Devscripts Devel Team Devscripts vulnerabilities
13 vulnerabilities
Known vulnerabilities in Devscripts Devel Team Devscripts, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2013-7085debiandevscripts+1
EPSS score2.46%
Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in a filename.CVE-2013-7050debiandevscripts+1EPSS score1.90%
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.CVE-2013-6888debiandevscripts+1EPSS score4.09%
Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.CVE-2015-5705debiandevscripts+2EPSS score3.12%
Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.CVE-2015-5704debiandevscripts+2EPSS score0.53%
scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands.CVE-2014-1833debiandevscripts+3EPSS score3.73%
Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via a crafted .orig.tar file, related to a symlink.CVE-2012-2242debiandevscripts+1EPSS score1.70%
scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .dsc or (2) .changes file, related to "arguments to external commands" that are not properly escaped, a different vulnerability than CVE-2012-2240.CVE-2012-2241debiandevscripts+1EPSS score1.50%
scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, probably related to a NULL byte in a filename.CVE-2012-2240debiandevscripts+1EPSS score3.15%
scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments to external commands."CVE-2012-0212debiandevscripts+1EPSS score5.82%
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.CVE-2012-0210debiandevscripts+1EPSS score5.27%
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arbitrary code via the file name in a (1) .dsc or (2) .changes file.CVE-2012-0211debiandevscripts+1EPSS score5.82%
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level directory of an original (.orig) source tarball of a source package.CVE-2012-3500debiandevscripts+2EPSS score0.27%
scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on the temporary (1) standard output or (2) standard error output file.