Devscripts

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via shell metacharacters in the file name argument.CVE-2012-0212Devscripts Devel Team · 5.8% likely

   CWE-20

2. debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to execute arbitrary code via a crafted tarball file name in the top-level director…CVE-2012-0211Devscripts Devel Team · 5.8% likely

   CWE-20

3. debdiff.pl in devscripts 2.10.x before 2.10.69 and 2.11.x before 2.11.4 allows remote attackers to obtain system information and execute arbitrary code via the file name in a (1)…CVE-2012-0210Devscripts Devel Team · 5.2% likely

   CWE-20

4. Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.CVE-2013-6888Devscripts Devel Team · 4.1% likely
5. Directory traversal vulnerability in uupdate in devscripts 2.14.1 allows remote attackers to modify arbitrary files via a crafted .orig.tar file, related to a symlink.CVE-2014-1833Devscripts Devel Team · 3.7% likely

   CWE-22

6. scripts/dscverify.pl in devscripts before 2.12.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to "arguments to external commands."CVE-2012-2240Devscripts Devel Team · 3.2% likely

   CWE-20

7. Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.CVE-2015-5705Devscripts Devel Team · 3.1% likely

   CWE-59

8. Eval injection vulnerability in scripts/uscan.pl before Rev 1984 in devscripts allows remote attackers to execute arbitrary Perl code via crafted pathnames on distribution servers…CVE-2009-2946Devscripts Devel Team · 2.9% likely
9. Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in a filename.CVE-2013-7085Devscripts Devel Team · 2.5% likely

   CWE-20

10. The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metac…CVE-2013-7050Devscripts Devel Team · 1.9% likely

    CWE-94

11. scripts/dget.pl in devscripts before 2.10.73 allows remote attackers to execute arbitrary commands via a crafted (1) .dsc or (2) .changes file, related to "arguments to external c…CVE-2012-2242Devscripts Devel Team · 1.7% likely

    CWE-20

12. scripts/dget.pl in devscripts before 2.12.3 allows remote attackers to delete arbitrary files via a crafted (1) .dsc or (2) .changes file, probably related to a NULL byte in a fil…CVE-2012-2241Devscripts Devel Team · 1.5% likely

    CWE-20

13. scripts/licensecheck.pl in devscripts before 2.15.7 allows local users to execute arbitrary shell commands.CVE-2015-5704Devscripts Devel Team · 0.5% likely

    CWE-77

14. scripts/annotate-output.sh in devscripts before 2.12.2, as used in rpmdevtools before 8.3, allows local users to modify arbitrary files via a symlink attack on the temporary (1) s…CVE-2012-3500Devscripts Devel Team · 0.3% likely

    CWE-362

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.