Skip to content
Noroxi

bitcoin records

59 published records for vendor bitcoin.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
13.6%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 23
  7. 24
  8. 25
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

59 records
  • CVE-2021-3401
    42Plan

    Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformplug

    CriticalCVSS 9.8No exploitEPSS 10%

    bitcoin · bitcoinFeb 4, 2021

  • CVE-2015-20111
    39Monitor

    miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values, leading to a buffe

    CriticalCVSS 9.8No exploitEPSS 1%

    Nov 18, 2024

  • CVE-2018-17144
    32Monitor

    Bitcoin Core 0.14.x before 0.14.3, 0.15.x before 0.15.2, and 0.16.x before 0.16.3 and Bitcoin Knots 0.14.x through 0.16.x before 0.16.3 allo

    HighCVSS 7.5Proof of conceptEPSS 7%

    bitcoin · bitcoin coreSep 19, 2018

  • CVE-2012-4684
    32Monitor

    The alert functionality in bitcoind and Bitcoin-Qt before 0.7.0 supports different character representations of the same signature data, but

    HighCVSS 7.8No exploitEPSS 3%

    bitcoin · bitcoin-qtMar 12, 2013

  • CVE-2013-2292
    32Monitor

    bitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service (electricity consumption) by mining a block to

    HighCVSS 7.8No exploitEPSS 3%

    bitcoin · bitcoin-qtMar 12, 2013

  • CVE-2012-1910
    31Monitor

    Bitcoin-Qt 0.5.0.x before 0.5.0.5; 0.5.1.x, 0.5.2.x, and 0.5.3.x before 0.5.3.1; and 0.6.x before 0.6.0rc4 on Windows does not use MinGW mul

    HighCVSS 7.5No exploitEPSS 5%

    bitcoin · bitcoin-qtAug 6, 2012

  • CVE-2018-17145
    31Monitor

    Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of multiple transaction

    HighCVSS 7.5No exploitEPSS 4%

    bitcoin · bitcoin coreSep 10, 2020

  • CVE-2017-9230
    31Monitor

    The Bitcoin Proof-of-Work algorithm does not consider a certain attack methodology related to 80-byte block headers with a variety of initia

    HighCVSS 7.5No exploitEPSS 3%

    bitcoin · bitcoinMay 24, 2017

  • CVE-2020-14198
    31Monitor

    Bitcoin Core 0.20.0 allows remote denial of service.

    HighCVSS 7.5No exploitEPSS 3%

    bitcoin · bitcoin coreSep 10, 2020

  • CVE-2010-5139
    31Monitor

    Integer overflow in wxBitcoin and bitcoind before 0.3.11 allows remote attackers to bypass intended economic restrictions and create many bi

    HighCVSS 7.5No exploitEPSS 3%

    bitcoin · bitcoin coreAug 6, 2012

  • CVE-2016-10725
    31Monitor

    In Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" (which is supposed to override all other alerts

    HighCVSS 7.5No exploitEPSS 2%

    bitcoin · bitcoin coreJul 5, 2018

  • CVE-2016-10724
    31Monitor

    Bitcoin Core before v0.13.0 allows denial of service (memory exhaustion) triggered by the remote network alert system (deprecated since Q1 2

    HighCVSS 7.5No exploitEPSS 2%

    bitcoin · bitcoin coreJul 5, 2018

  • CVE-2017-12842
    31Monitor

    Bitcoin Core before 0.14 allows an attacker to create an ostensibly valid SPV proof for a payment to a victim who uses an SPV wallet, even i

    HighCVSS 7.5No exploitEPSS 2%

    bitcoin · bitcoin coreMar 16, 2020

  • CVE-2010-5141
    31Monitor

    wxBitcoin and bitcoind before 0.3.5 do not properly handle script opcodes in Bitcoin transactions, which allows remote attackers to spend bi

    HighCVSS 7.5No exploitEPSS 2%

    bitcoin · bitcoin coreAug 6, 2012

  • CVE-2015-3641
    31Monitor

    bitcoind and Bitcoin-Qt prior to 0.10.2 allow attackers to cause a denial of service (disabled functionality such as a client application cr

    HighCVSS 7.5No exploitEPSS 2%

    bitcoin · bitcoin coreMar 12, 2020

  • CVE-2019-15947
    30Monitor

    In Bitcoin Core 0.18.0, bitcoin-qt stores wallet.dat data unencrypted in memory.

    HighCVSS 7.5No exploitEPSS 1%

    bitcoin · bitcoin coreSep 5, 2019

  • CVE-2023-33297
    30Monitor

    Bitcoin Core before 24.1, when debug mode is not used, allows attackers to cause a denial of service (e.g., CPU consumption) because drainin

    HighCVSS 7.5No exploitEPSS 1%

    bitcoin · bitcoin coreMay 22, 2023

  • CVE-2021-3195
    30Monitor

    bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory (e.g., outside the ~/.bitcoin directory) via a dumpw

    HighCVSS 7.5No exploitEPSS 1%

    bitcoin · bitcoin coreJan 26, 2021

  • CVE-2024-35202
    30Monitor

    Bitcoin Core before 25.0 allows remote attackers to cause a denial of service (blocktxn message-handling assertion and node exit) by includi

    HighCVSS 7.5No exploitEPSS 1%

    bitcoin · bitcoin coreOct 10, 2024

  • CVE-2019-25220
    30Monitor

    Bitcoin Core before 24.0.1 allows remote attackers to cause a denial of service (daemon crash) via a flood of low-difficulty header chains (

    HighCVSS 7.5No exploitEPSS 1%

    bitcoin · bitcoin coreNov 18, 2024

  • CVE-2024-52915
    30Monitor

    Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (memory consumption) via a crafted INV message.

    HighCVSS 7.5No exploitEPSS 1%

    bitcoin · bitcoin coreNov 18, 2024

  • CVE-2024-52920
    30Monitor

    Bitcoin Core before 0.20.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed GETDATA message.

    HighCVSS 7.5No exploitEPSS 1%

    bitcoin · bitcoin coreNov 18, 2024

  • CVE-2023-37192
    30Monitor

    Memory management and protection issues in Bitcoin Core v22 allows attackers to modify the stored sending address within the app's memory, p

    HighCVSS 7.5No exploitEPSS 1%

    bitcoin · bitcoin coreJul 6, 2023

  • CVE-2024-52914
    30Monitor

    In Bitcoin Core before 0.18.0, a node could be stalled for hours when processing the orphans of a crafted unconfirmed transaction.

    HighCVSS 7.5No exploitEPSS 1%

    bitcoin · bitcoin coreNov 18, 2024

  • CVE-2024-52916
    30Monitor

    Bitcoin Core before 0.15.0 allows a denial of service (OOM kill of a daemon process) via a flood of minimum difficulty headers.

    HighCVSS 7.5No exploitEPSS 1%

    bitcoin · bitcoin coreNov 18, 2024