https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T23:50:47.917207+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-07381 cnvd-2015-07381 2026-10-27T23:50:47.920535+00:00 cnvd-2015-07381 https://cve.radiocsirt.org/vuln/euvd-2026-93648 EUVD-2026-93648 2026-10-27T23:50:47.920566+00:00 EUVD-2026-93648 https://cve.radiocsirt.org/vuln/fkie_cve-2015-5673 fkie_cve-2015-5673 2026-10-27T23:50:47.920580+00:00

eventapp/lib/gcloud.rb in the ISUCON5 qualifier portal (aka eventapp) web application before 2015-10-30 makes improper popen calls, which allows remote attackers to execute arbitrary commands via an HTTP request that includes shell metacharacters in an argument to a "gcloud compute" command.

 https://cve.radiocsirt.org/vuln/ghsa-5g7c-hgmm-663x GHSA-5g7c-hgmm-663x 2026-10-27T23:50:47.920608+00:00

eventapp/lib/gcloud.rb in the ISUCON5 qualifier portal (aka eventapp) web application before 2015-10-30 makes improper popen calls, which allows remote attackers to execute arbitrary commands via an HTTP request that includes shell metacharacters in an argument to a "gcloud compute" command.

 https://cve.radiocsirt.org/vuln/gsd-2015-5673 gsd-2015-5673 2026-10-27T23:50:47.920625+00:00 gsd-2015-5673 https://cve.radiocsirt.org/vuln/jvndb-2015-000175 jvndb-2015-000175 2026-10-27T23:50:47.920635+00:00

ISUCON5 qualifier portal web application (eventapp) provided by ISUCON organizers contains an OS command injection (CWE-78) vulnerability. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.