Debian records
10,234 published records for vendor Debian. 126 of them have been exploited in the wild (listed in CISA KEV) and 204 have a ready-made attack tool.
Researcher profile
- Entered KEV
- 126 · 1.2%
- Weaponized
- 204 · 2%
- Pre-auth RCE
- 754
- With a fix record
- 97.4%
- Median publish → KEV
- 364 days
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-416 Use After Free733
- CWE-787 Out-of-bounds Write730
- CWE-125 Out-of-bounds Read689
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer539
- CWE-20 Improper Input Validation501
- CWE-476 NULL Pointer Dereference477
The weakness classes this vendor ships most often: where to look.
CWEdevscripts
3 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
40Plan | CVE-2018-13043No exploit | scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because YAML::Syck is used witdebian · devscripts · CWE-94 | Critical9.8 | 2.4%Jul 1, 2018 |
39Monitor | CVE-2025-8454No exploit | It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scdebian · devscripts · CWE-347 | Critical9.8 | 0.2%Aug 1, 2025 |
36Monitor | CVE-2013-7325No exploit | An issue exists in uscan in devscripts before 2.13.19, which could let a remote malicious user execute arbitrary code via a crafted tarball.debian · devscripts | High8.8 | 1.7%Dec 3, 2019 |
- CVE-2018-1304340Plan
scripts/grep-excuses.pl in Debian devscripts through 2.18.3 allows code execution through unsafe YAML loading because YAML::Syck is used wit
CriticalCVSS 9.8No exploitEPSS 2%debian · devscriptsJul 1, 2018
- CVE-2025-845439Monitor
It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of sc
CriticalCVSS 9.8No exploitEPSS 0%debian · devscriptsAug 1, 2025
- CVE-2013-732536Monitor
An issue exists in uscan in devscripts before 2.13.19, which could let a remote malicious user execute arbitrary code via a crafted tarball.
HighCVSS 8.8No exploitEPSS 1%debian · devscriptsDec 3, 2019