Devscripts (Devscripts Devel Team) - vulnerabilities (CVEs)
14 CVEs, 0 in the last 30 days, 109 known versions, newest CVE from 2017-09-25. Vendor: Devscripts Devel Team.
CVEs of Devscripts
- CVE-2015-5704 - CVSS 7.8 (high), 2017-09-25: scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands.
- CVE-2015-5705 - CVSS 7.5 (high), 2017-09-06: Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.
- CVE-2014-1833 - CVSS 5 (medium), 2014-02-05: Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via a crafted .orig.tar file, related to a…
- CVE-2013-6888 - CVSS 7.5 (high), 2014-01-07: Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.
- CVE-2013-7085 - CVSS 5.8 (medium), 2013-12-14: Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in a filename.
- CVE-2013-7050 - CVSS 6.8 (medium), 2013-12-13: The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary…
- CVE-2012-2241 - CVSS 5 (medium), 2012-10-01: scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, probably related to…
- CVE-2012-2240 - CVSS 7.5 (high), 2012-10-01: scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments to…
- CVE-2012-3500 - CVSS 1.2 (low), 2012-10-01: scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack…
- CVE-2012-2242 - CVSS 6.8 (medium), 2012-10-01: scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .dsc or (2) .changes file, related to…
- CVE-2012-0211 - CVSS 9.3 (critical), 2012-06-16: debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in…
- CVE-2012-0210 - CVSS 9.3 (critical), 2012-06-16: debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arbitrary code via…
- CVE-2012-0212 - CVSS 9.3 (critical), 2012-06-16: debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file…
- CVE-2009-2946 - CVSS 9.3 (critical), 2009-09-04: Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on…
