Записи devscripts devel team
14 опубликованных записей вендора devscripts devel team.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 8
- С записью об исправлении
- 100 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-20 Improper Input Validation7
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
14 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
39Наблюдать | CVE-2012-0211Эксплойта нет | debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarbdevscripts devel team · devscripts · CWE-20 | Критическая9,3 | — | 5,8 % | 15 июн. 2012 г. |
39Наблюдать | CVE-2012-0212Эксплойта нет | debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metachardevscripts devel team · devscripts · CWE-20 | Критическая9,3 | — | 5,8 % | 15 июн. 2012 г. |
39Наблюдать | CVE-2012-0210Эксплойта нет | debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arbdevscripts devel team · devscripts · CWE-20 | Критическая9,3 | — | 5,3 % | 15 июн. 2012 г. |
38Наблюдать | CVE-2009-2946Эксплойта нет | Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crdevscripts devel team · devscripts | Критическая9,3 | — | 2,9 % | 4 сент. 2009 г. |
31Наблюдать | CVE-2013-6888Эксплойта нет | Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.devscripts devel team · devscripts | Высокая7,5 | — | 4,1 % | 7 янв. 2014 г. |
31Наблюдать | CVE-2012-2240Эксплойта нет | scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "adevscripts devel team · devscripts · CWE-20 | Высокая7,5 | — | 3,2 % | 30 сент. 2012 г. |
31Наблюдать | CVE-2015-5705Эксплойта нет | Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and cdevscripts devel team · devscripts · CWE-59 | Высокая7,5 | — | 3,1 % | 6 сент. 2017 г. |
31Наблюдать | CVE-2015-5704Эксплойта нет | scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands.devscripts devel team · devscripts · CWE-77 | Высокая7,8 | — | 0,5 % | 25 сент. 2017 г. |
28Наблюдать | CVE-2013-7050Эксплойта нет | The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to exedevscripts devel team · devscripts · CWE-94 | Средняя6,8 | — | 1,9 % | 13 дек. 2013 г. |
28Наблюдать | CVE-2012-2242Эксплойта нет | scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .dsc or (2) .changes fidevscripts devel team · devscripts · CWE-20 | Средняя6,8 | — | 1,7 % | 30 сент. 2012 г. |
24Наблюдать | CVE-2013-7085Эксплойта нет | Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character indevscripts devel team · devscripts · CWE-20 | Средняя5,8 | — | 2,5 % | 14 дек. 2013 г. |
21Наблюдать | CVE-2014-1833Эксплойта нет | Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via a crafted .orig.tar devscripts devel team · devscripts · CWE-22 | Средняя5,0 | — | 3,7 % | 5 февр. 2014 г. |
20Наблюдать | CVE-2012-2241Эксплойта нет | scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, pdevscripts devel team · devscripts · CWE-20 | Средняя5,0 | — | 1,5 % | 30 сент. 2012 г. |
4Наблюдать | CVE-2012-3500Эксплойта нет | scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via devscripts devel team · devscripts · CWE-362 | Низкая1,2 | — | 0,3 % | 30 сент. 2012 г. |
- CVE-2012-021139Наблюдать
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarb
КритическаяCVSS 9,3Эксплойта нетEPSS 6 %devscripts devel team · devscripts15 июн. 2012 г.
- CVE-2012-021239Наблюдать
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metachar
КритическаяCVSS 9,3Эксплойта нетEPSS 6 %devscripts devel team · devscripts15 июн. 2012 г.
- CVE-2012-021039Наблюдать
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arb
КритическаяCVSS 9,3Эксплойта нетEPSS 5 %devscripts devel team · devscripts15 июн. 2012 г.
- CVE-2009-294638Наблюдать
Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via cr
КритическаяCVSS 9,3Эксплойта нетEPSS 3 %devscripts devel team · devscripts4 сент. 2009 г.
- CVE-2013-688831Наблюдать
Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.
ВысокаяCVSS 7,5Эксплойта нетEPSS 4 %devscripts devel team · devscripts7 янв. 2014 г.
- CVE-2012-224031Наблюдать
scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "a
ВысокаяCVSS 7,5Эксплойта нетEPSS 3 %devscripts devel team · devscripts30 сент. 2012 г.
- CVE-2015-570531Наблюдать
Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and c
ВысокаяCVSS 7,5Эксплойта нетEPSS 3 %devscripts devel team · devscripts6 сент. 2017 г.
- CVE-2015-570431Наблюдать
scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands.
ВысокаяCVSS 7,8Эксплойта нетEPSS 1 %devscripts devel team · devscripts25 сент. 2017 г.
- CVE-2013-705028Наблюдать
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to exe
СредняяCVSS 6,8Эксплойта нетEPSS 2 %devscripts devel team · devscripts13 дек. 2013 г.
- CVE-2012-224228Наблюдать
scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .dsc or (2) .changes fi
СредняяCVSS 6,8Эксплойта нетEPSS 2 %devscripts devel team · devscripts30 сент. 2012 г.
- CVE-2013-708524Наблюдать
Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in
СредняяCVSS 5,8Эксплойта нетEPSS 2 %devscripts devel team · devscripts14 дек. 2013 г.
- CVE-2014-183321Наблюдать
Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via a crafted .orig.tar
СредняяCVSS 5,0Эксплойта нетEPSS 4 %devscripts devel team · devscripts5 февр. 2014 г.
- CVE-2012-224120Наблюдать
scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, p
СредняяCVSS 5,0Эксплойта нетEPSS 2 %devscripts devel team · devscripts30 сент. 2012 г.
- CVE-2012-35004Наблюдать
scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via
НизкаяCVSS 1,2Эксплойта нетEPSS 0 %devscripts devel team · devscripts30 сент. 2012 г.