ethereum kayıtları
ethereum üreticisine ait 44 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %45,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-863 Incorrect Authorization9
- CWE-20 Improper Input Validation5
- CWE-400 Uncontrolled Resource Consumption5
- CWE-682 Incorrect Calculation4
- CWE-94 Improper Control of Generation of Code ('Code Injection')2
- CWE-125 Out-of-bounds Read2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
44 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2017-14451İstismar yok | An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Virtual Machine) of CPP-Ethereum.ethereum · ethereum · CWE-125 | Kritik10,0 | — | %2,6 | 2 Ara 2020 |
40Planlayın | CVE-2018-15890İstismar yok | An issue was discovered in EthereumJ 1.8.2.ethereum · ethereumj · CWE-502 | Kritik9,8 | — | %2,9 | 20 Haz 2019 |
39İzleyin | CVE-2024-51424İstismar yok | An issue in the PepeGxng smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impact CWE-94 | Kritik9,8 | — | %0,6 | 30 Eki 2024 |
39İzleyin | CVE-2024-51427İstismar yok | An issue in the PepeGxng smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impact CWE-94 | Kritik9,8 | — | %0,6 | 30 Eki 2024 |
36İzleyin | CVE-2018-18920İstismar yok | Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers computation._stack.values with '"stack": [100, 100,ethereum · py-evm · CWE-119 | Yüksek8,8 | — | %2,9 | 11 Kas 2018 |
35İzleyin | CVE-2024-51426İstismar yok | An issue in the PepeGxng smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impact CWE-863 | Yüksek8,8 | — | %0,5 | 30 Eki 2024 |
35İzleyin | CVE-2024-51425İstismar yok | An issue in the WaterToken smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impacCWE-863 | Yüksek8,8 | — | %0,4 | 30 Eki 2024 |
34İzleyin | CVE-2026-26314İstismar yok | Go Ethereum affected by DoS via malicious p2p messageethereum · go ethereum · CWE-20 | Yüksek8,7 | — | %0,8 | 19 Şub 2026 |
33İzleyin | CVE-2017-14457İstismar yok | An exploitable information leak/denial of service vulnerability exists in the libevm (Ethereum Virtual Machine) `create2` opcode handler of ethereum · ethereum virtual machine · CWE-125 | Yüksek8,2 | — | %1,7 | 19 Oca 2018 |
32İzleyin | CVE-2017-12116İstismar yok | An exploitable improper authorization vulnerability exists in miner_setGasPrice API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d00ethereum · aleth · CWE-863 | Yüksek8,1 | — | %1,7 | 19 Oca 2018 |
32İzleyin | CVE-2017-12118İstismar yok | An exploitable improper authorization vulnerability exists in miner_stop API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7cethereum · cpp-ethereum · CWE-863 | Yüksek8,1 | — | %1,6 | 19 Oca 2018 |
32İzleyin | CVE-2017-12115İstismar yok | An exploitable improper authorization vulnerability exists in miner_setEtherbase API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d0ethereum · cpp-ethereum · CWE-863 | Yüksek8,1 | — | %1,6 | 19 Oca 2018 |
32İzleyin | CVE-2017-12113İstismar yok | An exploitable improper authorization vulnerability exists in admin_nodeInfo API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d00161ethereum · cpp-ethereum · CWE-863 | Yüksek8,1 | — | %1,5 | 19 Oca 2018 |
32İzleyin | CVE-2017-12112İstismar yok | An exploitable improper authorization vulnerability exists in admin_addPeer API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618ethereum · cpp-ethereum · CWE-863 | Yüksek8,1 | — | %1,4 | 19 Oca 2018 |
32İzleyin | CVE-2017-12117İstismar yok | An exploitable improper authorization vulnerability exists in miner_start API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ethereum · cpp-ethereum · CWE-863 | Yüksek8,1 | — | %1,4 | 19 Oca 2018 |
31İzleyin | CVE-2018-12018Kavram kanıtı | The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation beethereum · go ethereum · CWE-129 | Yüksek7,5 | — | %4,3 | 4 Tem 2018 |
31İzleyin | CVE-2017-12119İstismar yok | An exploitable unhandled exception vulnerability exists in multiple APIs of CPP-Ethereum JSON-RPC.ethereum · cpp-ethereum · CWE-754 | Yüksek7,5 | — | %2,1 | 19 Oca 2018 |
31İzleyin | CVE-2020-26240İstismar yok | Erroneous Proof of Work calculation in gethethereum · go ethereum · CWE-682 | Yüksek7,5 | — | %1,9 | 24 Kas 2020 |
30İzleyin | CVE-2020-26242İstismar yok | Denial of service in gethethereum · go ethereum | Yüksek7,5 | — | %1,5 | 24 Kas 2020 |
30İzleyin | CVE-2018-19184İstismar yok | cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode.ethereum · go ethereum · CWE-476 | Yüksek7,5 | — | %1,5 | 11 Kas 2018 |
30İzleyin | CVE-2018-20421İstismar yok | Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array ethereum · go ethereum · CWE-770 | Yüksek7,5 | — | %1,5 | 23 Ara 2018 |
30İzleyin | CVE-2022-23328İstismar yok | A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one account ethereum · go ethereum · CWE-400 | Yüksek7,5 | — | %1,4 | 4 Mar 2022 |
30İzleyin | CVE-2022-23327İstismar yok | A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in onethereum · go ethereum | Yüksek7,5 | — | %1,4 | 4 Mar 2022 |
30İzleyin | CVE-2021-39137İstismar yok | Consensus flaw during block processing in go-ethereumethereum · go ethereum · CWE-436 | Yüksek7,5 | — | %1,3 | 24 Ağu 2021 |
30İzleyin | CVE-2018-16733İstismar yok | In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the start block.ethereum · go ethereum · CWE-20 | Yüksek7,5 | — | %1,2 | 8 Eyl 2018 |
- CVE-2017-1445141Planlayın
An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Virtual Machine) of CPP-Ethereum.
KritikCVSS 10,0İstismar yokEPSS %3ethereum · ethereum2 Ara 2020
- CVE-2018-1589040Planlayın
An issue was discovered in EthereumJ 1.8.2.
KritikCVSS 9,8İstismar yokEPSS %3ethereum · ethereumj20 Haz 2019
- CVE-2024-5142439İzleyin
An issue in the PepeGxng smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impact
KritikCVSS 9,8İstismar yokEPSS %130 Eki 2024
- CVE-2024-5142739İzleyin
An issue in the PepeGxng smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impact
KritikCVSS 9,8İstismar yokEPSS %130 Eki 2024
- CVE-2018-1892036İzleyin
Py-EVM v0.2.0-alpha.33 allows attackers to make a vm.execute_bytecode call that triggers computation._stack.values with '"stack": [100, 100,
YüksekCVSS 8,8İstismar yokEPSS %3ethereum · py-evm11 Kas 2018
- CVE-2024-5142635İzleyin
An issue in the PepeGxng smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impact
YüksekCVSS 8,8İstismar yokEPSS %030 Eki 2024
- CVE-2024-5142535İzleyin
An issue in the WaterToken smart contract (which can be run on the Ethereum blockchain) allows remote attackers to have an unspecified impac
YüksekCVSS 8,8İstismar yokEPSS %030 Eki 2024
- CVE-2026-2631434İzleyin
Go Ethereum affected by DoS via malicious p2p message
YüksekCVSS 8,7İstismar yokEPSS %1ethereum · go ethereum19 Şub 2026
- CVE-2017-1445733İzleyin
An exploitable information leak/denial of service vulnerability exists in the libevm (Ethereum Virtual Machine) `create2` opcode handler of
YüksekCVSS 8,2İstismar yokEPSS %2ethereum · ethereum virtual machine19 Oca 2018
- CVE-2017-1211632İzleyin
An exploitable improper authorization vulnerability exists in miner_setGasPrice API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d00
YüksekCVSS 8,1İstismar yokEPSS %2ethereum · aleth19 Oca 2018
- CVE-2017-1211832İzleyin
An exploitable improper authorization vulnerability exists in miner_stop API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7c
YüksekCVSS 8,1İstismar yokEPSS %2ethereum · cpp-ethereum19 Oca 2018
- CVE-2017-1211532İzleyin
An exploitable improper authorization vulnerability exists in miner_setEtherbase API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d0
YüksekCVSS 8,1İstismar yokEPSS %2ethereum · cpp-ethereum19 Oca 2018
- CVE-2017-1211332İzleyin
An exploitable improper authorization vulnerability exists in admin_nodeInfo API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d00161
YüksekCVSS 8,1İstismar yokEPSS %1ethereum · cpp-ethereum19 Oca 2018
- CVE-2017-1211232İzleyin
An exploitable improper authorization vulnerability exists in admin_addPeer API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618
YüksekCVSS 8,1İstismar yokEPSS %1ethereum · cpp-ethereum19 Oca 2018
- CVE-2017-1211732İzleyin
An exploitable improper authorization vulnerability exists in miner_start API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7
YüksekCVSS 8,1İstismar yokEPSS %1ethereum · cpp-ethereum19 Oca 2018
- CVE-2018-1201831İzleyin
The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation be
YüksekCVSS 7,5Kavram kanıtıEPSS %4ethereum · go ethereum4 Tem 2018
- CVE-2017-1211931İzleyin
An exploitable unhandled exception vulnerability exists in multiple APIs of CPP-Ethereum JSON-RPC.
YüksekCVSS 7,5İstismar yokEPSS %2ethereum · cpp-ethereum19 Oca 2018
- CVE-2020-2624031İzleyin
Erroneous Proof of Work calculation in geth
YüksekCVSS 7,5İstismar yokEPSS %2ethereum · go ethereum24 Kas 2020
- CVE-2020-2624230İzleyin
Denial of service in geth
YüksekCVSS 7,5İstismar yokEPSS %1ethereum · go ethereum24 Kas 2020
- CVE-2018-1918430İzleyin
cmd/evm/runner.go in Go Ethereum (aka geth) 1.8.17 allows attackers to cause a denial of service (SEGV) via crafted bytecode.
YüksekCVSS 7,5İstismar yokEPSS %1ethereum · go ethereum11 Kas 2018
- CVE-2018-2042130İzleyin
Go Ethereum (aka geth) 1.8.19 allows attackers to cause a denial of service (memory consumption) by rewriting the length of a dynamic array
YüksekCVSS 7,5İstismar yokEPSS %1ethereum · go ethereum23 Ara 2018
- CVE-2022-2332830İzleyin
A design flaw in all versions of Go-Ethereum allows an attacker node to send 5120 pending transactions of a high gas price from one account
YüksekCVSS 7,5İstismar yokEPSS %1ethereum · go ethereum4 Mar 2022
- CVE-2022-2332730İzleyin
A design flaw in Go-Ethereum 1.10.12 and older versions allows an attacker node to send 5120 future transactions with a high gas price in on
YüksekCVSS 7,5İstismar yokEPSS %1ethereum · go ethereum4 Mar 2022
- CVE-2021-3913730İzleyin
Consensus flaw during block processing in go-ethereum
YüksekCVSS 7,5İstismar yokEPSS %1ethereum · go ethereum24 Ağu 2021
- CVE-2018-1673330İzleyin
In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the start block.
YüksekCVSS 7,5İstismar yokEPSS %1ethereum · go ethereum8 Eyl 2018