78 matches found
CVE-2022-35978
Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...
CVE-2022-35978
CVE-2022-35978 (Minetest) affects Minetest prior to patched releases. In single-player mode, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is loaded as soon as the game session ends, and the Lua environment for the menu is not sandboxed, a...
Minetest 安全漏洞
Minetest is a free open source voxel game engine by The Minetest Team team. It is used for module and game creation. A security vulnerability exists in Minetest 5.5.1 and earlier versions, which originates in single player, where a module can set a global setting to control a Lua script that is...
PT-2022-23076 · Minetest +2 · Minetest +2
Name of the Vulnerable Software and Affected Versions: Minetest versions prior to 5.6.1 Description: The issue concerns a security vulnerability in Minetest, a free open-source voxel game engine, where a mod in single-player mode can set a global setting to control the Lua script loaded for the...
Debian: Security Advisory (DSA-5075-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-5075-1 : minetest - security update
The remote Debian 10 / 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5075 advisory. Several vulnerabilities have been discovered in Minetest, a sandbox video game and game creation system. These issues may allow attackers to manipulate game...
[SECURITY] [DSA 5075-1] minetest security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5075-1 [email protected] https://www.debian.org/security/ Markus Koschany February 14, 2022 https://www.debian.org/security/faq -...
Injection Vulnerability
Minetest is vulnerable to injection vulnerability. An attacker is able to exploit the vulnerability by adding or modifying arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection...
Insecure Access
Minetest is vulnerable to insecure access. The vulnerability exists due to a lack of validation allowing an attacker to add or subtract items from a different player's inventory...
CVE-2022-24300
Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection...
CVE-2022-24301
In Minetest before 5.4.0, players can add or subtract items from a different player's inventory...
CVE-2022-24301
In Minetest before 5.4.0, players can add or subtract items from a different player's inventory...
DEBIAN-CVE-2022-24300
Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection...
DEBIAN-CVE-2022-24301
In Minetest before 5.4.0, players can add or subtract items from a different player's inventory...
CVE-2022-24300
Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection...
Design/Logic Flaw
In Minetest before 5.4.0, players can add or subtract items from a different player's inventory...
CVE-2022-24301
In Minetest before 5.4.0, players can add or subtract items from a different player's inventory...
CVE-2022-24300
Minetest before 5.4.0 allows attackers to add or modify arbitrary meta fields of the same item stack as saved user input, aka ItemStack meta injection...