Skip to content
OpenAdvisories

Archive

7 February 2018

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Unscored —
    CVE-2017-15394 Public exploit

    Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perfo…

  • Unscored —
    CVE-2017-5124 Public exploit

    Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject…

  • Unscored —
    CVE-2018-6574 Public exploit

    Remote command execution via "go get" command with cgo in cmd/go

    Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get" remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked.

  • Unscored —
    CVE-2018-6794 Public exploit EPSS 24%

    Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. If a malicious s…

  • Unscored —
    CVE-2018-6791 Public exploit

    An issue was discovered in soliduiserver/deviceserviceaction.cpp in KDE Plasma Workspace before 5.12.0. When a vfat thu…