WE
Vendor
Wesnoth
10
CVEs
0
On KEV
0
New 30D
Products
WE–
Wesnoth
Wesnoth
6 CVEs0 on KEV0 new
BF4.3
Battle For Wesnoth
Wesnoth
3 CVEs0 on KEV0 new
TB8.8
The Battle For Wesnoth
Wesnoth
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2018-1999023 | TB The Battle For Wesnoth Wesnoth | 8.8 | Jul 23 | The Battle for Wesnoth Project version 1.7.0 through 1.14.3 contains a Code Injection vulnerability in the Lua scripting engine that can result in code execution outside the… |
| CVE-2015-5070 | BF Battle For Wesnoth Wesnoth | 3.1 | Sep 26 | The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnoth before 1.12.4 and 1.13.x before… |
| CVE-2015-5069 | BF Battle For Wesnoth Wesnoth | 4.3 | Sep 26 | The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnoth before 1.12.3 and 1.13.x before 1.13.1… |
| CVE-2015-0844 | BF Battle For Wesnoth Wesnoth | – | Apr 14 | The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted (1) campaign or (2) map file |
| CVE-2009-0878 | WE Wesnoth Wesnoth | – | Mar 12 | The read_game_map function in src/terrain_translation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service (memory consumption and daemon hang) via a… |
| CVE-2009-0366 | WE Wesnoth Wesnoth | – | Mar 12 | The uncompress_buffer function in src/server/simple_wml.cpp in Wesnoth before r33069 allows remote attackers to cause a denial of service via a large compressed WML document |
| CVE-2009-0367 | WE Wesnoth Wesnoth | – | Mar 5 | The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an… |
| CVE-2007-6201 | WE Wesnoth Wesnoth | – | Dec 1 | Unspecified vulnerability in Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows attackers to cause a denial of service (hang) via a "faulty add-on" and possibly execute… |
| CVE-2007-5742 | WE Wesnoth Wesnoth | – | Dec 1 | Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attackers to read arbitrary files via ".."… |
| CVE-2007-3917 | WE Wesnoth Wesnoth | – | Oct 11 | The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of service (crash) via a long message with multibyte characters… |