Known Vulnerabilities for products from Wesnoth
Listed below are 10 of the newest known vulnerabilities associated with the vendor "Wesnoth".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2018-1999023 json | The Battle for Wesnoth Project version 1.7.0 through 1.14.3 contains a Code Injection vulnerability in the Lua scripting engi... | 8.8 - HIGH | 2018-07-23 | 2018-09-20 |
| CVE-2015-5070 json | The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Bat... | 3.1 - LOW | 2017-09-26 | 2017-10-10 |
| CVE-2015-5069 json | The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Bat... | 4.3 - MEDIUM | 2017-09-26 | 2017-10-10 |
| CVE-2015-0844 json | The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary... | Not Provided | 2015-04-14 | 2026-05-06 |
| CVE-2009-0878 json | The read_game_map function in src/terrain_translation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial ... | Not Provided | 2009-03-12 | 2026-04-23 |
| CVE-2009-0367 json | The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitra... | Not Provided | 2009-03-05 | 2026-04-23 |
| CVE-2009-0366 json | The uncompress_buffer function in src/server/simple_wml.cpp in Wesnoth before r33069 allows remote attackers to cause a denia... | Not Provided | 2009-03-12 | 2026-04-23 |
| CVE-2007-6201 json | Unspecified vulnerability in Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows attackers to cause a denial of servi... | Not Provided | 2007-12-01 | 2026-04-23 |
| CVE-2007-5742 json | Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, all... | Not Provided | 2007-12-01 | 2026-04-23 |
| CVE-2007-3917 json | The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of servic... | Not Provided | 2007-10-11 | 2026-04-23 |
Known software with vulnerabilities from Wesnoth
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Wesnoth | Battle For Wesnoth | 1.10.0 |
| Application | Wesnoth | The Battle For Wesnoth | 0.4.8 |