Vulnerabilities (CVE)

Total 403564 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-13470 1 Buyertoken Project 1 Buyertoken 2026-06-17 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for BuyerToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13469 1 Icocontract Project 1 Icocontract 2026-06-17 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for IcoContract, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13468 1 Cavecoin Project 1 Cavecoin 2026-06-17 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for Cavecoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13467 1 Epnex 1 Epiphanycoin 2026-06-17 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for EpiphanyCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13466 1 Crystals 1 Crystals 2026-06-17 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for Crystals, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13465 1 Paulycoin Project 1 Paulycoin 2026-06-17 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for PaulyCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13464 1 T-swap-token Project 1 T-swap-token 2026-06-17 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for t_swap, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13463 1 T-swap-token Project 1 T-swap-token 2026-06-17 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for T-Swap-Token (T-S-T), an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13462 1 Moontoken Project 1 Moontoken 2026-06-17 5.0 MEDIUM 7.5 HIGH
The mintToken function of a smart contract implementation for MoonToken, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
CVE-2018-13458 1 Nagios 1 Nagios Core 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
qh_core in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket.
CVE-2018-13457 1 Nagios 1 Nagios Core 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
qh_echo in Nagios Core 4.4.1 and earlier is prone to a NULL pointer dereference vulnerability, which allows attackers to cause a local denial-of-service condition by sending a crafted payload to the listening UNIX socket.
CVE-2018-13450 1 Dolibarr 1 Dolibarr Erp\/crm 2026-06-17 7.5 HIGH 9.8 CRITICAL
SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the status_batch parameter.
CVE-2018-13449 1 Dolibarr 1 Dolibarr Erp\/crm 2026-06-17 7.5 HIGH 9.8 CRITICAL
SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut_buy parameter.
CVE-2018-13448 1 Dolibarr 1 Dolibarr Erp\/crm 2026-06-17 7.5 HIGH 9.8 CRITICAL
SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the country_id parameter.
CVE-2018-13447 1 Dolibarr 1 Dolibarr Erp\/crm 2026-06-17 7.5 HIGH 9.8 CRITICAL
SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut parameter.
CVE-2018-13446 1 Linecorp 1 Line 2026-06-17 4.4 MEDIUM 7.0 HIGH
An issue was discovered in the LINE jp.naver.line application 8.8.1 for Android. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method's return value to true. In other words, an attacker could authenticate with an arbitrary passcode. NOTE: the vendor indicates that this is not an attack of interest within the context of their threat model, which excludes Android devices on which rooting has occurred
CVE-2018-13445 1 Seacms 1 Seacms 2026-06-17 6.8 MEDIUM 8.8 HIGH
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account via adm1n/admin_manager.php?action=add.
CVE-2018-13444 1 Seacms 1 Seacms 2026-06-17 6.8 MEDIUM 8.8 HIGH
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add an admin account via adm1n/admin_manager.php?action=save&id=2.
CVE-2018-13443 1 Block 1 Jit-wasm 2026-06-17 6.8 MEDIUM 8.8 HIGH
EOS.IO jit-wasm 4.1 has a heap-based buffer overflow via a crafted wast file.
CVE-2018-13442 1 Solarwinds 1 Network Performance Monitor 2026-06-17 6.5 MEDIUM 8.8 HIGH
SolarWinds Network Performance Monitor 12.3 allows SQL Injection via the /api/ActiveAlertsOnThisEntity/GetActiveAlerts TriggeringObjectEntityNames parameter.