Vulnerabilities > Flightgear

DATE CVE VULNERABILITY TITLE RISK
2017-08-27 CVE-2017-13709 Improper Input Validation vulnerability in Flightgear 2017.2.1
In FlightGear before version 2017.3.1, Main/logger.cxx in the FGLogger subsystem allows one to overwrite any file via a resource that affects the contents of the global Property Tree.
network
low complexity
flightgear CWE-20
7.5
2017-05-12 CVE-2017-8921 Path Traversal vulnerability in Flightgear
In FlightGear before 2017.2.1, the FGCommand interface allows overwriting any file the user has write access to, but not with arbitrary data: only with the contents of a FlightGear flightplan (XML).
network
low complexity
flightgear CWE-22
7.5
2017-02-22 CVE-2016-9956 Improper Access Control vulnerability in multiple products
The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.
network
low complexity
debian fedoraproject flightgear CWE-284
7.5