Show filters
16 Total Results
Displaying 1-10 of 16
Sort by:
Attacker Value
Unknown
CVE-2013-7325
Disclosure Date: December 03, 2019 (last updated November 27, 2024)
An issue exists in uscan in devscripts before 2.13.19, which could let a remote malicious user execute arbitrary code via a crafted tarball.
0
Attacker Value
Unknown
CVE-2018-13043
Disclosure Date: July 01, 2018 (last updated November 26, 2024)
scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because YAML::Syck is used without a configuration that prevents unintended blessing.
0
Attacker Value
Unknown
CVE-2015-5704
Disclosure Date: September 25, 2017 (last updated November 26, 2024)
scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands.
0
Attacker Value
Unknown
CVE-2015-5705
Disclosure Date: September 06, 2017 (last updated November 26, 2024)
Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.
0
Attacker Value
Unknown
CVE-2014-1833
Disclosure Date: February 05, 2014 (last updated October 05, 2023)
Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via a crafted .orig.tar file, related to a symlink.
0
Attacker Value
Unknown
CVE-2013-6888
Disclosure Date: January 07, 2014 (last updated October 05, 2023)
Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.
0
Attacker Value
Unknown
CVE-2013-7085
Disclosure Date: December 14, 2013 (last updated October 05, 2023)
Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in a filename.
0
Attacker Value
Unknown
CVE-2013-7050
Disclosure Date: December 13, 2013 (last updated October 05, 2023)
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.
0
Attacker Value
Unknown
CVE-2012-2242
Disclosure Date: October 01, 2012 (last updated October 05, 2023)
scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .dsc or (2) .changes file, related to "arguments to external commands" that are not properly escaped, a different vulnerability than CVE-2012-2240.
0
Attacker Value
Unknown
CVE-2012-2240
Disclosure Date: October 01, 2012 (last updated October 05, 2023)
scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments to external commands."
0
