Search vulnerabilities

Results 7

Export CSV
CVE-2017-12119

An exploitable unhandled exception vulnerability exists in multiple APIs of CPP-Ethereum JSON-RPC. Specially crafted JSON requests can cause an unhandled exception resulting in denial of service. An attacker can send malicious JSON to trigger this vulnerability.

CVSS 3.1 · 7.5 High EPSS 2.1% KEV · Not listed
Vendors
Products
CVE-2017-12118

An exploitable improper authorization vulnerability exists in miner_stop API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). An attacker can send JSON to trigger this vulnerability.

CVSS 3.1 · 8.1 High EPSS 1.6% KEV · Not listed
Vendors
Products
CVE-2017-12117

An exploitable improper authorization vulnerability exists in miner_start API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability.

CVSS 3.1 · 8.1 High EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2017-12115

An exploitable improper authorization vulnerability exists in miner_setEtherbase API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass.

CVSS 3.1 · 8.1 High EPSS 1.6% KEV · Not listed
Vendors
Products
CVE-2017-12114

An exploitable improper authorization vulnerability exists in admin_peers API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability.

CVSS 3.1 · 6.8 Medium EPSS 1.4% KEV · Not listed
Vendors
Products
CVE-2017-12113

An exploitable improper authorization vulnerability exists in admin_nodeInfo API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability.

CVSS 3.1 · 8.1 High EPSS 1.5% KEV · Not listed
Vendors
Products
CVE-2017-12112

An exploitable improper authorization vulnerability exists in admin_addPeer API of cpp-ethereum's JSON-RPC (commit 4e1015743b95821849d001618a7ce82c7c073768). A JSON request can cause an access to the restricted functionality resulting in authorization bypass. An attacker can send JSON to trigger this vulnerability.

CVSS 3.1 · 8.1 High EPSS 1.4% KEV · Not listed
Vendors
Products