smsecgroup/SM-VUL

Releases0

Stars1

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2019-15078 ↗	Dec 30, 2020Wednesday, 30 December 2020, 20:15	7.5 HIGH	5 MEDIUM
An issue was discovered in a smart contract implementation for AIRDROPX BORN through 2019-05-29, an Ethereum token. The name of the constructor has a typo (wrong case: XBornID versus XBORNID) that allows an attacker to change the owner of the contract and obtain cryptocurrency for free.
CVE-2019-15079 ↗	Dec 30, 2020Wednesday, 30 December 2020, 20:15	7.5 HIGH	5 MEDIUM
A typo exists in the constructor of a smart contract implementation for EAI through 2019-06-05, an Ethereum token. This vulnerability could be used by an attacker to acquire EAI tokens for free.
CVE-2019-15080 ↗	Dec 30, 2020Wednesday, 30 December 2020, 20:15	7.5 HIGH	5 MEDIUM
An issue was discovered in a smart contract implementation for MORPH Token through 2019-06-05, an Ethereum token. A typo in the constructor of the Owned contract (which is inherited by MORPH Token) allows attackers to acquire contract ownership. A new owner can subsequently obtain MORPH Tokens for free and can perform a DoS attack.