binance records

3 published records for vendor binance.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

Bug bounty scope

The product’s vendor appears in a public program. Matched by name; verify the scope text in the program.

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2024-31695No exploit	A misconfiguration in the fingerprint authentication mechanism of Binance: BTC, Crypto and NFTS v2.85.4, allows attackers to bypass authentiCWE-863 Pre-auth Auth bypass Broken access control (IDOR)	Critical9.8	—	0.7%	Nov 14, 2024
32Monitor	CVE-2020-12118No exploit	The keygen protocol implementation in Binance tss-lib before 1.2.0 allows attackers to generate crafted h1 and h2 parameters in order to combinance · tss-lib · CWE-276 Pre-auth	High8.2	—	1.2%	Apr 23, 2020
30Monitor	CVE-2024-23660No exploit	The Binance Trust Wallet app for iOS in commit 3cd6e8f647fbba8b5d8844fcd144365a086b629f, git tag 0.0.4 misuses the trezor-crypto library andbinance · trust wallet · CWE-338 Pre-auth Weak crypto	High7.5	—	0.5%	Feb 8, 2024

CVE-2024-31695
39Monitor
A misconfiguration in the fingerprint authentication mechanism of Binance: BTC, Crypto and NFTS v2.85.4, allows attackers to bypass authenti
CriticalCVSS 9.8No exploitEPSS 0%
Nov 14, 2024
CVE-2020-12118
32Monitor
The keygen protocol implementation in Binance tss-lib before 1.2.0 allows attackers to generate crafted h1 and h2 parameters in order to com
HighCVSS 8.2No exploitEPSS 1%
- Pre-auth
binance · tss-libApr 23, 2020
CVE-2024-23660
30Monitor
The Binance Trust Wallet app for iOS in commit 3cd6e8f647fbba8b5d8844fcd144365a086b629f, git tag 0.0.4 misuses the trezor-crypto library and
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
binance · trust walletFeb 8, 2024