# CVEs published 2018-07-05

133 CVEs were published on July 5, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2016-10724](https://cve.now/CVE-2016-10724.md): Bitcoin Core before v0.13.0 allows denial of service (memory exhaustion) triggered by the remote network alert system (deprecated since Q1 2 (no CVSS)
- [CVE-2016-10725](https://cve.now/CVE-2016-10725.md): In Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" (which is supposed to override all other alerts (no CVSS)
- [CVE-2018-13339](https://cve.now/CVE-2018-13339.md): Imperavi Redactor 3 in Angular Redactor 1.1.6, when HTML content mode is used, allows stored XSS, as demonstrated by an onerror attribute of (no CVSS, angular-redactor)
- [CVE-2018-13340](https://cve.now/CVE-2018-13340.md): Gleez CMS 1.2.0 has CSRF, as demonstrated by a /page/add request. (no CVSS)
- [CVE-2017-16816](https://cve.now/CVE-2017-16816.md): The condor\_schedd component in HTCondor before 8.6.8 and 8.7.x before 8.7.5 allows remote authenticated users to cause a denial of service ( (no CVSS)
- [CVE-2018-10987](https://cve.now/CVE-2018-10987.md): An issue was discovered on Dongguan Diqee Diqee360 devices. (no CVSS)
- [CVE-2018-10988](https://cve.now/CVE-2018-10988.md): An issue was discovered on Diqee Diqee360 devices. (no CVSS)
- [CVE-2018-12103](https://cve.now/CVE-2018-12103.md): An issue was discovered on D-Link DIR-890L with firmware 1.21B02beta01 and earlier, DIR-885L/R with firmware 1.21B03beta01 and earlier, and (no CVSS)
- [CVE-2018-12113](https://cve.now/CVE-2018-12113.md): Core FTP LE version 2.2 Build 1921 is prone to a buffer overflow vulnerability that may result in a DoS or remote code execution via a PASV (no CVSS)
- [CVE-2018-12520](https://cve.now/CVE-2018-12520.md): An issue was discovered in ntopng 3.4 before 3.4.180617. (no CVSS)
- [CVE-2018-12571](https://cve.now/CVE-2018-12571.md): uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS q (no CVSS)
- [CVE-2018-12739](https://cve.now/CVE-2018-12739.md): In BEESCMS 4.0, CSRF allows administrators to be added arbitrarily, a related issue to CVE-2018-10266. (no CVSS)
- [CVE-2018-13031](https://cve.now/CVE-2018-13031.md): DamiCMS v6.0.0 aand 6.1.0 allows CSRF via admin.php?s=/Admin/doadd to add an administrator account. (no CVSS)
- [CVE-2018-13052](https://cve.now/CVE-2018-13052.md): In CyberArk Endpoint Privilege Manager (formerly Viewfinity), Privilege Escalation is possible if the attacker has one process that executes (no CVSS)
- [CVE-2018-8046](https://cve.now/CVE-2018-8046.md): The getTip() method of Action Columns of Sencha Ext JS 4 to 6 before 6.6.0 is vulnerable to XSS attacks, even when passed HTML-escaped data. (no CVSS)
- [CVE-2018-8738](https://cve.now/CVE-2018-8738.md): Airties 5444 1.0.0.18 and 5444TT 1.0.0.18 devices allow XSS. (no CVSS)
- [CVE-2018-9997](https://cve.now/CVE-2018-9997.md): Cross-site scripting (XSS) vulnerability in mail compose in Open-Xchange OX App Suite before 7.6.3-rev31, 7.8.x before 7.8.2-rev31, 7.8.3 be (no CVSS)
- [CVE-2018-9998](https://cve.now/CVE-2018-9998.md): Open-Xchange OX App Suite before 7.6.3-rev37, 7.8.x before 7.8.2-rev40, 7.8.3 before 7.8.3-rev48, and 7.8.4 before 7.8.4-rev28 include folde (no CVSS)
- [CVE-2017-11175](https://cve.now/CVE-2017-11175.md): In J2 Innovations FIN Stack 4.0, the authentication webform is vulnerable to reflected XSS via the query string to /login. (no CVSS)
- [CVE-2018-12021](https://cve.now/CVE-2018-12021.md): Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. (no CVSS, github.com/hpcng/singularity)
- [CVE-2018-12691](https://cve.now/CVE-2018-12691.md): Time-of-check to time-of-use (TOCTOU) race condition in org.onosproject.acl (aka the access control application) in ONOS v1.13 and earlier a (no CVSS)
- [CVE-2018-12910](https://cve.now/CVE-2018-12910.md): The get\_cookies function in soup-cookie-jar.c in libsoup 2.63.2 allows attackers to have unspecified impact via an empty hostname. (no CVSS)
- [CVE-2018-12976](https://cve.now/CVE-2018-12976.md): In Go Doc Dot Org (gddo) through 2018-06-27, an attacker could use specially crafted \<go-import\> tags in packages being fetched by gddo to c (no CVSS)
- [CVE-2018-13325](https://cve.now/CVE-2018-13325.md): The \_sell function of a smart contract implementation for GROWCHAIN (GROW), an Ethereum token, has an integer overflow. (no CVSS)
- [CVE-2018-13328](https://cve.now/CVE-2018-13328.md): The transfer, transferFrom, and mint functions of a smart contract implementation for PFGc, an Ethereum token, have an integer overflow. (no CVSS)
- [CVE-2018-7944](https://cve.now/CVE-2018-7944.md): Huawei smart phones Emily-AL00A with software 8.1.0.106(SP2C00) and 8.1.0.107(SP5C00) have a Factory Reset Protection (FRP) bypass vulnerabi (no CVSS, Huawei Technologies Co. Emily-AL00A)
- [CVE-2018-13252](https://cve.now/CVE-2018-13252.md): Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page. (no CVSS)
- [CVE-2018-13300](https://cve.now/CVE-2018-13300.md): In FFmpeg 3.2 and 4.0.1, an improper argument (AVCodecParameters) passed to the avpriv\_request\_sample function in the handle\_eac3 function i (no CVSS)
- [CVE-2018-13301](https://cve.now/CVE-2018-13301.md): In FFmpeg 4.0.1, due to a missing check of a profile value before setting it, the ff\_mpeg4\_decode\_picture\_header function in libavcodec/mpeg (no CVSS)
- [CVE-2018-13302](https://cve.now/CVE-2018-13302.md): In FFmpeg 4.0.1, improper handling of frame types (other than EAC3\_FRAME\_TYPE\_INDEPENDENT) that have multiple independent substreams in the (no CVSS)
- [CVE-2018-13303](https://cve.now/CVE-2018-13303.md): In FFmpeg 4.0.1, a missing check for failure of a call to init\_get\_bits8() in the avpriv\_ac3\_parse\_header function in libavcodec/ac3\_parser. (no CVSS)
- [CVE-2018-13304](https://cve.now/CVE-2018-13304.md): In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studio\_profile in libavcodec ma (no CVSS)
- [CVE-2018-13305](https://cve.now/CVE-2018-13305.md): In FFmpeg 4.0.1, due to a missing check for negative values of the mquant variable, the vc1\_put\_blocks\_clamped function in libavcodec/vc1\_bl (no CVSS)
- [CVE-2016-10522](https://cve.now/CVE-2016-10522.md): rails\_admin ruby gem \<v1.1.1 is vulnerable to cross-site request forgery (CSRF) attacks. (no CVSS, https://github.com/sferik rails\_admin ruby gem · rails\_admin)
- [CVE-2018-3761](https://cve.now/CVE-2018-3761.md): Nextcloud Server before 12.0.8 and 13.0.3 suffer from improper authentication on the OAuth2 token endpoint. (no CVSS, Nextcloud Server)
- [CVE-2018-3762](https://cve.now/CVE-2018-3762.md): Nextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for incoming shares allowing a user to still r (no CVSS, Nextcloud Server)
- [CVE-2018-3763](https://cve.now/CVE-2018-3763.md): In Nextcloud Calendar before 1.5.8 and 1.6.1, a missing sanitization of search results for an autocomplete field could lead to a stored XSS (no CVSS, Nextcloud Calendar application)
- [CVE-2018-3764](https://cve.now/CVE-2018-3764.md): In Nextcloud Contacts before 2.1.2, a missing sanitization of search results for an autocomplete field could lead to a stored XSS requiring (no CVSS, Nextcloud Contacts application)
- [CVE-2018-3766](https://cve.now/CVE-2018-3766.md): Path traversal in buttle module versions \<= 0.2.0 allows to read any file in the server. (no CVSS, https://github.com/jtrussell buttle · buttle)
- [CVE-2018-3767](https://cve.now/CVE-2018-3767.md): \`memjs\` versions \<= 1.1.0 allocates and stores buffers on typed input, resulting in DoS and uninitialized memory usage. (no CVSS, https://github.com/memcachier memjs · memjs)
- [CVE-2018-3769](https://cve.now/CVE-2018-3769.md): ruby-grape ruby gem suffers from a cross-site scripting (XSS) vulnerability via "format" parameter. (no CVSS, Ruby Grape ruby-grape ruby gem · grape)
- [CVE-2018-13250](https://cve.now/CVE-2018-13250.md): libming 0.4.8 has a NULL pointer dereference in the getString function of the decompile.c file, related to decompileSTRINGCONCAT. (no CVSS)
- [CVE-2018-13251](https://cve.now/CVE-2018-13251.md): In libming 0.4.8, there is an excessive memory allocation attempt in the readBytes function of the util/read.c file, related to parseSWF\_DEF (no CVSS)
- [CVE-2018-8026](https://cve.now/CVE-2018-8026.md): This vulnerability in Apache Solr 6.0.0 to 6.6.4 and 7.0.0 to 7.3.1 relates to an XML external entity expansion (XXE) in Solr config files ( (no CVSS, Apache Software Foundation Apache Solr · org.apache.solr:so…)
- [CVE-2017-16773](https://cve.now/CVE-2017-16773.md): Improper authorization vulnerability in Highlight Preview in Synology Universal Search before 1.0.5-0135 allows remote authenticated users t (CVSS 6.5, Synology Universal Search)
- [CVE-2018-10885](https://cve.now/CVE-2018-10885.md): In atomic-openshift before version 3.10.9 a malicious network-policy configuration can cause Openshift Routing to crash when using ovs-netwo (CVSS 6.5, \[UNKNOWN\] atomic-openshift)
- [CVE-2018-8038](https://cve.now/CVE-2018-8038.md): Versions of Apache CXF Fediz prior to 1.4.4 do not fully disable Document Type Declarations (DTDs) when either parsing the Identity Provider (no CVSS, Apache Software Foundation Apache CXF Fediz · org.apache… +4)
- [CVE-2018-8928](https://cve.now/CVE-2018-8928.md): Cross-site scripting (XSS) vulnerability in Address Book Editor in Synology CardDAV Server before 6.0.8-0086 allows remote authenticated use (CVSS 6.5, Synology CardDAV Server)
- [CVE-2018-9185](https://cve.now/CVE-2018-9185.md): An information disclosure vulnerability in Fortinet FortiOS 6.0.0 and below versions reveals user's web portal login credentials in a Javasc (no CVSS, Fortinet FortiOS)
- [CVE-2015-9260](https://cve.now/CVE-2015-9260.md): An issue was discovered in BEdita before 3.7.0. (no CVSS)
- [CVE-2018-12018](https://cve.now/CVE-2018-12018.md): The GetBlockHeadersMsg handler in the LES protocol implementation in Go Ethereum (aka geth) before 1.8.11 may lead to an access violation be (no CVSS, github.com/ethereum/go-ethereum)
- [CVE-2018-13153](https://cve.now/CVE-2018-13153.md): In ImageMagick 7.0.8-4, there is a memory leak in the XMagickCommand function in MagickCore/animate.c. (no CVSS)
- [CVE-2018-13155](https://cve.now/CVE-2018-13155.md): The mintToken function of a smart contract implementation for GEMCHAIN (GEM), an Ethereum token, has an integer overflow that allows the own (no CVSS)
- [CVE-2018-13156](https://cve.now/CVE-2018-13156.md): The mintToken function of a smart contract implementation for bonusToken (BNS), an Ethereum token, has an integer overflow that allows the o (no CVSS)
- [CVE-2018-13157](https://cve.now/CVE-2018-13157.md): The mintToken function of a smart contract implementation for CryptonitexCoin, an Ethereum token, has an integer overflow that allows the ow (no CVSS)
- [CVE-2018-13158](https://cve.now/CVE-2018-13158.md): The mintToken function of a smart contract implementation for AssetToken, an Ethereum token, has an integer overflow that allows the owner o (no CVSS)
- [CVE-2018-13159](https://cve.now/CVE-2018-13159.md): The mintToken function of a smart contract implementation for bankcoin (BNK), an Ethereum token, has an integer overflow that allows the own (no CVSS)
- [CVE-2018-13160](https://cve.now/CVE-2018-13160.md): The mintToken function of a smart contract implementation for etktokens (ETK), an Ethereum token, has an integer overflow that allows the ow (no CVSS)
- [CVE-2018-13161](https://cve.now/CVE-2018-13161.md): The mintToken function of a smart contract implementation for MultiGames (MLT), an Ethereum token, has an integer overflow that allows the o (no CVSS)
- [CVE-2018-13162](https://cve.now/CVE-2018-13162.md): The mintToken function of a smart contract implementation for ALEX, an Ethereum token, has an integer overflow that allows the owner of the (no CVSS)
- [CVE-2018-13163](https://cve.now/CVE-2018-13163.md): The mintToken function of a smart contract implementation for Ethernet Cash (ENC), an Ethereum token, has an integer overflow that allows th (no CVSS)
- [CVE-2018-13164](https://cve.now/CVE-2018-13164.md): The mintToken function of a smart contract implementation for EPPCOIN (EPP), an Ethereum token, has an integer overflow that allows the owne (no CVSS)
- [CVE-2018-13165](https://cve.now/CVE-2018-13165.md): The mintToken function of a smart contract implementation for JustDCoin (JustD), an Ethereum token, has an integer overflow that allows the (no CVSS)
- [CVE-2018-13166](https://cve.now/CVE-2018-13166.md): The mintToken function of a smart contract implementation for AthletiCoin (ATHA), an Ethereum token, has an integer overflow that allows the (no CVSS)
- [CVE-2018-13167](https://cve.now/CVE-2018-13167.md): The mintToken function of a smart contract implementation for Yu Gi Oh (YGO), an Ethereum token, has an integer overflow that allows the own (no CVSS)
- [CVE-2018-13168](https://cve.now/CVE-2018-13168.md): The mintToken function of a smart contract implementation for Yu Gi Oh (YGO) (Contract Name: NetkillerBatchToken), an Ethereum token, has an (no CVSS)
- [CVE-2018-13169](https://cve.now/CVE-2018-13169.md): The mintToken function of a smart contract implementation for Ethereum Cash Pro (ECP), an Ethereum token, has an integer overflow that allow (no CVSS)
- [CVE-2018-13170](https://cve.now/CVE-2018-13170.md): The mintToken function of a smart contract implementation for Snoqualmie Coin (SNOW), an Ethereum token, has an integer overflow that allows (no CVSS)
- [CVE-2018-13171](https://cve.now/CVE-2018-13171.md): The mintToken function of a smart contract implementation for LadaToken (LDT), an Ethereum token, has an integer overflow that allows the ow (no CVSS)
- [CVE-2018-13172](https://cve.now/CVE-2018-13172.md): The mintToken function of a smart contract implementation for bzxcoin (BZX), an Ethereum token, has an integer overflow that allows the owne (no CVSS)
- [CVE-2018-13173](https://cve.now/CVE-2018-13173.md): The mintToken function of a smart contract implementation for EliteShipperToken (ESHIP), an Ethereum token, has an integer overflow that all (no CVSS)
- [CVE-2018-13174](https://cve.now/CVE-2018-13174.md): The mintToken function of a smart contract implementation for CryptoABS (ABS), an Ethereum token, has an integer overflow that allows the ow (no CVSS)
- [CVE-2018-13175](https://cve.now/CVE-2018-13175.md): The mintToken function of a smart contract implementation for AIChain, an Ethereum token, has an integer overflow that allows the owner of t (no CVSS)
- [CVE-2018-13176](https://cve.now/CVE-2018-13176.md): The mintToken function of a smart contract implementation for Trust Zen Token (ZEN), an Ethereum token, has an integer overflow that allows (no CVSS)
- [CVE-2018-13177](https://cve.now/CVE-2018-13177.md): The mintToken function of a smart contract implementation for MiningRigRentals Token (MRR), an Ethereum token, has an integer overflow that (no CVSS)
- [CVE-2018-13178](https://cve.now/CVE-2018-13178.md): The mintToken function of a smart contract implementation for ECToints (ECT) (Contract Name: ECPoints), an Ethereum token, has an integer ov (no CVSS)
- [CVE-2018-13179](https://cve.now/CVE-2018-13179.md): The mintToken function of a smart contract implementation for Air-Contact Token (AIR), an Ethereum token, has an integer overflow that allow (no CVSS)
- [CVE-2018-13180](https://cve.now/CVE-2018-13180.md): The mintToken function of a smart contract implementation for IMM Coin (IMC), an Ethereum token, has an integer overflow that allows the own (no CVSS)
- [CVE-2018-13181](https://cve.now/CVE-2018-13181.md): The mintToken function of a smart contract implementation for Troo, an Ethereum token, has an integer overflow that allows the owner of the (no CVSS)
- [CVE-2018-13182](https://cve.now/CVE-2018-13182.md): The mintToken function of a smart contract implementation for loncoin (LON), an Ethereum token, has an integer overflow that allows the owne (no CVSS)
- [CVE-2018-13183](https://cve.now/CVE-2018-13183.md): The mintToken function of a smart contract implementation for JWC, an Ethereum token, has an integer overflow that allows the owner of the c (no CVSS)
- [CVE-2018-13184](https://cve.now/CVE-2018-13184.md): The mintToken function of a smart contract implementation for TravelZedi Token (ZEDI), an Ethereum token, has an integer overflow that allow (no CVSS)
- [CVE-2018-13185](https://cve.now/CVE-2018-13185.md): The mintToken function of a smart contract implementation for appcoins (APPC), an Ethereum token, has an integer overflow that allows the ow (no CVSS)
- [CVE-2018-13186](https://cve.now/CVE-2018-13186.md): The mintToken function of a smart contract implementation for MMTCoin (MMT), an Ethereum token, has an integer overflow that allows the owne (no CVSS)
- [CVE-2018-13187](https://cve.now/CVE-2018-13187.md): The mintToken function of a smart contract implementation for CIBN Live Token (CIBN LIVE), an Ethereum token, has an integer overflow that a (no CVSS)
- [CVE-2018-13188](https://cve.now/CVE-2018-13188.md): The mintToken function of a smart contract implementation for MyBO, an Ethereum token, has an integer overflow that allows the owner of the (no CVSS)
- [CVE-2018-13189](https://cve.now/CVE-2018-13189.md): The mint function of a smart contract implementation for Unolabo (UNLB), an Ethereum token, has an integer overflow that allows the owner of (no CVSS)
- [CVE-2018-13190](https://cve.now/CVE-2018-13190.md): The mintToken function of a smart contract implementation for DVChain, an Ethereum token, has an integer overflow that allows the owner of t (no CVSS)
- [CVE-2018-13191](https://cve.now/CVE-2018-13191.md): The mintToken function of a smart contract implementation for Super Carbon Coin (SCC), an Ethereum token, has an integer overflow that allow (no CVSS)
- [CVE-2018-13192](https://cve.now/CVE-2018-13192.md): The mintToken function of a smart contract implementation for Jobscoin (JOB), an Ethereum token, has an integer overflow that allows the own (no CVSS)
- [CVE-2018-13193](https://cve.now/CVE-2018-13193.md): The mintToken function of a smart contract implementation for hentaisolo (HAO), an Ethereum token, has an integer overflow that allows the o (no CVSS)
- [CVE-2018-13194](https://cve.now/CVE-2018-13194.md): The mintToken function of a smart contract implementation for TongTong Coin (TTCoin), an Ethereum token, has an integer overflow that allows (no CVSS)
- [CVE-2018-13195](https://cve.now/CVE-2018-13195.md): The mintToken function of a smart contract implementation for Cranoo (CRN), an Ethereum token, has an integer overflow that allows the owner (no CVSS)
- [CVE-2018-13196](https://cve.now/CVE-2018-13196.md): The sell function of a smart contract implementation for T-Swap-Token (T-S-T), an Ethereum token, has an integer overflow in which "amount \* (no CVSS)
- [CVE-2018-13197](https://cve.now/CVE-2018-13197.md): The sell function of a smart contract implementation for Welfare Token Fund (WTF), an Ethereum token, has an integer overflow in which "amou (no CVSS)
- [CVE-2018-13198](https://cve.now/CVE-2018-13198.md): The sell function of a smart contract implementation for STeX Exchange ICO (STE), an Ethereum token, has an integer overflow in which "amoun (no CVSS)
- [CVE-2018-13199](https://cve.now/CVE-2018-13199.md): The sell function of a smart contract implementation for ETHEREUMBLACK (ETCBK), an Ethereum token, has an integer overflow in which "amount (no CVSS)
- [CVE-2018-13200](https://cve.now/CVE-2018-13200.md): The sell function of a smart contract implementation for DateMe (DMX) (Contract Name: ProgressiveToken), an Ethereum token, has an integer o (no CVSS)
- [CVE-2018-13201](https://cve.now/CVE-2018-13201.md): The sell function of a smart contract implementation for TiTok - Ticket Token (Contract Name: MyAdvancedToken7), an Ethereum token, has an i (no CVSS)
- [CVE-2018-13202](https://cve.now/CVE-2018-13202.md): The sell function of a smart contract implementation for MyBO, an Ethereum token, has an integer overflow in which "amount \* sellPrice" can (no CVSS)
- [CVE-2018-13203](https://cve.now/CVE-2018-13203.md): The sellBuyerTokens function of a smart contract implementation for SwapToken, an Ethereum token, has an integer overflow in which "amount \* (no CVSS)
- [CVE-2018-13204](https://cve.now/CVE-2018-13204.md): The sell function of a smart contract implementation for ETHERCASH (ETC), an Ethereum token, has an integer overflow in which "amount \* sell (no CVSS)
- [CVE-2018-13205](https://cve.now/CVE-2018-13205.md): The sell function of a smart contract implementation for ohni\_2 (OHNI), an Ethereum token, has an integer overflow in which "amount \* sellPr (no CVSS)
- [CVE-2018-13206](https://cve.now/CVE-2018-13206.md): The sell function of a smart contract implementation for ProvidenceCasino (PVE), an Ethereum token, has an integer overflow in which "amount (no CVSS)
- [CVE-2018-13207](https://cve.now/CVE-2018-13207.md): The sell function of a smart contract implementation for PornCoin (PRNC), an Ethereum token, has an integer overflow in which "amount \* sell (no CVSS)
- [CVE-2018-13208](https://cve.now/CVE-2018-13208.md): The sell function of a smart contract implementation for MoneyTree (TREE), an Ethereum token, has an integer overflow in which "amount \* sel (no CVSS)
- [CVE-2018-13209](https://cve.now/CVE-2018-13209.md): The sell function of a smart contract implementation for Nectar (NCTR), an Ethereum token, has an integer overflow in which "amount \* sellPr (no CVSS)
- [CVE-2018-13210](https://cve.now/CVE-2018-13210.md): The sell function of a smart contract implementation for Providence Crypto Casino (PVE) (Contract Name: ProvidenceCasinoToken), an Ethereum (no CVSS)
- [CVE-2018-13211](https://cve.now/CVE-2018-13211.md): The sell function of a smart contract implementation for MyToken, an Ethereum token, has an integer overflow in which "amount \* sellPrice" c (no CVSS)
- [CVE-2018-13212](https://cve.now/CVE-2018-13212.md): The sell function of a smart contract implementation for EthereumLegit, an Ethereum token, has an integer overflow in which "amount \* sellPr (no CVSS)
- [CVE-2018-13213](https://cve.now/CVE-2018-13213.md): The sell function of a smart contract implementation for TravelCoin (TRV), an Ethereum token, has an integer overflow in which "amount \* sel (no CVSS)
- [CVE-2018-13214](https://cve.now/CVE-2018-13214.md): The sell function of a smart contract implementation for GMile, an Ethereum token, has an integer overflow in which "amount \* sellPrice" can (no CVSS)
- [CVE-2018-13215](https://cve.now/CVE-2018-13215.md): The sell function of a smart contract implementation for Sample Token (STK) (Contract Name: cashBackMintable), an Ethereum token, has an int (no CVSS)
- [CVE-2018-13216](https://cve.now/CVE-2018-13216.md): The sell function of a smart contract implementation for GreenMed (GRMD), an Ethereum token, has an integer overflow in which "amount \* sell (no CVSS)
- [CVE-2018-13217](https://cve.now/CVE-2018-13217.md): The sell function of a smart contract implementation for CoinToken, an Ethereum token, has an integer overflow in which "amount \* sellPrice" (no CVSS)
- [CVE-2018-13218](https://cve.now/CVE-2018-13218.md): The sell function of a smart contract implementation for ICO Dollar (ICOD), an Ethereum token, has an integer overflow in which "amount \* se (no CVSS)
- [CVE-2018-13219](https://cve.now/CVE-2018-13219.md): The sell function of a smart contract implementation for YourCoin (ICO) (Contract Name: ETH033), an Ethereum token, has an integer overflow (no CVSS)
- [CVE-2018-13220](https://cve.now/CVE-2018-13220.md): The sell function of a smart contract implementation for MAVCash, an Ethereum token, has an integer overflow in which "amount \* sellPrice" c (no CVSS)
- [CVE-2018-13221](https://cve.now/CVE-2018-13221.md): The sell function of a smart contract implementation for Extreme Coin (XT) (Contract Name: ExtremeToken), an Ethereum token, has an integer (no CVSS)
- [CVE-2018-13222](https://cve.now/CVE-2018-13222.md): The sell function of a smart contract implementation for ObjectToken (OBJ), an Ethereum token, has an integer overflow in which "amount \* se (no CVSS)
- [CVE-2018-13223](https://cve.now/CVE-2018-13223.md): The sell function of a smart contract implementation for R Time Token v3 (RS) (Contract Name: RTokenMain), an Ethereum token, has an integer (no CVSS)
- [CVE-2018-13224](https://cve.now/CVE-2018-13224.md): The sell function of a smart contract implementation for Virtual Energy Units (VEU) (Contract Name: VEU\_TokenERC20), an Ethereum token, has (no CVSS)
- [CVE-2018-13225](https://cve.now/CVE-2018-13225.md): The sell function of a smart contract implementation for MyYLC, an Ethereum token, has an integer overflow in which "amount \* sellPrice" can (no CVSS)
- [CVE-2018-13226](https://cve.now/CVE-2018-13226.md): The sell function of a smart contract implementation for YLCToken, an Ethereum token, has an integer overflow in which "amount \* sellPrice" (no CVSS)
- [CVE-2018-13227](https://cve.now/CVE-2018-13227.md): The sell function of a smart contract implementation for MoneyChainNet (MCN), an Ethereum token, has an integer overflow in which "amount \* (no CVSS)
- [CVE-2018-13228](https://cve.now/CVE-2018-13228.md): The sell function of a smart contract implementation for Crowdnext (CNX), an Ethereum token, has an integer overflow in which "amount \* sell (no CVSS)
- [CVE-2018-13229](https://cve.now/CVE-2018-13229.md): The sell function of a smart contract implementation for RiptideCoin (RIPT), an Ethereum token, has an integer overflow in which "amount \* s (no CVSS)
- [CVE-2018-13230](https://cve.now/CVE-2018-13230.md): The sell function of a smart contract implementation for DestiNeed (DSN), an Ethereum token, has an integer overflow in which "amount \* sell (no CVSS)
- [CVE-2018-13231](https://cve.now/CVE-2018-13231.md): The sell function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterToken), an Ethereum token, has an integer overflo (no CVSS)
- [CVE-2018-13232](https://cve.now/CVE-2018-13232.md): The sell function of a smart contract implementation for ENTER (ENTR) (Contract Name: EnterCoin), an Ethereum token, has an integer overflow (no CVSS)
- [CVE-2018-13233](https://cve.now/CVE-2018-13233.md): The sell function of a smart contract implementation for GSI, an Ethereum token, has an integer overflow in which "amount \* sellPrice" can b (no CVSS)
- [CVE-2018-13326](https://cve.now/CVE-2018-13326.md): The transfer and transferFrom functions of a smart contract implementation for Bittelux (BTX), an Ethereum token, have an integer overflow. (no CVSS)
- [CVE-2018-13327](https://cve.now/CVE-2018-13327.md): The transfer and transferFrom functions of a smart contract implementation for ChuCunLingAIGO (CCLAG), an Ethereum token, have an integer ov (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-07-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.