CVE Browser

Frontier opcode SUICIDE touches too many storage values on large contracts

ink! vulnerable to incorrect decoding of storage value when using `DelegateCall`

Frontier's modexp precompile is slow for even modulus

Incorrect Calculation in Frontier leads to inflated Ethereum chain gas prices

Message length overflow in frontier

Discrepency in transfer value and actual value due to incorrect truncation in Frontier

Integer underflow in Frontier

Validity check for signed Frontier-specific extrinsic not called in block execution

Transaction validity oversight in pallet-ethereum

An issue was discovered in the libsecp256k1 crate before 0.5.0 for Rust. It can verify an invalid signature because it allows the R or S parameter to be larger…

An issue was discovered in the libsecp256k1 crate before 0.3.1 for Rust. Scalar::check_overflow allows a timing side-channel attack; consequently, attackers ca…

A timing vulnerability in the Scalar::check_overflow function in Parity libsecp256k1-rs before 0.3.1 potentially allows an attacker to leak information via a s…

An exploitable overly permissive cross-domain (CORS) whitelist vulnerability exists in JSON-RPC of Parity Ethereum client version 1.7.8. An automatically sent…

Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive information by requesting other websites via th…