Vulnerability index

Browse CVEs

11 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Devscripts MEDIUM 5.0
CVE-2014-1833

Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via a crafted .orig.tar file, rel…

Mitigation only
Fix from $1,600 2014-02-05
Devscripts HIGH 7.5
CVE-2013-6888

Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.

Fix: after 2.13.8
Fix from $1,950 2014-01-07
Devscripts MEDIUM 5.8
CVE-2013-7085

Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in a filena…

No fix yet
Fix from $1,600 2013-12-14
Devscripts MEDIUM 6.8
CVE-2013-7050

The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbi…

Fix: after 2.13.7
Fix from $1,600 2013-12-13
Devscripts HIGH 7.5
CVE-2012-2240

scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments …

Fix: after 2.12.2
Fix from $1,950 2012-10-01
Devscripts MEDIUM 6.8
CVE-2012-2242

scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .dsc or (2) .changes file, relat…

Fix: after 2.10.72
Fix from $1,600 2012-10-01
Devscripts MEDIUM 5.0
CVE-2012-2241

scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, probably r…

Fix: after 2.12.2
Fix from $1,600 2012-10-01
Devscripts HIGH 9.3
CVE-2012-0210EPSS 5%

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arbitrary co…

Mitigation only
Fix from $1,950 2012-06-16
Devscripts HIGH 9.3
CVE-2012-0211EPSS 6%

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file …

Mitigation only
Fix from $1,950 2012-06-16
Devscripts HIGH 9.3
CVE-2012-0212EPSS 6%

debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in…

Mitigation only
Fix from $1,950 2012-06-16
Devscripts HIGH 9.3
CVE-2009-2946

Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pat…

Mitigation only
Fix from $1,950 2009-09-04