Skip to content
OpenAdvisories

Archive

30 April 2019

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • High 7.5

    Path Traversal in Apache Camel

    Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x (2.19 and earlier) versions may be also affected.

  • High 7.5

    Improper Input Validation in tar-fs

    A vulnerability was found in tar-fs before 1.16.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink.…

  • High 7.5

    Arbitrary File Overwrite in tar

    A vulnerability was found in node-tar before version 4.4.2 (excluding version 2.2.2). An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file …

  • High 7.5
    CVE-2019-9621 Exploited Public exploit Scanner template EPSS 81%

    Zimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x …

    KEV Jul 7, 2025
  • High 7.4
    CVE-2019-5624 Public exploit

    Rapid7 Metasploit Framework Zip Import Directory Traversal

    Rapid7 Metasploit Framework suffers from an instance of CWE-22, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the Zip import function of Metasploit. Exploiting this vulnerability can allow an attacker to execute arbitrary c…

  • High 7.4

    IBM StoredIQ 7.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuadin…

  • High 8.8

    Jenkins Ansible Tower Plugin missing permission check

    A missing permission check in Jenkins Ansible Tower Plugin 0.9.1 and earlier in the TowerInstallation.TowerInstallationDescriptor#doTestTowerConnection form validation method allowed attackers with Overall/Read permission to connect to an attacker-specified U…