1518 matches found
PT-2026-91861
Name of the Vulnerable Software and Affected Versions moment versions 2.29.2 through 2.30.1 Description A path-traversal issue exists when a specially crafted non-string object is passed to the moment.locale function. The internal guard assumes the input is a string; however, an object with a mat...
Astra Linux – Vulnerability in python-babel
In Babel.Locale before version 2.9.1, attackers could load arbitrary locale .dat files containing serialized Python objects through directory traversal, resulting in code execution...
Linux Distros Unpatched Vulnerability : CVE-2026-84939
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker...
Relative Path Traversal
Overview Affected versions of this package are vulnerable to Relative Path Traversal through the ClassTemplateLoader and WebappTemplateLoader template-loading paths. An attacker can force loading of templates outside the intended base package or webapp subdirectory by supplying a malformed locale...
Relative Path Traversal
Overview org.freemarker:freemarker is a "template engine"; a generic tool to generate text output anything from HTML to auto generated source code based on templates. Affected versions of this package are vulnerable to Relative Path Traversal through the ClassTemplateLoader and WebappTemplateLoad...
GHSA-27J2-H3M2-8237 Apache FreeMarker template loading mechanism vulnerable to path traversal
Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled it's by default enabled. This issue affects Apache FreeMarker from 2.2.0...
CVE-2026-84939
Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled it's by default enabled. This issue affects Apache FreeMarker from 2.2.0...
DEBIAN-CVE-2026-84939
Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled it's by default enabled. This issue affects Apache FreeMarker from 2.2.0...
CVE-2026-84939
Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled it's by default enabled. This issue affects Apache FreeMarker from 2.2.0...
UBUNTU-CVE-2026-84939
Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled it's by default enabled. This issue affects Apache FreeMarker from 2.2.0...
CVE-2026-84939 Apache FreeMarker, Apache FreeMarker: A malformed locale may be exploitable for path traversal attacks
Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled it's by default enabled. This issue affects Apache FreeMarker from 2.2.0...
EUVD-2026-75251
Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled it's by default enabled. This issue affects Apache FreeMarker from 2.2.0...
CVE-2026-84939
Apache FreeMarker versions 2.2.0 through 2.3.34 are vulnerable to a path traversal vulnerability in the template loading mechanism. This flaw occurs when an attacker provides a specially crafted, malformed locale identifier while the localized lookup configuration setting is enabled (which is the...
CVE-2026-84939
Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled it's by default enabled. This issue affects Apache FreeMarker from 2.2.0...
PT-2026-89279
Name of the Vulnerable Software and Affected Versions Apache FreeMarker versions 2.2.0 through 2.3.34 Description A path traversal issue exists in the template loading mechanism when the localized lookup configuration setting is enabled. An attacker can exploit this by providing a malformed local...
glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
A flaw was found in GLib. An off-by-one error can occur in the gkeyfilegetlocalestringlist function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundar...
CVE-2026-73635
A flaw was found in Apache Struts. An unauthenticated remote client can exploit a vulnerability where the framework's localized-text caches grow without bound. This occurs when no fixed locale is configured, and the locale for text lookups is derived from the incoming request. This can lead to th...
MGASA-2026-0360 Updated perl-HTML-FormHandler packages fix a security vulnerability
HTML::FormHandler versions through 0.40068 for Perl allow attacker selected method dispatch and resource exhaustion because applyactions and adderror use error message text built from request data as a Locale::Maketext bracket notation template...
Updated perl-HTML-FormHandler packages fix a security vulnerability
HTML::FormHandler versions through 0.40068 for Perl allow attacker selected method dispatch and resource exhaustion because applyactions and adderror use error message text built from request data as a Locale::Maketext bracket notation template...
PT-2026-89830
HTML::FormHandler versions through 0.40068 for Perl allow attacker selected method dispatch and resource exhaustion because apply actions and add error use error message text built from request data as a Locale::Maketext bracket notation template...