Devscripts Devel Team devscripts 2.13.5

CPE Details

Devscripts Devel Team devscripts 2.13.5
devscripts_devel_team
devscripts
2.13.5
2013-12-16
15h38 +00:00
2013-12-16
15h43 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:devscripts_devel_team:devscripts:2.13.5:*:*:*:*:*:*:*

Informations

Vendor

devscripts_devel_team

Product

devscripts

Version

2.13.5

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2015-5704 2017-09-25 19h00 +00:00 scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands.
7.8
High
CVE-2015-5705 2017-09-06 19h00 +00:00 Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.
7.5
High
CVE-2013-6888 2014-01-07 16h00 +00:00 Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.
7.5
CVE-2013-7085 2013-12-14 16h00 +00:00 Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in a filename.
5.8
CVE-2013-7050 2013-12-13 17h00 +00:00 The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.
6.8
CVE-2009-2946 2009-09-04 20h00 +00:00 Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers for upstream source code used in Debian GNU/Linux packages.
9.3
The information presented on CVE Find originates from several carefully selected reference sources. CVE data is provided by MITRE Corporation and the National Vulnerability Database (NVD). The Known Exploited Vulnerabilities (KEV) catalog is sourced from the Cybersecurity and Infrastructure Security Agency (CISA), while EPSS scores come from FIRST.org. Additionally, data regarding software weaknesses (CWE) and common attack patterns (CAPEC) is maintained by MITRE Corporation, and information on hardware and software configurations (CPE) is provided by the NVD.