Openarena

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Openarena records in CISA KEV

No Openarena vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Openarena 3 records MEDIUM

Records

3 records in Openarena · all components

TI-2011-02423 CVE-2011-2764 · GHSA-2qjf-gm4f-4hxc

The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine…

MEDIUM 54

The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin' Guns, OpenArena, Tremulous, and ioUrbanTerror, does not properly determine dang…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.0869 Published 2011-08-04 No fix listed CWE-20

TI-2011-01236 CVE-2011-1412 · GHSA-9jhf-c2r9-9vhh

sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x…

MEDIUM 40

sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary commands via shell metacharact…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04212 Published 2011-08-04 No fix listed CWE-20

TI-2010-04800 CVE-2010-5077 · GHSA-hm3f-28vq-g8gm

server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous…

LOW 38

server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a denial of service (network traffic amplification) via a spoofed (1) getstat…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0211 Published 2014-10-27 No fix listed CWE-20

Open these records in search →

Critical	1
High	2
Medium	0
Low	0
No CVSS	0