Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by CWE-190
Total 2006 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-13182 1 Loncoin Project 1 Loncoin 2018-08-15 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for loncoin (LON), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13193 1 Hentaisolo Project 1 Hentaisolo 2018-08-15 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for hentaisolo (HAO), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13192 1 Jobscoin Project 1 Jobscoin 2018-08-15 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for Jobscoin (JOB), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13190 1 Dvchain Project 1 Dvchain 2018-08-15 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for DVChain, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-14002 1 Mp3 Coin Project 1 Mp3 Coin 2018-08-13 5.0 MEDIUM 7.5 HIGH
An integer overflow vulnerability exists in the function distribute of MP3 Coin (MP3), an Ethereum token smart contract. An attacker could use it to set any user's balance.
CVE-2018-13836 1 Rocket Coin Project 1 Rocket Coin 2018-08-13 5.0 MEDIUM 7.5 HIGH
An integer overflow vulnerability exists in the function multiTransfer of Rocket Coin (XRC), an Ethereum token smart contract. An attacker could use it to set any user's balance.
CVE-2018-14004 1 Globecoin Project 1 Globecoin 2018-08-13 5.0 MEDIUM 7.5 HIGH
An integer overflow vulnerability exists in the function transfer_tokens_after_ICO of GlobeCoin (GLB), an Ethereum token smart contract. An attacker could use it to set any user's balance.
CVE-2017-6350 1 Vim 1 Vim 2018-08-13 7.5 HIGH 9.8 CRITICAL
An integer overflow at an unserialize_uep memory allocation site would occur for vim before patch 8.0.0378, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
CVE-2017-6349 1 Vim 1 Vim 2018-08-13 7.5 HIGH 9.8 CRITICAL
An integer overflow at a u_read_undo memory allocation site would occur for vim before patch 8.0.0377, if it does not properly validate values for tree length when reading a corrupted undo file, which may lead to resultant buffer overflows.
CVE-2017-5428 2 Mozilla, Redhat 8 Firefox, Firefox Esr, Enterprise Linux and 5 more 2018-08-09 7.5 HIGH 9.8 CRITICAL
An integer overflow in "createImageBitmap()" was reported through the Pwn2Own contest. The fix for this vulnerability disables the experimental extensions to the "createImageBitmap" API. This function runs in the content sandbox, requiring a second vulnerability to compromise a user's computer. This vulnerability affects Firefox ESR < 52.0.1 and Firefox < 52.0.1.
CVE-2017-15854 1 Google 1 Android 2018-08-01 4.6 MEDIUM 7.8 HIGH
The value of fix_param->num_chans is received from firmware and if it is too large, an integer overflow can occur in wma_radio_chan_stats_event_handler() for the derived length len leading to a subsequent buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
CVE-2017-18070 1 Google 1 Android 2018-08-01 4.6 MEDIUM 7.8 HIGH
In wma_ndp_end_response_event_handler(), the variable len_end_rsp is a uint32 which can be overflowed if the value of variable "event->num_ndp_end_rsp_per_ndi_list" is very large which can then lead to a heap overwrite of the heap object end_rsp in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
CVE-2016-5297 2 Debian, Mozilla 4 Debian Linux, Firefox, Firefox Esr and 1 more 2018-07-30 7.5 HIGH 9.8 CRITICAL
An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking issues. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Firefox < 50.
CVE-2017-6290 1 Google 1 Android 2018-07-27 7.2 HIGH 7.8 HIGH
In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due to an integer overflow which could lead to local escalation of privilege with no additional execution privileges needed. User interaction not needed for exploitation. This issue is rated as high. Version: N/A. Android: A-69559414. Reference: N-CVE-2017-6290.
CVE-2018-13662 1 Worldopctionchain Project 1 Worldopctionchain 2018-07-20 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for WorldOpctionChain, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13665 1 Bcaas Project 1 Bcaas 2018-07-20 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for BCaaS, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13663 1 Bsctoken Project 1 Bsctoken 2018-07-20 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for BSCToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13664 1 Cws Project 1 Cws 2018-07-20 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for CWS, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13666 1 Eristicaico Project 1 Eristicaico 2018-07-20 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for EristicaICO, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13667 1 Utbtokentest Project 1 Utbtokentest 2018-07-20 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for UTBTokenTest, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.