Vulnerabilities > Devscripts Devel Team > Devscripts > 2.14.1

DATE CVE VULNERABILITY TITLE RISK
2017-09-25 CVE-2015-5704 Command Injection vulnerability in multiple products
scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands.
7.2
2017-09-06 CVE-2015-5705 Link Following vulnerability in multiple products
Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.
network
low complexity
devscripts-devel-team fedoraproject CWE-59
5.0
2014-02-05 CVE-2014-1833 Path Traversal vulnerability in Devscripts Devel Team Devscripts 2.14.1
Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via a crafted .orig.tar file, related to a symlink.
network
low complexity
devscripts-devel-team CWE-22
5.0