com.aspectsecurity.automationservices.plugins.jenkins:ibm-security-appscansource-scanner (>=1.0.3, <=1.0.5), com.blazemeter.plugins:blazemeterjenkinsplugin (>=2.7, <=4.18) +195 more potentially affected by CVE-2021-21605 via org.jenkins-ci.main:jenkins-core (1.580.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.580.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.aspectsecurity.automationservices.plugins.jenkins:ibm-security-appscansource-scanner...

com.aspectsecurity.automationservices.plugins.jenkins:ibm-security-appscansource-scanner (>=1.0.3, <=1.0.5), com.blazemeter.plugins:blazemeterjenkinsplugin (>=2.7, <=4.18) +195 more potentially affected by CVE-2021-21606 via org.jenkins-ci.main:jenkins-core (1.580.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.580.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.aspectsecurity.automationservices.plugins.jenkins:ibm-security-appscansource-scanner...

com.byclosure.jenkins.plugins:gcloud-sdk (0.0.1), org.jenkins-ci.plugins:google-container-registry-auth (>=0.1, <=0.3) +4 more potentially affected by CVE-2019-10436 via org.jenkins-ci.plugins:google-oauth-plugin (>=0.1, <=0.5)

org.jenkins-ci.plugins:google-oauth-plugin MAVEN version =0.1, =0.1, =1.0, =0.1, =0.1, =1.2 Source cves: CVE-2019-10436 Source advisory: OSV:GHSA-8QH4-FGHR-6FXG...

com.google.cloud:gcloud-java-examples (>=0.2.5, <=0.2.8), com.google.cloud:gcloud-java-nio-examples (>=0.2.5, <=0.2.8) +4 more potentially affected by CVE-2018-1002200 via org.codehaus.plexus:plexus-archiver (2.10)

org.codehaus.plexus:plexus-archiver MAVEN version 2.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-archiver and may be impacted: - com.google.cloud:gcloud-java-examples =0.2.5, =0.2.5, =0.3.0, =0.3.0, =0.13.0-alpha -...

gcloud-go:fuzz_parse_query: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6450457919750144 Project: gcloud-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsequery Job Type: libfuzzerasangcloud-go Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

gcloud-go:fuzz_parse_query: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5237511512260608 Project: gcloud-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsequery Job Type: libfuzzerasangcloud-go Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ffe8d8c3780 Crash State: NULL Sanitizer: address ASAN...

gcloud-go:fuzz_parse_query: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6062954056384512 Project: gcloud-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsequery Job Type: libfuzzerasangcloud-go Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

gcloud-go:fuzz_parse_query: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6406236741435392 Project: gcloud-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsequery Job Type: libfuzzerasangcloud-go Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7ffde6b0b780 Crash State: NULL Sanitizer: address ASAN...

gcloud-go:fuzz_parse_query: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6260099724214272 Project: gcloud-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsequery Job Type: libfuzzerasangcloud-go Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

gcloud-go:fuzz_parse_query: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=6321258611474432 Project: gcloud-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsequery Job Type: libfuzzerasangcloud-go Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

gcloud-go:fuzz_parse_query: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5145458130419712 Project: gcloud-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsequery Job Type: libfuzzerasangcloud-go Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f69b5cc8000 Crash State: NULL Sanitizer: address ASAN...

gcloud-go:fuzz_parse_query: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5172013004095488 Project: gcloud-go Fuzzing Engine: libFuzzer Fuzz Target: fuzzparsequery Job Type: libfuzzerasangcloud-go Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate...

com.byclosure.jenkins.plugins:gcloud-sdk (0.0.1), org.jenkins-ci.plugins:google-container-registry-auth (>=0.1, <=0.3) +4 more potentially affected by CVE-2019-10436 via org.jenkins-ci.plugins:google-oauth-plugin (>=0.1, <=0.5)

org.jenkins-ci.plugins:google-oauth-plugin MAVEN version =0.1, =0.1, =1.0, =0.1, =0.1, =1.2 Source cves: CVE-2019-10436 Source advisory: MEND:CVE-2019-10436...

Zendesk: Leaked artifactory_key, artifactory_api_key, and gcloud refresh_token via GitHub.

It was reported to Zendesk that valid credentials to an instance of Artifactory and a gcloud project were unintentionally leaked via a public GitHub repository. We immediately rotated the credentials and investigated to ensure they were not utilized by any other party. We want to thank @rubyroobs...

Imperva Cloud Security Now Available Through UK Government’s GCloud 10 Digital Marketplace

Building on the success of Imperva listing our market-leading, single stack Incapsula cloud platform for DDOS protection; CDN; load balancing and WAF on the GCloud 9 framework, Imperva has now added more products to the GCloud 10 portfolio. As the UK pushes for even greater digital adoption on a...

ISUCON5 qualifier OS Command Injection Vulnerability

ISUCON5 qualifier is a suite of qualifier portal applications. ISUCON5 qualifier's eventapp/lib/gcloud.rb fails to make the correct popen call, allowing remote attackers to submit HTTP requests containing special metacharacters to execute arbitrary commands...

CVE-2015-5673

eventapp/lib/gcloud.rb in the ISUCON5 qualifier portal aka eventapp web application before 2015-10-30 makes improper popen calls, which allows remote attackers to execute arbitrary commands via an HTTP request that includes shell metacharacters in an argument to a "gcloud compute" command...

Command injection

eventapp/lib/gcloud.rb in the ISUCON5 qualifier portal aka eventapp web application before 2015-10-30 makes improper popen calls, which allows remote attackers to execute arbitrary commands via an HTTP request that includes shell metacharacters in an argument to a "gcloud compute" command...

CVE-2015-5673

eventapp/lib/gcloud.rb in the ISUCON5 qualifier portal aka eventapp web application before 2015-10-30 makes improper popen calls, which allows remote attackers to execute arbitrary commands via an HTTP request that includes shell metacharacters in an argument to a "gcloud compute" command...