Skip to content
OpenAdvisories

Package · Debian

devscripts

17 known vulnerabilities.

17 results · Feed

  • Critical 9.8

    It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscript…

  • Unscored —

    An issue exists in uscan in devscripts before 2.13.19, which could let a remote malicious user execute arbitrary code v…

  • Unscored —

    scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because Y…

  • Unscored —

    scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands.

  • Unscored —

    Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a …

  • Unscored —

    Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via…

  • Unscored —

    Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.

  • Unscored —

    Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a wh…

  • Unscored —

    The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows re…

  • Unscored —

    scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify…

  • Unscored —

    scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .d…

  • Unscored —

    scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified …

  • Unscored —

    scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or…

  • Unscored —

    debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary co…

  • Unscored —

    debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary co…

  • Unscored —

    debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system inform…

  • Unscored —

    Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbit…