wesnoth records
10 published records for vendor wesnoth.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 2
- With a fix record
- 90%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor3
- CWE-399 Resource Management Errors2
- CWE-134 Use of Externally-Controlled Format String1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
10 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2009-0367Proof of concept | The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by usinwesnoth · wesnoth · CWE-264 | Critical9.3 | — | 10.9% | Mar 4, 2009 |
37Monitor | CVE-2007-5742No exploit | Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attawesnoth · wesnoth · CWE-22 | Critical9.0 | — | 2.8% | Dec 1, 2007 |
36Monitor | CVE-2018-1999023No exploit | The Battle for Wesnoth Project version 1.7.0 through 1.14.3 contains a Code Injection vulnerability in the Lua scripting engine that can reswesnoth · the battle for wesnoth · CWE-94 | High8.8 | — | 1.7% | Jul 23, 2018 |
32Monitor | CVE-2007-3917No exploit | The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of service (crash) via awesnoth · wesnoth · CWE-134 | High7.8 | — | 2.1% | Oct 11, 2007 |
30Monitor | CVE-2007-6201No exploit | Unspecified vulnerability in Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows attackers to cause a denial of service (hang) via awesnoth · wesnoth | High7.5 | — | 1.4% | Dec 1, 2007 |
21Monitor | CVE-2015-0844No exploit | The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crwesnoth · battle for wesnoth · CWE-200 | Medium5.0 | — | 2.3% | Apr 14, 2015 |
21Monitor | CVE-2009-0878No exploit | The read_game_map function in src/terrain_translation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service (memwesnoth · wesnoth · CWE-399 | Medium5.0 | — | 1.7% | Mar 12, 2009 |
18Monitor | CVE-2009-0366No exploit | The uncompress_buffer function in src/server/simple_wml.cpp in Wesnoth before r33069 allows remote attackers to cause a denial of service viwesnoth · wesnoth · CWE-399 | Medium4.3 | — | 1.9% | Mar 12, 2009 |
18Monitor | CVE-2015-5069No exploit | The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnothwesnoth · battle for wesnoth · CWE-200 | Medium4.3 | — | 1.7% | Sep 26, 2017 |
12Monitor | CVE-2015-5070No exploit | The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnothwesnoth · battle for wesnoth · CWE-200 | Low3.1 | — | 1.3% | Sep 26, 2017 |
- CVE-2009-036740Plan
The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by usin
CriticalCVSS 9.3Proof of conceptEPSS 10%wesnoth · wesnothMar 4, 2009
- CVE-2007-574237Monitor
Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote atta
CriticalCVSS 9.0No exploitEPSS 2%wesnoth · wesnothDec 1, 2007
- CVE-2018-199902336Monitor
The Battle for Wesnoth Project version 1.7.0 through 1.14.3 contains a Code Injection vulnerability in the Lua scripting engine that can res
HighCVSS 8.8No exploitEPSS 1%wesnoth · the battle for wesnothJul 23, 2018
- CVE-2007-391732Monitor
The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of service (crash) via a
HighCVSS 7.8No exploitEPSS 2%wesnoth · wesnothOct 11, 2007
- CVE-2007-620130Monitor
Unspecified vulnerability in Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows attackers to cause a denial of service (hang) via a
HighCVSS 7.5No exploitEPSS 1%wesnoth · wesnothDec 1, 2007
- CVE-2015-084421Monitor
The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a cr
MediumCVSS 5.0No exploitEPSS 2%wesnoth · battle for wesnothApr 14, 2015
- CVE-2009-087821Monitor
The read_game_map function in src/terrain_translation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service (mem
MediumCVSS 5.0No exploitEPSS 1%wesnoth · wesnothMar 12, 2009
- CVE-2009-036618Monitor
The uncompress_buffer function in src/server/simple_wml.cpp in Wesnoth before r33069 allows remote attackers to cause a denial of service vi
MediumCVSS 4.3No exploitEPSS 1%wesnoth · wesnothMar 12, 2009
- CVE-2015-506918Monitor
The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnoth
MediumCVSS 4.3No exploitEPSS 1%wesnoth · battle for wesnothSep 26, 2017
- CVE-2015-507012Monitor
The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnoth
LowCVSS 3.1No exploitEPSS 1%wesnoth · battle for wesnothSep 26, 2017