134305 matches found
CVE-2026-84939
Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled it's by default enabled. This issue affects Apache FreeMarker from 2.2.0...
CVE-2026-84939
Apache FreeMarker versions 2.2.0 through 2.3.34 are vulnerable to a path traversal vulnerability in the template loading mechanism. This flaw occurs when an attacker provides a specially crafted, malformed locale identifier while the localized lookup configuration setting is enabled (which is the...
CVE-2026-84939
Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled it's by default enabled. This issue affects Apache FreeMarker from 2.2.0...
EUVD-2026-75251
Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled it's by default enabled. This issue affects Apache FreeMarker from 2.2.0...
CVE-2026-84939 Apache FreeMarker, Apache FreeMarker: A malformed locale may be exploitable for path traversal attacks
Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled it's by default enabled. This issue affects Apache FreeMarker from 2.2.0...
CVE-2026-84939
Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled it's by default enabled. This issue affects Apache FreeMarker from 2.2.0...
CVE-2026-18386
The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.0 via the 'backupfile' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of...
CVE-2026-15019
The Direct Download for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.19 via the top-level include function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contai...
EUVD-2026-75243
The Direct Download for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.19 via the top-level include function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contai...
CVE-2026-15019 Direct Download for WooCommerce <= 1.19 - Unauthenticated Arbitrary File Read via 'file_id' Path Segment
The Direct Download for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.19 via the top-level include function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contai...
CVE-2026-15019 Direct Download for WooCommerce <= 1.19 - Unauthenticated Arbitrary File Read via 'file_id' Path Segment
The Direct Download for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.19 via the top-level include function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contai...
CVE-2026-15019
Direct Download for WooCommerce (WordPress plugin) is vulnerable to directory traversal via the file_id path segment in the top-level include function, affecting all versions up to and including 1.19 . The root cause is that the product ownership check only verifies that some free, virtual, downl...
EUVD-2026-75237
The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.0 via the 'backupfile' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of...
CVE-2026-18386 WP BackItUp Community Edition <= 2.1.0 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'backup_file' Parameter
The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.0 via the 'backupfile' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of...
CVE-2026-18386
The WP BackItUp Community Edition WordPress plugin (all versions up to and including 2.1.0 ) is vulnerable to directory traversal via the backup_file parameter in its download handler. The root cause is that the basename() normalization only executes when the traversed target path does not exist,...
CLEANSTART-2026-FD87409 Previously, resolving relative paths containing parent directory ('
Multiple security vulnerabilities affect the nats-streaming package. Previously, resolving relative paths containing parent directory '. See references for individual vulnerability details...
CLEANSTART-2026-OB24504 Previously, resolving relative paths containing parent directory ('
Multiple security vulnerabilities affect the kube-state-metrics package. Previously, resolving relative paths containing parent directory '. See references for individual vulnerability details...
SUSE CVE-2026-86251
h3 versions before 1.15.9 contain a path traversal vulnerability in the serveStatic utility. A double-decoding flaw allows a request path containing double-encoded dot sequences e.g. %252e%252e to be decoded to %2e%2e, which survives resolveDotSegments because that function only checks for litera...
SUSE CVE-2026-86253
h3 npm package versions = 2.0.1-rc.14 contain a path traversal vulnerability in serveStatic. On Node.js deployments, event.url.pathname is not normalized, so percent-encoded dot segments %2e%2e are passed to decodeURI and decoded to ../ sequences without sanitization. An unauthenticated remote...
CLEANSTART-2026-TQ20886 Previously, resolving relative paths containing parent directory ('
Multiple security vulnerabilities affect the helm package. Previously, resolving relative paths containing parent directory '. See references for individual vulnerability details...