Vulnerabilities in ethereum
18 resultsVexday analysis
Ethereum apresenta 17 vulnerabilidades catalogadas na base, todas de baixa severidade (sem críticas), com nenhuma sob exploração ativa no momento. A fraqueza predominante é validação inadequada de entrada (CWE-20), padrão em sistemas complexos, mas a ausência de divulgações recentes e exploração ativa sugere risco contido no curto prazo.
CVE-2020-26264MEDIUMLES Server DoS via GetProofsV2EPSS 1.9%CVE-2020-26240MEDIUMErroneous Proof of Work calculation in gethEPSS 1.6%CVE-2020-26242MEDIUMDenial of service in gethEPSS 1.5%CVE-2021-39137MEDIUMConsensus flaw during block processing in go-ethereumEPSS 1.3%CVE-2021-41173MEDIUMDoS via maliciously crafted p2p messageEPSS 1.2%CVE-2020-26241MEDIUMShallow copy bug in gethEPSS 1.1%CVE-2023-40591HIGHDenial of service via malicious p2p message in go-ethereumEPSS 1.0%CVE-2022-29177MEDIUMDoS via malicious p2p message in Go-EthereumEPSS 1.0%CVE-2020-26265MEDIUMConsensus flaw during block processingEPSS 0.9%CVE-2024-32972HIGHgo-ethereum denial of service via malicious p2p messageEPSS 0.8%CVE-2025-24883HIGHgo-ethereum has a DoS via malicious p2p messageEPSS 0.7%CVE-2026-22862HIGHgo-ethereum has a DoS via malicious p2p messageEPSS 0.6%CVE-2026-26314HIGHGo Ethereum affected by DoS via malicious p2p messageEPSS 0.6%CVE-2026-26313MEDIUMGo Ethereum affected by DoS via malicious p2p messageEPSS 0.6%CVE-2026-22868HIGHgo-ethereum has a DoS via malicious p2p messageEPSS 0.6%CVE-2026-26315MEDIUMGo Ethereum Improperly Validates the ECIES Public Key in RLPx HandshakeEPSS 0.4%CVE-2026-40072LOWweb3.py affected by SSRF via CCIP Read (EIP-3668) OffchainLookup URL handlingEPSS 0.2%CVE-2015-20112LOWRLPx 5 has two CTR streams based on the same key, IV, and nonce. This can facilitate decryption on a private network.EPSS 0.1%