Vulnerabilities > Flightgear > Flightgear > 2016.4.2

DATE CVE VULNERABILITY TITLE RISK
2017-05-12 CVE-2017-8921 Path Traversal vulnerability in Flightgear
In FlightGear before 2017.2.1, the FGCommand interface allows overwriting any file the user has write access to, but not with arbitrary data: only with the contents of a FlightGear flightplan (XML).
network
low complexity
flightgear CWE-22
5.0
2017-02-22 CVE-2016-9956 Improper Access Control vulnerability in multiple products
The route manager in FlightGear before 2016.4.4 allows remote attackers to write to arbitrary files via a crafted Nasal script.
network
low complexity
debian fedoraproject flightgear CWE-284
7.5