Google Cloud Build Configuration Detected

Cloud Build is Google Cloud continuous integration and deployment serverless platform used to build and test software projects. By defining a configuration file named cloudbuild.yaml in their source code repositories, developers can customize their applications build workflows. When exposed with...

Authorization bypass in Openshift

Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed...

GHSA-M3FM-H5JP-Q79P Authorization bypass in Openshift

Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed...

Gradle Enterprise Information Disclosure Vulnerability (CNVD-2021-89946)

Gradle Enterprise can improve developer productivity by accelerating builds, improving build reliability, and speeding up build debugging. An attacker could exploit this vulnerability to obtain potentially sensitive build/configuration details via a specially crafted HTTP request with the...

CDK

This repository is an open-sourced container penetration toolkit called CDK, designed for offering stable exploitation in different slimmed containers without any OS dependency. It comes with useful net-tools and many powerful PoCs/EXPs to help users escape container and take over K8s cluster...

CVE-2021-25699

The OpenSSL component of the Teradici PCoIP Software Client prior to version 21.07.0 was compiled without the no-autoload-config option, which allowed an attacker to elevate to the privileges of the running process via placing a specially crafted dll in a build configuration directory...

GSD-2021-1000365 powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration

powerpc: Fix HAVEHARDLOCKUPDETECTORARCH build configuration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

GSD-2021-1000455 powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration

powerpc: Fix HAVEHARDLOCKUPDETECTORARCH build configuration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.191 by commit...

UVI-2021-1000365 powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration

powerpc: Fix HAVEHARDLOCKUPDETECTORARCH build configuration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.37 by commit...

UVI-2021-1000471 powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration

powerpc: Fix HAVEHARDLOCKUPDETECTORARCH build configuration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.233 by commit...

UVI-2021-1000427 powerpc: Fix HAVE_HARDLOCKUP_DETECTOR_ARCH build configuration

powerpc: Fix HAVEHARDLOCKUPDETECTORARCH build configuration This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.119 by commit...

SUSE-SU-2021:1783-1 Security update for postgresql12

This update for postgresql12 fixes the following issues: - Upgrade to version 12.7: - CVE-2021-32027: Fixed integer overflows in array subscripting calculations bsc1185924. - CVE-2021-32028: Fixed mishandling of junk columns in INSERT ... ON CONFLICT ... UPDATE target lists bsc1185925. -...

CVE-2020-2294

Jenkins Maven Cascade Release Plugin 1.3.2 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to start cascade builds and layout builds, and reconfigure the plugin...

SUSE-SU-2019:3094-1 Security update for ncurses

This update for ncurses fixes the following issues: Security issue fixed: - CVE-2018-10754: Fixed a denial of service caused by a NULL Pointer Dereference in the ncparseentry bsc1131830. - CVE-2019-17594: Fixed a heap-based buffer over-read in ncfindentry function in tinfo/comphash.c bsc1154036. ...

Design/Logic Flaw

In JetBrains TeamCity before 2019.1.2, access could be gained to the history of builds of a deleted build configuration under some circumstances...

CVE-2019-18363

CVE-2019-18363 affects JetBrains TeamCity prior to version 2019.1.2. The issue allowed an attacker to access the history of builds for a deleted build configuration under certain circumstances, constituting an information-disclosure vulnerability in the TeamCity server. The connected documents co...

CVE-2019-18363: Undefined Security Weakness

In JetBrains TeamCity before 2019.1.2, access could be gained to the history of builds of a deleted build configuration under some circumstances...

Privilege Escalation

github.com/openshift/origin is vulnerable to privilege escalation attacks. The vulnerability exists because it does not prevent the unauthorised users to edit a build configuration to use a restricted strategy...

Unspecified Vulnerability in Google Kubernetes API Server

Google Kubernetes is an open source Docker container cluster management system. The system provides resource scheduling, deployment and operation, service discovery and scaling up and down for containerized applications. A security vulnerability in Google Kubernetes' API server allows remote...

CVE-2016-1906

Openshift allows remote attackers to gain privileges by updating a build configuration that was created with an allowed type to a type that is not allowed...