Skip to content
Noroxi

ethereum records

44 published records for vendor ethereum.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
47.7%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

44 records
  • CVE-2017-14451
    41Plan

    An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Virtual Machine) of CPP-Ethereum.

    CriticalCVSS 10.0No exploitEPSS 2%

    ethereum · ethereumDec 2, 2020

  • CVE-2018-15890
    40Plan

    An issue was discovered in EthereumJ 1.8.2.

    CriticalCVSS 9.8No exploitEPSS 2%

    ethereum · ethereumjJun 20, 2019

  • CVE-2024-51424
    39Monitor

    An issue in the PepeGxng smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impact

    CriticalCVSS 9.8No exploitEPSS 0%

    Oct 30, 2024

  • CVE-2024-51427
    39Monitor

    An issue in the PepeGxng smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impact

    CriticalCVSS 9.8No exploitEPSS 0%

    Oct 30, 2024

  • CVE-2018-18920
    36Monitor

    Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers computation._stack.values with '"stack": [100, 100,

    HighCVSS 8.8No exploitEPSS 2%

    ethereum · py-evmNov 11, 2018

  • CVE-2024-51426
    35Monitor

    An issue in the PepeGxng smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impact

    HighCVSS 8.8No exploitEPSS 0%

    Oct 30, 2024

  • CVE-2024-51425
    35Monitor

    An issue in the WaterToken smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impac

    HighCVSS 8.8No exploitEPSS 0%

    Oct 30, 2024

  • CVE-2026-26314
    34Monitor

    Go Ethereum affected by DoS via malicious p2p message

    HighCVSS 8.7No exploitEPSS 0%

    ethereum · go ethereumFeb 19, 2026

  • CVE-2017-14457
    33Monitor

    An exploitable information leak/denial of service vulnerability exists in the libevm (Ethereum Virtual Machine) `create2` opcode handler of

    HighCVSS 8.2No exploitEPSS 1%

    ethereum · ethereum virtual machineJan 19, 2018

  • CVE-2017-12116
    32Monitor

    An exploitable improper authorization vulnerability exists in miner_setGasPrice API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d00

    HighCVSS 8.1No exploitEPSS 1%

    ethereum · alethJan 19, 2018

  • CVE-2017-12118
    32Monitor

    An exploitable improper authorization vulnerability exists in miner_stop API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7c

    HighCVSS 8.1No exploitEPSS 1%

    ethereum · cpp-ethereumJan 19, 2018

  • CVE-2017-12115
    32Monitor

    An exploitable improper authorization vulnerability exists in miner_setEtherbase API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d0

    HighCVSS 8.1No exploitEPSS 1%

    ethereum · cpp-ethereumJan 19, 2018

  • CVE-2017-12113
    32Monitor

    An exploitable improper authorization vulnerability exists in admin_nodeInfo API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d00161

    HighCVSS 8.1No exploitEPSS 1%

    ethereum · cpp-ethereumJan 19, 2018

  • CVE-2017-12112
    32Monitor

    An exploitable improper authorization vulnerability exists in admin_addPeer API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618

    HighCVSS 8.1No exploitEPSS 1%

    ethereum · cpp-ethereumJan 19, 2018

  • CVE-2017-12117
    32Monitor

    An exploitable improper authorization vulnerability exists in miner_start API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7

    HighCVSS 8.1No exploitEPSS 1%

    ethereum · cpp-ethereumJan 19, 2018

  • CVE-2018-12018
    31Monitor

    The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation be

    HighCVSS 7.5Proof of conceptEPSS 4%

    ethereum · go ethereumJul 4, 2018

  • CVE-2017-12119
    31Monitor

    An exploitable unhandled exception vulnerability exists in multiple APIs of CPP-Ethereum JSON-RPC.

    HighCVSS 7.5No exploitEPSS 2%

    ethereum · cpp-ethereumJan 19, 2018

  • CVE-2020-26240
    31Monitor

    Erroneous Proof of Work calculation in geth

    HighCVSS 7.5No exploitEPSS 1%

    ethereum · go ethereumNov 24, 2020

  • CVE-2020-26242
    30Monitor

    Denial of service in geth

    HighCVSS 7.5No exploitEPSS 1%

    ethereum · go ethereumNov 24, 2020

  • CVE-2018-19184
    30Monitor

    cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode.

    HighCVSS 7.5No exploitEPSS 1%

    ethereum · go ethereumNov 11, 2018

  • CVE-2018-20421
    30Monitor

    Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array

    HighCVSS 7.5No exploitEPSS 1%

    ethereum · go ethereumDec 23, 2018

  • CVE-2022-23328
    30Monitor

    A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one account

    HighCVSS 7.5No exploitEPSS 1%

    ethereum · go ethereumMar 4, 2022

  • CVE-2022-23327
    30Monitor

    A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in on

    HighCVSS 7.5No exploitEPSS 1%

    ethereum · go ethereumMar 4, 2022

  • CVE-2021-39137
    30Monitor

    Consensus flaw during block processing in go-ethereum

    HighCVSS 7.5No exploitEPSS 1%

    ethereum · go ethereumAug 24, 2021

  • CVE-2018-16733
    30Monitor

    In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the start block.

    HighCVSS 7.5No exploitEPSS 1%

    ethereum · go ethereumSep 8, 2018