Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor 1000guess Subscribe
Filtered by product 1000 Guess
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-12454 1 1000guess 1 1000 Guess 2018-08-14 5.0 MEDIUM 7.5 HIGH
The _addguess function of a simplelottery smart contract implementation for 1000 Guess, an Ethereum gambling game, generates a random value with publicly readable variables such as the current block information and a private variable (which can be read with a getStorageAt call). Therefore, it allows attackers to always win and get rewards.