Devscripts Devel Team / Devscripts
14 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2015-5704 | scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands. | HIGH | 7.8 | Sep 25, 2017 |
| CVE-2015-5705 | Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename. | HIGH | 7.5 | Sep 6, 2017 |
| CVE-2014-1833 | Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via a crafted .orig.tar file, related to a… | MEDIUM | 5.0 | Feb 5, 2014 |
| CVE-2013-6888 | Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball. | HIGH | 7.5 | Jan 7, 2014 |
| CVE-2013-7085 | Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in a filename. | MEDIUM | 5.8 | Dec 14, 2013 |
| CVE-2013-7050 | The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary comm… | MEDIUM | 6.8 | Dec 13, 2013 |
| CVE-2012-3500 | rpmdevtools: TOCTOU race condition in annotate-output | LOW | 1.2 | Oct 1, 2012 |
| CVE-2012-2242 | scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .dsc or (2) .changes file, related to "arg… | MEDIUM | 6.8 | Oct 1, 2012 |
| CVE-2012-2241 | scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, probably related to… | MEDIUM | 5.0 | Oct 1, 2012 |
| CVE-2012-2240 | scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments to externa… | HIGH | 7.5 | Oct 1, 2012 |
| CVE-2012-0212 | debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file… | HIGH | 9.3 | Jun 16, 2012 |
| CVE-2012-0211 | debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in th… | HIGH | 9.3 | Jun 16, 2012 |
| CVE-2012-0210 | debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arbitrary code via the… | HIGH | 9.3 | Jun 16, 2012 |
| CVE-2009-2946 | Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on… | HIGH | 9.3 | Sep 4, 2009 |
Showing 1 to 14 of 14 CVEs