1527 matches found
Linux Distros Unpatched Vulnerability : CVE-2022-25844
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package angular after 1.7.0 are vulnerable to Regular Expression Denial of Service ReDoS by providing a custom locale rule that makes it possible to assign...
SUSE-SU-2025:20597-1 Security update for systemd
This update for systemd fixes the following issues: - Remove the script used to help migrating the language and locale settings located in /etc/sysconfig/language on old systems to the systemd default locations bsc1247074 The script was introduced more than 7 years ago and all systems running TW...
Malicious code in locale-dev-cdbs (npm)
The package locale-dev-cdbs was found to contain malicious code...
Malicious code in translation_locale_yml_updater (npm)
The package translationlocaleymlupdater was found to contain malicious code...
MAL-2025-25488 Malicious code in locale-dev-cdbs (npm)
The package locale-dev-cdbs was found to contain malicious code...
@intlify/cli (>=0.9.0, <=0.11.3), @sfxcode/formkit-primevue (>=2.5.4, <=2.7.0) +5 more potentially affected by CVE-2025-53892 via @intlify/core (>=9.3.0-beta.27, <=9.14.1)
@intlify/core NPM version =9.3.0-beta.27, =0.9.0, =2.5.4, =2.14.1, =1.9.0, =1.16.0 - we-i18n 0.1.1 Source cves: CVE-2025-53892 Source advisory: MEND:CVE-2025-53892...
Malicious code in @isfront/locale (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a70aa8c59bc393d5df205527b22e5db54e16ea4c7e36278003fdce1ab03b9c0e The OpenSSF Package Analysis project identified '@isfront/locale' @...
libarchive: Buffer Overflow vulnerability in libarchive
A flaw was found in the libarchive package. Affected versions of libarchive do not check a strftime return value, which can lead to a denial of service or unspecified other impacts via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be...
Convoy security vulnerability
Convoy is Convoy Open Source a modern platform tailored for hosting providers and enthusiasts. A security vulnerability exists in Convoy versions prior to 4.4.1 that stems from a directory traversal vulnerability in the LocaleController component...
CVE-2025-49132
Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. With the ability to execute arbitrary code it...
Pterodactyl Panel Code Injection Vulnerability
Pterodactyl Panel is a free open source game server administration panel from Pterodactyl Open Source. A code injection vulnerability exists in Pterodactyl Panel versions prior to 1.11.11, which stems from the /locales/locale.json endpoint that does not validate the locale and namespace parameter...
Arbitrary Code Injection
Overview pterodactyl/panel is a game management panel. Affected versions of this package are vulnerable to Arbitrary Code Injection via the /locales/locale.json endpoint when processing the locale and namespace query parameters. An attacker can execute arbitrary code on the server by sending...
VulnCheck KEV: CVE-2025-49132
Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. With the ability to execute arbitrary code it...
[SECURITY] Fedora 41 Update: mingw-icu-74.2-4.fc41
ICU is a set of C and C++ libraries that provides robust and full-featured Unicode and locale support. The library provides calendar support, conversions for many character sets, language sensitive collation, date and time formatting, support for many locales, message catalogs and resources,...
[SECURITY] Fedora 42 Update: mingw-icu-76.1-3.fc42
ICU is a set of C and C++ libraries that provides robust and full-featured Unicode and locale support. The library provides calendar support, conversions for many character sets, language sensitive collation, date and time formatting, support for many locales, message catalogs and resources,...
CVE-2023-29562
TP-Link TL-WPA7510 EUV2190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale...
CVE-2022-20473
In toLanguageTag of LocaleListCache.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-1...
CVE-2022-20249
In LocaleManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...