devscripts devel team kayıtları
devscripts devel team üreticisine ait 14 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 8
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-20 Improper Input Validation7
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2012-0211İstismar yok | debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarbdevscripts devel team · devscripts · CWE-20 | Kritik9,3 | — | %5,8 | 15 Haz 2012 |
39İzleyin | CVE-2012-0212İstismar yok | debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metachardevscripts devel team · devscripts · CWE-20 | Kritik9,3 | — | %5,8 | 15 Haz 2012 |
39İzleyin | CVE-2012-0210İstismar yok | debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arbdevscripts devel team · devscripts · CWE-20 | Kritik9,3 | — | %5,3 | 15 Haz 2012 |
38İzleyin | CVE-2009-2946İstismar yok | Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crdevscripts devel team · devscripts | Kritik9,3 | — | %2,9 | 4 Eyl 2009 |
31İzleyin | CVE-2013-6888İstismar yok | Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.devscripts devel team · devscripts | Yüksek7,5 | — | %4,1 | 7 Oca 2014 |
31İzleyin | CVE-2012-2240İstismar yok | scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "adevscripts devel team · devscripts · CWE-20 | Yüksek7,5 | — | %3,2 | 30 Eyl 2012 |
31İzleyin | CVE-2015-5705İstismar yok | Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and cdevscripts devel team · devscripts · CWE-59 | Yüksek7,5 | — | %3,1 | 6 Eyl 2017 |
31İzleyin | CVE-2015-5704İstismar yok | scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands.devscripts devel team · devscripts · CWE-77 | Yüksek7,8 | — | %0,5 | 25 Eyl 2017 |
28İzleyin | CVE-2013-7050İstismar yok | The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to exedevscripts devel team · devscripts · CWE-94 | Orta6,8 | — | %1,9 | 13 Ara 2013 |
28İzleyin | CVE-2012-2242İstismar yok | scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .dsc or (2) .changes fidevscripts devel team · devscripts · CWE-20 | Orta6,8 | — | %1,7 | 30 Eyl 2012 |
24İzleyin | CVE-2013-7085İstismar yok | Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character indevscripts devel team · devscripts · CWE-20 | Orta5,8 | — | %2,5 | 14 Ara 2013 |
21İzleyin | CVE-2014-1833İstismar yok | Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via a crafted .orig.tar devscripts devel team · devscripts · CWE-22 | Orta5,0 | — | %3,7 | 5 Şub 2014 |
20İzleyin | CVE-2012-2241İstismar yok | scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, pdevscripts devel team · devscripts · CWE-20 | Orta5,0 | — | %1,5 | 30 Eyl 2012 |
4İzleyin | CVE-2012-3500İstismar yok | scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via devscripts devel team · devscripts · CWE-362 | Düşük1,2 | — | %0,3 | 30 Eyl 2012 |
- CVE-2012-021139İzleyin
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarb
KritikCVSS 9,3İstismar yokEPSS %6devscripts devel team · devscripts15 Haz 2012
- CVE-2012-021239İzleyin
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metachar
KritikCVSS 9,3İstismar yokEPSS %6devscripts devel team · devscripts15 Haz 2012
- CVE-2012-021039İzleyin
debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arb
KritikCVSS 9,3İstismar yokEPSS %5devscripts devel team · devscripts15 Haz 2012
- CVE-2009-294638İzleyin
Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via cr
KritikCVSS 9,3İstismar yokEPSS %3devscripts devel team · devscripts4 Eyl 2009
- CVE-2013-688831İzleyin
Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.
YüksekCVSS 7,5İstismar yokEPSS %4devscripts devel team · devscripts7 Oca 2014
- CVE-2012-224031İzleyin
scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "a
YüksekCVSS 7,5İstismar yokEPSS %3devscripts devel team · devscripts30 Eyl 2012
- CVE-2015-570531İzleyin
Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and c
YüksekCVSS 7,5İstismar yokEPSS %3devscripts devel team · devscripts6 Eyl 2017
- CVE-2015-570431İzleyin
scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands.
YüksekCVSS 7,8İstismar yokEPSS %1devscripts devel team · devscripts25 Eyl 2017
- CVE-2013-705028İzleyin
The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to exe
OrtaCVSS 6,8İstismar yokEPSS %2devscripts devel team · devscripts13 Ara 2013
- CVE-2012-224228İzleyin
scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .dsc or (2) .changes fi
OrtaCVSS 6,8İstismar yokEPSS %2devscripts devel team · devscripts30 Eyl 2012
- CVE-2013-708524İzleyin
Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in
OrtaCVSS 5,8İstismar yokEPSS %2devscripts devel team · devscripts14 Ara 2013
- CVE-2014-183321İzleyin
Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via a crafted .orig.tar
OrtaCVSS 5,0İstismar yokEPSS %4devscripts devel team · devscripts5 Şub 2014
- CVE-2012-224120İzleyin
scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, p
OrtaCVSS 5,0İstismar yokEPSS %2devscripts devel team · devscripts30 Eyl 2012
- CVE-2012-35004İzleyin
scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via
DüşükCVSS 1,2İstismar yokEPSS %0devscripts devel team · devscripts30 Eyl 2012