic that contains specifically obfuscated payloads through an affected device. An exploit could allow the attacker to bypass filtering and deliver malicious payloads to protected systems that would otherwise be blocked.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-264, CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190816-ftd-null; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190816-ftd-null
CVE: CVE-2019-1982
Published: 2019-11-05
Description: A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to improper handling of HTTP requests, including those communicated over a secure HTTPS connection, that contain maliciously crafted headers. An attacker could exploit this vulnerability by sending malicious requests to an affected device. An exploit could allow the attacker to bypass filtering and deliver malicious requests to protected systems, allowing attackers to deliver malicious content that would otherwise be blocked.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-264, CWE-276
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190816-ftd-http; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190816-ftd-http
CVE: CVE-2011-1133
Published: 2019-11-05
Description: Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code via plugins/ExtendedFileManager/backend.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.s9y.org/archives/224-Important-Security-Update-Serendipity-1.5.5-released.html; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611661; https://security-tracker.debian.org/tracker/CVE-2011-1133
CVE: CVE-2011-1134
Published: 2019-11-05
Description: Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in the image manager.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://blog.s9y.org/archives/224-Important-Security-Update-Serendipity-1.5.5-released.html; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611661; https://security-tracker.debian.org/tracker/CVE-2011-1134
CVE: CVE-2011-1135
Published: 2019-11-05
Description: Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/ImageManager/manager.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://blog.s9y.org/archives/224-Important-Security-Update-Serendipity-1.5.5-released.html; https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611661; https://security-tracker.debian.org/tracker/CVE-2011-1135
CVE: CVE-2018-19152
Published: 2019-11-05
Description: emercoin through 0.7 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. The attacker sends invalid headers/blocks. The attack requires no stake and can fill the victim's disk and RAM.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf; https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806; http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE: CVE-2018-19153
Published: 2019-11-05
Description: particl through 0.17 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. The attacker sends invalid headers/blocks. The attack requires no stake and can fill the victim's disk and RAM.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf; https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806; http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE: CVE-2018-19154
Published: 2019-11-05
Description: HTMLCOIN through 2.12 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. The attacker sends invalid headers/blocks. The attack requires no stake and can fill the victim's disk and RAM.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf; https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806; http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE: CVE-2018-19155
Published: 2019-11-05
Description: navcoin through 4.3.0 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service. The attacker sends invalid headers/blocks. The attack requires no stake and can fill the victim's disk and RAM.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf; https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806; http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE: CVE-2018-19156
Published: 2019-11-05
Description: PIVX through 3.1.03 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf; https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806; http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE: CVE-2018-19157
Published: 2019-11-05
Description: Phore through 1.3.3.1 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf; https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806; http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE: CVE-2018-19159
Published: 2019-11-05
Description: lux through 5.2.2 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf; https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806; http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE: CVE-2018-19160
Published: 2019-11-05
Description: Diamond through 3.0.1.2 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf; https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806; http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE: CVE-2018-19161
Published: 2019-11-05
Description: alqo through 4.1 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf; https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806; http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE: CVE-2018-19162
Published: 2019-11-05
Description: Divi through 4.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf; https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806; http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE: CVE-2018-19163
Published: 2019-11-05
Description: stratisX through 2.0.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf; https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806; http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE: CVE-2018-19164
Published: 2019-11-05
Description: reddcoin through 2.1.0.5 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf; https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806; http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE: CVE-2018-19165
Published: 2019-11-05
Description: neblio through 1.5.1 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf; https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806; http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE: CVE-2018-19166
Published: 2019-11-05
Description: peercoin through 0.6.4 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf; https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806; http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf
CVE: CVE-2018-19167
Published: 2019-11-05
Description: CloakCoin through 2.2.2.0 (a chain-based proof-of-stake cryptocurrency) allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf; https://medium.com/%40dsl_uiuc/fake-stake-attacks-on-chain-based-proof-of-stake-cryptocurrencies-b8b05723f806; http://fc19.ifca.ai/preproceedings/180-preproceedings.pdf