Skip to content
OpenAdvisories

Archive

14 December 2018

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Unscored —
    CVE-2018-20148 Public exploit EPSS 27%

    In WordPress before 4.9.9 and 5.x before 5.0.1, contributors could conduct PHP object injection attacks via crafted met…

  • Medium 5.9
    CVE-2018-16875 Public exploit

    Denial of service in chain verification in crypto/x509

    The crypto/x509 package of Go before 1.10.6 and 1.11.x before 1.11.3 does not limit the amount of work performed for each chain verification, which might allow attackers to craft pathological inputs leading to a CPU denial of service. Go TLS servers accepting…