Lucene search
+L

86 matches found

RedhatCVE
RedhatCVE
added 2019/10/04 9:11 p.m.12 views

CVE-2009-0366

The uncompressbuffer function in src/server/simplewml.cpp in Wesnoth before r33069 allows remote attackers to cause a denial of service via a large compressed WML document...

4.3CVSS6.7AI score0.01957EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2017/09/26 2:29 p.m.3 views

CVE-2015-5070

The 1 filesystem::getwmllocation function in filesystem.cpp and 2 islegalfile function in filesystemboost.cpp in Battle for Wesnoth before 1.12.4 and 1.13.x before 1.13.1, when a case-insensitive filesystem is used, allow remote attackers to obtain sensitive information via vectors related to...

4.3CVSS5.6AI score0.01715EPSS
Exploits0References11
ATTACKERKB
ATTACKERKB
added 2017/09/26 2:29 p.m.2 views

CVE-2015-5069

The 1 filesystem::getwmllocation function in filesystem.cpp and 2 islegalfile function in filesystemboost.cpp in Battle for Wesnoth before 1.12.3 and 1.13.x before 1.13.1 allow remote attackers to obtain sensitive information via vectors related to inclusion of .pbl files from WML...

4.3CVSS5.5AI score0.01715EPSS
Exploits0References11
NVD
NVD
added 2017/09/26 2:29 p.m.15 views

CVE-2015-5069

The 1 filesystem::getwmllocation function in filesystem.cpp and 2 islegalfile function in filesystemboost.cpp in Battle for Wesnoth before 1.12.3 and 1.13.x before 1.13.1 allow remote attackers to obtain sensitive information via vectors related to inclusion of .pbl files from WML...

4.3CVSS4AI score0.01715EPSS
Exploits0References9
Prion
Prion
added 2017/09/26 2:29 p.m.19 views

Design/Logic Flaw

The 1 filesystem::getwmllocation function in filesystem.cpp and 2 islegalfile function in filesystemboost.cpp in Battle for Wesnoth before 1.12.4 and 1.13.x before 1.13.1, when a case-insensitive filesystem is used, allow remote attackers to obtain sensitive information via vectors related to...

3.5CVSS4.5AI score0.01715EPSS
Exploits0References9Affected Software2
UbuntuCve
UbuntuCve
added 2017/09/26 2:29 p.m.21 views

CVE-2015-5070

The 1 filesystem::getwmllocation function in filesystem.cpp and 2 islegalfile function in filesystemboost.cpp in Battle for Wesnoth before 1.12.4 and 1.13.x before 1.13.1, when a case-insensitive filesystem is used, allow remote attackers to obtain sensitive information via vectors related to...

3.5CVSS5.9AI score0.01384EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2017/09/26 2:0 p.m.35 views

CVE-2015-5069

Removed by vendor...

4.3CVSS4.8AI score0.01715EPSS
Exploits0
CVE
CVE
added 2017/09/26 2:0 p.m.65 views

CVE-2015-5069

CVE-2015-5069 pertains to the Battle for Wesnoth game. The vulnerability affects versions prior to 1.12.3 and 1.13.x prior to 1.13.1, where two functions (filesystem::get_wml_location in filesystem.cpp and is_legal_file in filesystem_boost.cpp) could allow remote attackers to exfiltrate sensitive...

4.3CVSS3.9AI score0.01715EPSS
Exploits0References9Affected Software1
CVE
CVE
added 2017/09/26 2:0 p.m.71 views

CVE-2015-5070

The CVE-2015-5070 entry concerns Battle for Wesnoth prior to 1.12.4 and 1.13.x before 1.13.1, where the functions filesystem::get_wml_location (filesystem.cpp) and is_legal_file (filesystem_boost.cpp) on case-insensitive filesystems could disclose sensitive information via vectors related to .pbl...

3.5CVSS4AI score0.01384EPSS
Exploits0References9Affected Software1
OSV
OSV
added 2015/04/15 9:1 a.m.7 views

MGASA-2015-0154 Updated wesnoth packages fix CVE-2015-0844

Updated wesnoth packages fix security vulnerability A severe security vulnerability in Battle of Wesnoth's game client was found which could allow a malicious user to obtain personal files and information from other players in networked multiplayer games using the built-in WML/Lua API on any...

5CVSS6.2AI score0.02322EPSS
Exploits0References4
Mageia
Mageia
added 2015/04/15 9:1 a.m.24 views

Updated wesnoth packages fix CVE-2015-0844

Updated wesnoth packages fix security vulnerability A severe security vulnerability in Battle of Wesnoth's game client was found which could allow a malicious user to obtain personal files and information from other players in networked multiplayer games using the built-in WML/Lua API on any...

5CVSS6AI score0.02322EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2015/04/14 6:59 p.m.23 views

CVE-2015-0844

The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted 1 campaign or 2 map file...

5CVSS6AI score0.02322EPSS
Exploits0References2
Prion
Prion
added 2015/04/14 6:59 p.m.13 views

Design/Logic Flaw

The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted 1 campaign or 2 map file...

5CVSS7AI score0.02322EPSS
Exploits0References6Affected Software2
Cvelist
Cvelist
added 2015/04/14 6:0 p.m.21 views

CVE-2015-0844

The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted 1 campaign or 2 map file...

6.3AI score0.02322EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2015/04/14 6:0 p.m.54 views

CVE-2015-0844

Removed by vendor...

5CVSS6.6AI score0.02322EPSS
Exploits0
CVE
CVE
added 2015/04/14 6:0 p.m.86 views

CVE-2015-0844

CVE-2015-0844 affects Battle for Wesnoth 1.7.x–1.11.x and 1.12.x before 1.12.2, where the WML/Lua API allows remote attackers to read arbitrary files via a crafted campaign or map file. The vulnerability arises from insufficient validation in the API, enabling file disclosure through malicious co...

5CVSS6.4AI score0.02322EPSS
Exploits0References6Affected Software1
FreeBSD
FreeBSD
added 2015/04/11 12:0 a.m.22 views

Wesnoth -- Remote information disclosure

US-CERT/NIST reports: The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted 1 campaign or 2 map file...

5CVSS6.4AI score0.02322EPSS
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.17 views

TalentSoft Web+ Client/Monitor/server 4.6 Source Code Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1722/info Talentsoft Web+ is a web application server that can be integrated with various web technologies. Web+ can be used to display the source code of WML files residing on an NTFS parition by appending certain data t...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2012/09/08 12:0 a.m.27 views

WAP Proof 2008 - Denial of Service

Description : WAP Proof is an universal emulator of a WAP browser for Microsoft Windows. It is designed for the preview and debugging of mobile websites and provide support for WML, XHTML, cHTML and HTML pages and a compatible GSM modems, such as Wavecom, Alcatel, Motorola, Nokia, Siemens, Sagem,...

7.4AI score
Exploits0
OpenVAS
OpenVAS
added 2010/12/27 12:0 a.m.32 views

Opera Browser Multiple Vulnerabilities December-10 (Windows)

The host is installed with Opera browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gboperamultvulnwindec10.nasl 5323 2017-02-17 08:49:23Z teissa $ Opera Browser Multiple Vulnerabilities December-10 Windows Authors: Madhuri D Copyright: Copyright c 2010 Greenbone...

10CVSS1.1AI score0.02318EPSS
Exploits0References3
Rows per page
Query Builder