Vulnerabilities (CVE)

Filtered by vendor X-plane Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-19605 1 X-plane 1 X-plane 2023-12-10 7.5 HIGH 9.8 CRITICAL
X-Plane before 11.41 allows Arbitrary Memory Write via crafted network packets, which could cause a denial of service or arbitrary code execution.
CVE-2019-19606 1 X-plane 1 X-plane 2023-12-10 10.0 HIGH 9.8 CRITICAL
X-Plane before 11.41 has multiple improper path validations that could allow reading and writing files from/to arbitrary paths (or a leak of OS credentials to a remote system) via crafted network packets. This could be used to execute arbitrary commands on the system.