Critical security advisoryCriticalFlagged by our vulnerability database: PHP2Shell is on CISA’s exploited list. Most WordPress hosting runs PHP. See if your site is affectedFlagged by our vulnerability database: PHP2Shell is being exploited. DetailsExploited: PHP2Shell. Check your site
HuttenlocherTechnologies
Updated 10 h ago

Vulnerability database

Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.

1,762exploited flaws on CISA’s list
34added in the last 30 days
343new WordPress flaws this week
390,080entries in the database

691 results · page 6 of 14

  • Oct 2, 2019mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by an attacker, because an unpickle occurs.CVE-2019-17080 · Computers, phones & browsers · Linuxmint · reported by MITREHigh 7.8

    mintinstall (aka Software Manager) 7.9.9 for Linux Mint allows code execution if a REVIEWS_CACHE file is controlled by an attacker, because an unpickle occurs. This is resolved in 8.0.0 and backports.

    Product
    Mintinstall
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 5, 2019In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double free.CVE-2019-2115 · Computers, phones & browsers · Google · reported by security@android.comHigh 7.8

    In GateKeeper::MintAuthToken of gatekeeper.cpp in Android 7.1.1, 7.1.2, 8.0, 8.1 and 9, there is possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

    Product
    Android
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Apr 5, 2019A URL spoofing vulnerability was found in all international versions of Xiaomi Mi browser 10.5.6-g (aka the MIUI native browser) and Mint Browser 1.5.3 due to tCVE-2019-10875 · Other software · MI · reported by MITREMedium 6.5

    A URL spoofing vulnerability was found in all international versions of Xiaomi Mi browser 10.5.6-g (aka the MIUI native browser) and Mint Browser 1.5.3 due to the way they handle the "q" query parameter. The portion of an https URL before the ?q= substring is not shown to the user.

    Product
    MI Browser
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Feb 17, 2019skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControl[MinTiltRange] parameter.CVE-2019-8426 · Other software · Zoneminder · reported by MITREMedium 6.1

    skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControl[MinTiltRange] parameter.

    Product
    Zoneminder
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 28, 2018The mintToken function of Pylon (PYLNT) aka PylonToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of aCVE-2018-18667 · Other software · Pylon-network · reported by MITREHigh 7.5

    The mintToken function of Pylon (PYLNT) aka PylonToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value, a related issue to CVE-2018-11812.

    Product
    Pylontoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 28, 2018The mintToken function of SwftCoin (SWFTC) aka SwftCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of CVE-2018-18666 · Other software · Swft · reported by MITREHigh 7.5

    The mintToken function of SwftCoin (SWFTC) aka SwftCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Swftcoin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Dec 28, 2018The mintToken function of Nexxus (NXX) aka NexxusToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of aCVE-2018-18665 · Other software · Nexxuscoin · reported by MITREHigh 7.5

    The mintToken function of Nexxus (NXX) aka NexxusToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Nexxustoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 21, 2018The mintToken function of a smart contract implementation for PolyAi (AI), an Ethereum token, has an integer overflow that allows the owner of the contract to sCVE-2018-17050 · Other software · Polyai Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for PolyAi (AI), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Polyai
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Sep 21, 2018In the mintToken function of a smart contract implementation for Substratum (SUB), an Ethereum ERC20 token, the administrator can control mintedAmount, leverageCVE-2018-12511 · Other software · Substratum · reported by MITREHigh 7.5

    In the mintToken function of a smart contract implementation for Substratum (SUB), an Ethereum ERC20 token, the administrator can control mintedAmount, leverage an integer overflow, and modify a user account's balance arbitrarily.

    Product
    Substratum
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 14, 2018AdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to manipulate the vulnerable application to send crafted requestsCVE-2018-2445 · Network & remote access · SAP · reported by cna@sap.comCritical 9.6

    AdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to manipulate the vulnerable application to send crafted requests on behalf of the application, resulting in a Server-Side Request Forgery (SSRF) vulnerability.

    Product
    SAP BusinessObjects Business Intelligence Platform
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Aug 3, 2018The mintTokens function of a smart contract implementation for SunContract, an Ethereum token, has an integer overflow via the _amount variable.CVE-2018-14576 · Other software · Suncontract · reported by MITREHigh 7.5

    The mintTokens function of a smart contract implementation for SunContract, an Ethereum token, has an integer overflow via the _amount variable.

    Product
    Suncontract
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for JiucaiToken, an Ethereum token, has an integer overflow that allows the owner of the contract to sCVE-2018-13783 · Other software · Jiucaitoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for JiucaiToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Jiucaitoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterCoin), an Ethereum token, has an integer overflow that allows thCVE-2018-13782 · Other software · Entercoin Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterCoin), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Entercoin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for MyYLC, an Ethereum token, has an integer overflow that allows the owner of the contract to set theCVE-2018-13781 · Other software · Myylctoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for MyYLC, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Myylctoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for ESH, an Ethereum token, has an integer overflow that allows the owner of the contract to set the bCVE-2018-13780 · Other software · ESH Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for ESH, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    ESH
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for YLCToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set CVE-2018-13779 · Other software · Ylctoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for YLCToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Ylctoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for CGCToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set CVE-2018-13778 · Other software · Cgctoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for CGCToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Cgctoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for RRToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set tCVE-2018-13777 · Other software · Rrtoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for RRToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Rrtoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for AppleToken, an Ethereum token, has an integer overflow that allows the owner of the contract to seCVE-2018-13776 · Computers, phones & browsers · Appletoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for AppleToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Appletoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for RCKT_Coin, an Ethereum token, has an integer overflow that allows the owner of the contract to setCVE-2018-13775 · Other software · Rckt Coin Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for RCKT_Coin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Rckt Coin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for Bitstarti, an Ethereum token, has an integer overflow that allows the owner of the contract to setCVE-2018-13774 · Other software · Bitstarti Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for Bitstarti, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Bitstarti
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for Enterprise Token Ecosystem (ETE) (Contract Name: NetkillerToken), an Ethereum token, has an integeCVE-2018-13773 · Other software · Netkillertoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for Enterprise Token Ecosystem (ETE) (Contract Name: NetkillerToken), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Netkillertoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for TheFlashToken, an Ethereum token, has an integer overflow that allows the owner of the contract toCVE-2018-13772 · Other software · Theflashtoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for TheFlashToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Theflashtoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for ExacoreContract, an Ethereum token, has an integer overflow that allows the owner of the contract CVE-2018-13771 · Other software · Exacorecontract Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for ExacoreContract, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Exacorecontract
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for UltimateCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to CVE-2018-13770 · Other software · Ultimatecoin Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for UltimateCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Ultimatecoin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for JeansToken, an Ethereum token, has an integer overflow that allows the owner of the contract to seCVE-2018-13769 · Other software · Jeanstoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for JeansToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Jeanstoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for ZToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set thCVE-2018-13768 · Other software · Ztoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for ZToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Ztoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for Cornerstone, an Ethereum token, has an integer overflow that allows the owner of the contract to sCVE-2018-13767 · Other software · Cornerstone Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for Cornerstone, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Cornerstone
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for Easticoin, an Ethereum token, has an integer overflow that allows the owner of the contract to setCVE-2018-13766 · Other software · Easticoin Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for Easticoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Easticoin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for LandCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set CVE-2018-13765 · Other software · Landcoin Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for LandCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Landcoin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for BiquToken, an Ethereum token, has an integer overflow that allows the owner of the contract to setCVE-2018-13764 · Other software · Biqutoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for BiquToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Biqutoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for Ublasti, an Ethereum token, has an integer overflow that allows the owner of the contract to set tCVE-2018-13763 · Other software · Ublasti Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for Ublasti, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Ublasti
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for Yumerium, an Ethereum token, has an integer overflow that allows the owner of the contract to set CVE-2018-13762 · Other software · Yumerium Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for Yumerium, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Yumerium
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for NetkillerAdvancedTokenAirDrop, an Ethereum token, has an integer overflow that allows the owner ofCVE-2018-13761 · Other software · Netkilleradvancedtokenairdrop Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for NetkillerAdvancedTokenAirDrop, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Netkilleradvancedtokenairdrop
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for MoneyChainNet (MCN), an Ethereum token, has an integer overflow that allows the owner of the contrCVE-2018-13760 · Other software · Moneychainnettoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for MoneyChainNet (MCN), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Moneychainnettoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for BIGCAdvancedToken, an Ethereum token, has an integer overflow that allows the owner of the contracCVE-2018-13759 · Other software · Bigcadvancedtoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for BIGCAdvancedToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Bigcadvancedtoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for LoliCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set CVE-2018-13758 · Other software · Lolicoin Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for LoliCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Lolicoin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for Coinquer, an Ethereum token, has an integer overflow that allows the owner of the contract to set CVE-2018-13757 · Other software · Coinquer Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for Coinquer, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Coinquer
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for CherryCoinFoundation, an Ethereum token, has an integer overflow that allows the owner of the contCVE-2018-13756 · Other software · Cherrycoinfoundation Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for CherryCoinFoundation, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Cherrycoinfoundation
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for OTAKUToken, an Ethereum token, has an integer overflow that allows the owner of the contract to seCVE-2018-13755 · Other software · Otakutoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for OTAKUToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Otakutoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for CryptosisToken, an Ethereum token, has an integer overflow that allows the owner of the contract tCVE-2018-13754 · Other software · Cryptosistoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for CryptosisToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Cryptosistoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for DeWeiSecurityServiceToken, an Ethereum token, has an integer overflow that allows the owner of theCVE-2018-13753 · Other software · Deweisecurityservicetoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for DeWeiSecurityServiceToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Deweisecurityservicetoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for Thread, an Ethereum token, has an integer overflow that allows the owner of the contract to set thCVE-2018-13752 · Other software · Thread Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for Thread, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Thread
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for JustWallet, an Ethereum token, has an integer overflow that allows the owner of the contract to seCVE-2018-13751 · Other software · Justwallet Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for JustWallet, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Justwallet
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for RichiumToken, an Ethereum token, has an integer overflow that allows the owner of the contract to CVE-2018-13750 · Other software · Richiumtoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for RichiumToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Richiumtoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for FinalToken, an Ethereum token, has an integer overflow that allows the owner of the contract to seCVE-2018-13749 · Other software · Finaltoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for FinalToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Finaltoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for CarToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set CVE-2018-13748 · Other software · Cartoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for CarToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Cartoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for VanMinhCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to sCVE-2018-13747 · Other software · Vanminhcoin Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for VanMinhCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Vanminhcoin
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for kBit, an Ethereum token, has an integer overflow that allows the owner of the contract to set the CVE-2018-13746 · Other software · Kbit Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for kBit, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Kbit
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.
  • Jul 9, 2018The mintToken function of a smart contract implementation for STCToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set CVE-2018-13745 · Other software · Stctoken Project · reported by MITREHigh 7.5

    The mintToken function of a smart contract implementation for STCToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.

    Product
    Stctoken
    What to do
    Apply the vendor’s update. The NVD record links to the advisory.

Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.

Weekly security brief

The flaws that hit local websites, every Friday.

One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.

Get in touch

Tell us what you're building.

A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.

01The person who'll do the work writes back
02A short call, then a written plan with the price
03Nothing starts until you say yes
04Hacked or down right now? Call, and we pick up the same day
843-331-6339

Not ready to talk yet? Run the free website check and see what Google sees.

What do you need?
Build
Grow
Protect
Urgent

No newsletter, no sales sequence. Just a reply.