Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 10 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,764exploited flaws on CISA’s list
35added in the last 30 days
457new WordPress flaws this week
390,525entries in the database

657 results · page 12 of 14

  • Jul 4, 2018The mintToken function of a smart contract implementation for JWC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the bCVE-2018-13183 · Other software · Jwctoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for JWC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Jwctoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for loncoin (LON), an Ethereum token, has an integer overflow that allows the owner of the contract toCVE-2018-13182 · Other software · Loncoin Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for loncoin (LON), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Loncoin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for Troo, an Ethereum token, has an integer overflow that allows the owner of the contract to set the CVE-2018-13181 · Other software · Cointroops Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for Troo, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Cointroops
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for IMM Coin (IMC), an Ethereum token, has an integer overflow that allows the owner of the contract tCVE-2018-13180 · Other software · Immcoin Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for IMM Coin (IMC), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Immcoin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for Air-Contact Token (AIR), an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-13179 · Other software · Aircontacttoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for Air-Contact Token (AIR), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Aircontacttoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for ECToints (ECT) (Contract Name: ECPoints), an Ethereum token, has an integer overflow that allows tCVE-2018-13178 · Other software · Ecpoints Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for ECToints (ECT) (Contract Name: ECPoints), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Ecpoints
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for MiningRigRentals Token (MRR), an Ethereum token, has an integer overflow that allows the owner of CVE-2018-13177 · Other software · Miningrigrentalstoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for MiningRigRentals Token (MRR), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Miningrigrentalstoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for Trust Zen Token (ZEN), an Ethereum token, has an integer overflow that allows the owner of the conCVE-2018-13176 · Other software · Trustzen Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for Trust Zen Token (ZEN), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Trustzen
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for AIChain, an Ethereum token, has an integer overflow that allows the owner of the contract to set tCVE-2018-13175 · Other software · Aichain Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for AIChain, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Aichain
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for CryptoABS (ABS), an Ethereum token, has an integer overflow that allows the owner of the contract CVE-2018-13174 · Other software · Cryptoabs Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for CryptoABS (ABS), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Cryptoabs
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for EliteShipperToken (ESHIP), an Ethereum token, has an integer overflow that allows the owner of theCVE-2018-13173 · Other software · Eliteshippertoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for EliteShipperToken (ESHIP), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Eliteshippertoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for bzxcoin (BZX), an Ethereum token, has an integer overflow that allows the owner of the contract toCVE-2018-13172 · Other software · Bzxcoin Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for bzxcoin (BZX), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Bzxcoin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for LadaToken (LDT), an Ethereum token, has an integer overflow that allows the owner of the contract CVE-2018-13171 · Other software · Ladatoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for LadaToken (LDT), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Ladatoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for Snoqualmie Coin (SNOW), an Ethereum token, has an integer overflow that allows the owner of the coCVE-2018-13170 · Other software · Snoqualmiecoin Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for Snoqualmie Coin (SNOW), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Snoqualmiecoin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for Ethereum Cash Pro (ECP), an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-13169 · Other software · Ethereum Cash Pro Coin Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for Ethereum Cash Pro (ECP), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Ethereum Cash Pro Coin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for Yu Gi Oh (YGO) (Contract Name: NetkillerBatchToken), an Ethereum token, has an integer overflow thCVE-2018-13168 · Other software · Netkillerbatchtoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for Yu Gi Oh (YGO) (Contract Name: NetkillerBatchToken), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Netkillerbatchtoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for Yu Gi Oh (YGO), an Ethereum token, has an integer overflow that allows the owner of the contract tCVE-2018-13167 · Other software · YU GI OH Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for Yu Gi Oh (YGO), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    YU GI OH
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for AthletiCoin (ATHA), an Ethereum token, has an integer overflow that allows the owner of the contraCVE-2018-13166 · Other software · Athleticoin Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for AthletiCoin (ATHA), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Athleticoin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for JustDCoin (JustD), an Ethereum token, has an integer overflow that allows the owner of the contracCVE-2018-13165 · Other software · Justdcoin Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for JustDCoin (JustD), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Justdcoin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for EPPCOIN (EPP), an Ethereum token, has an integer overflow that allows the owner of the contract toCVE-2018-13164 · Other software · Eppcoin Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for EPPCOIN (EPP), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Eppcoin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for Ethernet Cash (ENC), an Ethereum token, has an integer overflow that allows the owner of the contrCVE-2018-13163 · Other software · Ethernet Cash Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for Ethernet Cash (ENC), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Ethernet Cash
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for ALEX, an Ethereum token, has an integer overflow that allows the owner of the contract to set the CVE-2018-13162 · Other software · Alex Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for ALEX, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Alex
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for MultiGames (MLT), an Ethereum token, has an integer overflow that allows the owner of the contractCVE-2018-13161 · Other software · Multigames Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for MultiGames (MLT), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Multigames
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for etktokens (ETK), an Ethereum token, has an integer overflow that allows the owner of the contract CVE-2018-13160 · Other software · Etktokens Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for etktokens (ETK), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Etktokens
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for bankcoin (BNK), an Ethereum token, has an integer overflow that allows the owner of the contract tCVE-2018-13159 · Other software · Bankcoin Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for bankcoin (BNK), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Bankcoin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for AssetToken, an Ethereum token, has an integer overflow that allows the owner of the contract to seCVE-2018-13158 · Other software · Assettoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for AssetToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Assettoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for CryptonitexCoin, an Ethereum token, has an integer overflow that allows the owner of the contract CVE-2018-13157 · Other software · Cryptonitexcoin Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for CryptonitexCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Cryptonitexcoin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for bonusToken (BNS), an Ethereum token, has an integer overflow that allows the owner of the contractCVE-2018-13156 · Other software · Bonustoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for bonusToken (BNS), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Bonustoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for GEMCHAIN (GEM), an Ethereum token, has an integer overflow that allows the owner of the contract tCVE-2018-13155 · Other software · Gemchain Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for GEMCHAIN (GEM), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Gemchain
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation because of an integer CVE-2018-12018 · Other software · Ethereum · reported by MITREHigh 7.5

    The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation because of an integer signedness error for the array index, which allows attackers to launch a Denial of Service attack by sending a packet with a -1 query.Skip value. The vulnerable remote node would be crashed by such an attack immediately, aka the EPoD (Ethereum Packet of Death) issue.

    Product
    GO Ethereum
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken, buy, and sell functions of a smart contract implementation for LEF, an Ethereum token, have an integer overflow.CVE-2018-13146 · Other software · LEF Project · reported by MITREHigh 7.5

    The mintToken, buy, and sell functions of a smart contract implementation for LEF, an Ethereum token, have an integer overflow.

    Product
    LEF
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The mintToken function of a smart contract implementation for JavaSwapTest (JST), an Ethereum token, has an integer overflow.CVE-2018-13145 · Other software · Javaswaptest Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for JavaSwapTest (JST), an Ethereum token, has an integer overflow.

    Product
    Javaswaptest
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 4, 2018The transfer and transferFrom functions of a smart contract implementation for Pandora (PDX), an Ethereum token, have an integer overflow.CVE-2018-13144 · Other software · Pandora Project · reported by MITREHigh 7.5

    The transfer and transferFrom functions of a smart contract implementation for Pandora (PDX), an Ethereum token, have an integer overflow. NOTE: this has been disputed by a third party.

    Product
    Pandora
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 3, 2018Spadeico is a smart contract running on Ethereum.CVE-2018-13132 · Other software · Spadeico Project · reported by MITREHigh 7.5

    Spadeico is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner.

    Product
    Spadeico
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 3, 2018SpadePreSale is a smart contract running on Ethereum.CVE-2018-13131 · Other software · Spadepresale Project · reported by MITREHigh 7.5

    SpadePreSale is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner.

    Product
    Spadepresale
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 3, 2018Bitotal (TFUND) is a smart contract running on Ethereum.CVE-2018-13130 · Other software · Bitotal · reported by MITREHigh 7.5

    Bitotal (TFUND) is a smart contract running on Ethereum. The mintTokens function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner.

    Product
    Bitotal
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 3, 2018SP8DE Token (SPX) is a smart contract running on Ethereum.CVE-2018-13129 · Other software · Sp8de · reported by MITREHigh 7.5

    SP8DE Token (SPX) is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner.

    Product
    Sp8de
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 3, 2018Etherty Token (ETY) is a smart contract running on Ethereum.CVE-2018-13128 · Other software · Etherty · reported by MITREHigh 7.5

    Etherty Token (ETY) is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner.

    Product
    Etherty Token
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 3, 2018SP8DE PreSale Token (DSPX) is a smart contract running on Ethereum.CVE-2018-13127 · Other software · Sp8de · reported by MITREHigh 7.5

    SP8DE PreSale Token (DSPX) is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner.

    Product
    Sp8de Presale Token
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 3, 2018MoxyOnePresale is a smart contract running on Ethereum.CVE-2018-13126 · Other software · Moxy · reported by MITREHigh 7.5

    MoxyOnePresale is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner.

    Product
    Moxyonepresale
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 3, 2018ATLANT (ATL) is a smart contract running on Ethereum.CVE-2018-11429 · Other software · Atlant · reported by MITREHigh 7.5

    ATLANT (ATL) is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner.

    Product
    Atlant
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 3, 2018GVToken Genesis Vision (GVT) is a smart contract running on Ethereum.CVE-2018-11335 · Other software · Genesis Vision · reported by MITREHigh 7.5

    GVToken Genesis Vision (GVT) is a smart contract running on Ethereum. The mint function has an integer overflow that allows minted tokens to be arbitrarily retrieved by the contract owner.

    Product
    Gvtoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 3, 2018The transfer and transferFrom functions of a smart contract implementation for Easy Trading Token (ETT), an Ethereum token, have an integer overflow.CVE-2018-13113 · Other software · Easy Trading Token Project · reported by MITREHigh 7.5

    The transfer and transferFrom functions of a smart contract implementation for Easy Trading Token (ETT), an Ethereum token, have an integer overflow. NOTE: this has been disputed by a third party.

    Product
    Easy Trading Token
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 2, 2018The mintToken function of a smart contract implementation for Reimburse Token (REIM), an Ethereum token, has an integer overflow that allows the owner of the coCVE-2018-13092 · Other software · Reimbursetoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for Reimburse Token (REIM), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Reimbursetoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 2, 2018The mintToken function of a smart contract implementation for sumocoin (SUMO), an Ethereum token, has an integer overflow that allows the owner of the contract CVE-2018-13091 · Other software · Sumocoin Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for sumocoin (SUMO), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Sumocoin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 2, 2018The mintToken function of a smart contract implementation for YiTongCoin (YTC), an Ethereum token, has an integer overflow that allows the owner of the contractCVE-2018-13090 · Other software · Yitongcoin Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for YiTongCoin (YTC), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Yitongcoin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 2, 2018The mintToken function of a smart contract implementation for Universal Coin (UCOIN), an Ethereum token, has an integer overflow that allows the owner of the coCVE-2018-13089 · Other software · Ucointoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for Universal Coin (UCOIN), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Ucointoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 2, 2018The mintToken function of a smart contract implementation for Futures Pease (FP), an Ethereum token, has an integer overflow that allows the owner of the contraCVE-2018-13088 · Other software · Tokenerc20 Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for Futures Pease (FP), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Tokenerc20
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 2, 2018The mintToken function of a smart contract implementation for Coinstar (CSTR), an Ethereum token, has an integer overflow that allows the owner of the contract CVE-2018-13087 · Other software · Coinstar Myadvancedtoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for Coinstar (CSTR), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Coinstar Myadvancedtoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 2, 2018The mintToken function of a smart contract implementation for IADOWR Coin (IAD), an Ethereum token, has an integer overflow that allows the owner of the contracCVE-2018-13086 · Other software · Iadowr Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for IADOWR Coin (IAD), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Iadowr
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.