Skip to content
OpenAdvisories

Archive

4 July 2019

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2019-13294 Public exploit EPSS 19%

    AROX School-ERP Pro has a command execution vulnerability. import_stud.php and upload_fille.php do not have session con…

  • Unscored —
    CVE-2019-13292 Public exploit

    A SQL Injection issue was discovered in webERP 4.15. Payments.php accepts payment data in base64 format. After this is …

  • Unscored —
    CVE-2019-13288 Public exploit

    In Xpdf 4.01.01, the Parser::getObj() function in Parser.cc may cause infinite recursion via a crafted file. A remote a…