2019-07-03

2019-07-04

2019-07-05

All (3) Critical (3) High (33) Medium (10) Low (1)

CVE-2019-13294 Jul 04, 23:15 CRITICAL POC THREAT Act Now

AROX School-ERP Pro has a command execution vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Authentication Bypass School Erp Arox

NVD Exploit-DB

CVSS 3.0

9.8

EPSS

18.8%

CVE-2019-13292 Jul 04, 22:15 CRITICAL POC Act Now

A SQL Injection issue was discovered in webERP 4.15. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Weberp

NVD Exploit-DB

CVSS 3.0

9.8

EPSS

6.5%

CVE-2019-13275 Jul 04, 19:15 CRITICAL POC PATCH Act Now

An issue was discovered in the VeronaLabs wp-statistics plugin before 12.6.7 for WordPress. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

WordPress SQLi Wp Statistics Wordpress Plugin Veronalabs

NVD GitHub

CVSS 3.0

9.8

EPSS

2.6%