deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-5858
Published: 2018-07-06
Description: In the audio debugfs in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, out of bounds access can occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2018-07-01; https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=cd1f0cdd4715e8eae4066bd34df2eef4cf94bd7f; https://source.codeaurora.org/quic/la/platform/vendor/opensource/audio-kernel/commit/?id=78193fa06b267c1d6582e5e6f9fb779cf067015e
CVE: CVE-2018-5859
Published: 2018-07-06
Description: Due to a race condition in the MDSS MDP driver in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, a Use After Free condition can occur.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: https://source.android.com/security/bulletin/pixel/2018-07-01; https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=36400a7fa3753028a3bf89a9cdb28c5e25693c59; https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
CVE: CVE-2018-5862
Published: 2018-07-06
Description: In __wlan_hdd_cfg80211_vendor_scan() in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, when SCAN_SSIDS and QCA_WLAN_VENDOR_ATTR_SCAN_FREQUENCIES are parsed, a buffer overwrite can potentially occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/pixel/2018-07-01; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=41ad3f76792e08a84962a0b8e9cfb1ba6c4c9ca6; https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
CVE: CVE-2018-5864
Published: 2018-07-06
Description: While processing a WMI_APFIND event in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, a buffer over-read and information leak can potentially occur.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2018-07-01; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-2.0/commit/?id=9c042f7827e0d21e5b93c04b418bca0230de91dc; https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
CVE: CVE-2018-5865
Published: 2018-07-06
Description: While processing a debug log event from firmware in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, an integer underflow and/or buffer over-read can occur.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-191
References: https://source.android.com/security/bulletin/pixel/2018-07-01; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=8fb4202e3bb8cfbbb9f9f0e8695891c9971cfcc2; https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
CVE: CVE-2018-5872
Published: 2018-07-06
Description: While parsing over-the-air information elements in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05, the use of an out-of-range pointer offset can occur.
CVSS Score: 8.0 (HIGH)
CWE: CWE-119
References: https://source.android.com/security/bulletin/2018-07-01; https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn/commit/?id=7d65c1b32df795d4e95cdf2cfb624126f5125220; https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin
CVE: CVE-2018-5873
Published: 2018-07-06
Description: An issue was discovered in the __ns_get_path function in fs/nsfs.c in the Linux kernel before 4.11. Due to a race condition when accessing files, a Use After Free condition can occur. This also affects all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android) before security patch level 2018-07-05.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073c516ff73557a8f[PII_REDACTED]c04b50383ac34; https://github.com/torvalds/linux/commit/073c516ff73557a8f[PII_REDACTED]c04b50383ac34; https://source.android.com/security/bulletin/2018-07-01
CVE: CVE-2018-5886
Published: 2018-07-06
Description: A pointer in an ADSPRPC command is not properly validated in all Android releases from CAF using the Linux kernel (Android for MSM, Firefox OS for MSM, QRD Android), which can lead to kernel memory being accessed.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=97017d[PII_REDACTED]9488bdcfcafb59654a6f10da; https://www.codeaurora.org/security-bulletin/2018/07/02/july-2018-code-aurora-security-bulletin; https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=97017d[PII_REDACTED]9488bdcfcafb59654a6f10da
CVE: CVE-2018-5907
Published: 2018-07-06
Description: Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that leads to integer overflow in all Android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://source.android.com/security/bulletin/pixel/2018-07-01#qualcomm-components; https://www.vulnerabilitycenter.com/#%21vul=87341; https://source.android.com/security/bulletin/pixel/2018-07-01#qualcomm-components
CVE: CVE-2016-6538
Published: 2018-07-06
Description: The TrackR Bravo mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been released by the vendor to address the vulnerabilities in CVE-2016-6538, CVE-2016-6539, CVE-2016-6540 and CVE-2016-6541.
CVSS Score: 8.8 (HIGH)
CWE: CWE-313, CWE-200, CWE-255
References: http://www.securityfocus.com/bid/93874; https://blog.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/; https://www.kb.cert.org/vuls/id/617567
CVE: CVE-2016-6539
Published: 2018-07-06
Description: The Trackr device ID is constructed of a manufacturer identifier of four zeroes followed by the BLE MAC address in reverse. The MAC address can be obtained by being in close proximity to the Bluetooth device, effectively exposing the device ID. The ID can be used to track devices. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been released by the vendor to address the vulnerabilities in CVE-2016-6538, CVE-2016-6539, CVE-2016-6540 and CVE-2016-6541.
CVSS Score: 3.5 (LOW)
CWE: CWE-200, CWE-200
References: http://www.securityfocus.com/bid/93874; https://blog.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/; https://www.kb.cert.org/vuls/id/617567
CVE: CVE-2016-6540
Published: 2018-07-06
Description: Unauthenticated access to the cloud-based service maintained by TrackR Bravo is allowed for querying or sending GPS data for any Trackr device by using the tracker ID number which can be discovered as described in CVE-2016-6539. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been released by the vendor to address the vulnerabilities in CVE-2016-6538, CVE-2016-6539, CVE-2016-6540 and CVE-2016-6541.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-306, CWE-200
References: http://www.securityfocus.com/bid/93874; https://blog.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/; https://www.kb.cert.org/vuls/id/617567
CVE: CVE-2016-6541
Published: 2018-07-06
Description: TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributes. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been released by the vendor to address the vulnerabilities in CVE-2016-6538, CVE-2016-6539, CVE-2016-6540 and CVE-2016-6541.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306, CWE-287
References: http://www.securityfocus.com/bid/93874; https://blog.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/; https://www.kb.cert.org/vuls/id/617567
CVE: CVE-2018-11349
Published: 2018-07-07
Description: The administration panel of Jirafeau before 3.4.1 is vulnerable to three CSRF attacks on search functionalities: search_by_name, search_by_hash, and search_link.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.bishopfox.com/news/2018/06/jirafeau-version-3-3-0-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/06/jirafeau-version-3-3-0-multiple-vulnerabilities/
CVE: CVE-2018-11350
Published: 2018-07-07
Description: An issue was discovered in Jirafeau before 3.4.1. The file "search by name" form is affected by one Cross-Site Scripting vulnerability via the name parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.bishopfox.com/news/2018/06/jirafeau-version-3-3-0-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/06/jirafeau-version-3-3-0-multiple-vulnerabilities/
CVE: CVE-2018-11351
Published: 2018-07-07
Description: script.php in Jirafeau before 3.4.1 is affected by two stored Cross-Site Scripting (XSS) vulnerabilities. These are stored within the shared files description file and allow the execution of a JavaScript payload each time an administrator searches or lists uploaded files. These two injections could be triggered without authentication, and target the administrator. The attack vectors are the Content-Type field and the filename parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.bishopfox.com/news/2018/06/jirafeau-version-3-3-0-multiple-vulnerabilities/; https://www.bishopfox.com/news/2018/06/jirafeau-version-3-3-0-multiple-vulnerabilities/
CVE: CVE-2018-13419
Published: 2018-07-07
Description: An issue has been found in libsndfile 1.0.28. There is a memory leak in psf_allocate in common.c, as demonstrated by sndfile-convert. NOTE: The maintainer and third parties were unable to reproduce and closed the issue
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-772
References: https://github.com/erikd/libsndfile/issues/398; https://github.com/erikd/libsndfile/issues/398
CVE: CVE-2018-13420
Published: 2018-07-07
Description: Google gperftools 2.7 has a memory leak in malloc_extension.cc, related to MallocExtension::Register and InitModule. NOTE: the software maintainer indicates that this is not a bug; it is only a false-positive report from the LeakSanitizer program
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: https://github.com/gperftools/gperftools/issues/1013; https://github.com/gperftools/gperftools/issues/1013
CVE: CVE-2018-13421
Published: 2018-07-07
Description: Fast C++ CSV Parser (aka fast-cpp-csv-parser) before 2018-07-06 has a heap-based buffer over-read in io::trim_chars in csv.h.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-125
References: https://github.com/ben-strasser/fast-cpp-csv-parser/issues/67; https://github.com/ben-strasser/fast-cpp-csv-parser/issues/67
CVE: CVE-2018-13422
Published: 2018-07-07
Description: TCExam before 14.1.2 has XSS via an ff_ or xl_ field.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/tecnickcom/tcexam/pull/223; https://github.com/tecnickcom/tcexam/pull/223
CVE: CVE-2018-13423
Published: 2018-07-07
Description: admin/themes/default/items/tag-form.php in Omeka before 2.6.1 allows XSS by adding or editing a tag.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/omeka/Omeka/commit/ba[PII_REDACTED]44847d76d3838781c9708cb92221; https://github.com/omeka/Omeka/releases/tag/v2.6.1; https://github.com/omeka/Omeka/commit/ba[PII_REDACTED]44847d76d3838781c9708cb92221
CVE: CVE-2018-13433
Published: 2018-07-08
Description: Boostnote v0.11.7 allows XSS during highlighting of Markdown text, as demonstrated by an onerror attribute of an IMG element.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/BoostIO/Boostnote/issues/2184; https://github.com/BoostIO/Boostnote/issues/2184
CVE: CVE-2018-13439
Published: 2018-07-08
Description: WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://packetstormsecurity.com/files/148390/WeChat-Pay-SDK-XXE-Injection.html; https://packetstormsecurity.com/files/148390/WeChat-Pay-SDK-XXE-Injection.html
CVE: CVE-2018-13440
Published: 2018-07-08
Description: The audiofile Audio File Library 0.3.6 has a NULL pointer dereference bug in ModuleState::setup in modules/ModuleState.cpp, which allows an attacker to cause a denial of service via a crafted caf file, as demonstrated by sfconvert.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/mpruett/audiofile/issues/49; https://usn.ubuntu.com/3800-1/; https://github.com/mpruett/audiofile/issues/49
CVE: CVE-2018-13444
Published: 2018-07-08
Description: An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add an admin account via adm1n/admin_manager.php?action=save&id=2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/MichaelWayneLIU/seacms/blob/master/seacms1.md; https://github.com/MichaelWayneLIU/seacms/blob/master/seacms1.md
CVE: CVE-2018-13445
Published: 2018-07-08
Description: An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account via adm1n/admin_manager.php?action=add.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/MichaelWayneLIU/seacms/blob/master/seacms1.md; https://github.com/MichaelWayneLIU/seacms/blob/master/seacms1.md
CVE: CVE-2018-13447
Published: 2018-07-08
Description: SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Dolibarr/dolibarr/commit/36402c22eef49d60edd73a2f312f8e28fe0bd1cb; https://github.com/Dolibarr/dolibarr/commit/36402c22eef49d60edd73a2f312f8e28fe0bd1cb
CVE: CVE-2018-13448
Published: 2018-07-08
Description: SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the country_id parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Dolibarr/dolibarr/commit/36402c22eef49d60edd73a2f312f8e28fe0bd1cb; https://github.com/Dolibarr/dolibarr/commit/36402c22eef49d60edd73a2f312f8e28fe0bd1cb
CVE: CVE-2018-13449
Published: 2018-07-08
Description: SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut_buy parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Dolibarr/dolibarr/commit/36402c22eef49d60edd73a2f312f8e28fe0bd1cb; https://github.com/Dolibarr/dolibarr/commit/36402c22eef49d60edd73a2f312f8e28fe0bd1cb
CVE: CVE-2018-13450
Published: 2018-07-08
Description: SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the status_batch parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/Dolibarr/dolibarr/commit/36402c22eef49d60edd73a2f312f8e28fe0bd1cb; https://github.com/Dolibarr/dolibarr/commit/36402c22eef49d60edd73a2f312f8e28fe0bd1cb
CVE: CVE-2018-13462
Published: 2018-07-09
Description: The mintToken function of a smart contract implementation for MoonToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md; https://github.com/BlockChainsSecurity/EtherTokens/tree/master/MoonToken; https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md
CVE: CVE-2018-13463
Published: 2018-07-09
Description: The mintToken function of a smart contract implementation for T-Swap-Token (T-S-T), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md; https://github.com/BlockChainsSecurity/EtherTokens/tree/master/TSwap; https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md
CVE: CVE-2018-13464
Published: 2018-07-09
Description: The mintToken function of a smart contract implementation for t_swap, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md; https://github.com/BlockChainsSecurity/EtherTokens/tree/master/t_swap; https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md
CVE: CVE-2018-13465
Published: 2018-07-09
Description: The mintToken function of a smart contract implementation for PaulyCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md; https://github.com/BlockChainsSecurity/EtherTokens/tree/master/PaulyCoin; https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md
CVE: CVE-2018-13466
Published: 2018-07-09
Description: The mintToken function of a smart contract implementation for Crystals, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md; https://github.com/BlockChainsSecurity/EtherTokens/tree/master/Crystals; https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md
CVE: CVE-2018-13467
Published: 2018-07-09
Description: The mintToken function of a smart contract implementation for EpiphanyCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md; https://github.com/BlockChainsSecurity/EtherTokens/tree/master/EpiphanyCoin; https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md
CVE: CVE-2018-13468
Published: 2018-07-09
Description: The mintToken function of a smart contract implementation for Cavecoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md; https://github.com/BlockChainsSecurity/EtherTokens/tree/master/Cavecoin; https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md
CVE: CVE-2018-13469
Published: 2018-07-09
Description: The mintToken function of a smart contract implementation for IcoContract, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md; https://github.com/BlockChainsSecurity/EtherTokens/tree/master/IcoContract; https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md
CVE: CVE-2018-13470
Published: 2018-07-09
Description: The mintToken function of a smart contract implementation for BuyerToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md; https://github.com/BlockChainsSecurity/EtherTokens/tree/master/BuyerToken; https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md
CVE: CVE-2018-13471
Published: 2018-07-09
Description: The mintToken function of a smart contract implementation for BeyondCashToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md; https://github.com/BlockChainsSecurity/EtherTokens/tree/master/BeyondCashToken; https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md
CVE: CVE-2018-13472
Published: 2018-07-09
Description: The mint function of a smart contract implementation for CloutToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md; https://github.com/BlockChainsSecurity/EtherTokens/tree/master/CloutToken; https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md
CVE: CVE-2018-13473
Published: 2018-07-09
Description: The mintToken function of a smart contract implementation for ohni_2 (OHNI), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md; https://github.com/BlockChainsSecurity/EtherTokens/tree/master/Ohni; https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md
CVE: CVE-2018-13474
Published: 2018-07-09
Description: The mintToken function of a smart contract implementation for FansChainToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md; https://github.com/BlockChainsSecurity/EtherTokens/tree/master/FansChainToken; https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md
CVE: CVE-2018-13475
Published: 2018-07-09
Description: The mintToken function of a smart contract implementation for VSCToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md; https://github.com/BlockChainsSecurity/EtherTokens/tree/master/VSCToken; https://github.com/BlockChainsSecurity/EtherTokens/blob/master/GEMCHAIN/mint%20integer%20overflow.md