Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Virgo Zodiactoken Project Subscribe
Filtered by product Virgo Zodiactoken
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-14089 1 Virgo Zodiactoken Project 1 Virgo Zodiactoken 2018-09-12 5.0 MEDIUM 7.5 HIGH
An issue was discovered in a smart contract implementation for Virgo_ZodiacToken, an Ethereum token. In this contract, 'bool sufficientAllowance = allowance <= _value' will cause an arbitrary transfer in the function transferFrom because '<=' is used instead of '>=' (which was intended). An attacker can transfer from any address to his address, and does not need to meet the 'allowance > value' condition.