Skip to content
OpenAdvisories

Archive

4 December 2019

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2019-19576 Public exploit EPSS 26%

    Remote code execution in verot/class.upload.php

    class.upload.php in verot.net class.upload before 1.0.3 and 2.x before 2.0.4, as used in the K2 extension for Joomla! and other products, omits .phar from the set of dangerous file extensions.