CVE-2024-12664 ruifang-tech Rebuild Project Task Comment cross site scripting

A vulnerability, which was classified as problematic, has been found in ruifang-tech Rebuild 3.8.5. This issue affects some unknown processing of the component Project Task Comment Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

Rebuild 代码注入漏洞

Rebuild is a highly customizable enterprise management system. A code injection vulnerability exists in Rebuild version 3.8.5, which stems from a cross-site scripting vulnerability that allows an attacker to inject arbitrary JavaScript code...

PT-2024-17706

Name of the Vulnerable Software and Affected Versions ruifang-tech Rebuild version 3.8.5 Description A problematic issue was found in the Task Comment Attachment Upload component, affecting an unknown function. This issue leads to cross site scripting and can be exploited remotely. The exploit ha...

Rebuild 代码注入漏洞

Rebuild is a highly customizable enterprise management system. A code injection vulnerability exists in Rebuild version 3.8.5, which stems from a cross-site scripting vulnerability that allows an attacker to inject arbitrary JavaScript code...

CVE-2024-12664: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in ruifang-tech Rebuild 3.8.5. This issue affects some unknown processing of the component Project Task Comment Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

PT-2024-17705 · Ruifang Tech · Ruifang-Tech Rebuild

Name of the Vulnerable Software and Affected Versions: ruifang-tech Rebuild version 3.8.5 Description: A problematic issue has been found in the Project Task Comment Handler component, leading to cross-site scripting. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2024-12665: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in ruifang-tech Rebuild 3.8.5. Affected is an unknown function of the component Task Comment Attachment Upload. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

Fedora 41 : retsnoop / rust-rbspy (2024-aa246ab1a3)

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2024-aa246ab1a3 advisory. Rebuild affected applications with ruzstd v0.7.3 to address RUSTSEC-2024-0400. Tenable has extracted the preceding description block directly from the Fedora...

Build corruption when using `PYO3_CONFIG_FILE` environment variable

In PyO3 0.23.0 the PYO3CONFIGFILE environment variable used to configure builds regressed such that changing the environment variable would no longer trigger PyO3 to reconfigure and recompile. In combination with workflows using tools such as maturin to build for multiple versions in a single...

Low: Red Hat Security Advisory: Updated service-interconnect rhel9 container images for 1.4 LTS

Updated service-interconnect container images are now available for Service Interconnect 1.4 LTS for RHEL 9. Users of service-interconnect 1.4 LTS rhel9 container images are advised to upgrade to these updated images, which contain backported patches to correct security issues and fix bugs. Users...

The vulnerability of the ice component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ice component in the Linux operating system’s kernel is related to the assignment of the NULL pointer in the icevsirebuild function. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-52550

A flaw was found in the Jenkins Pipeline: Groovy Plugin jenkins-plugin/workflow-cps. This vulnerability allows attackers with Item/Build permission to rebuild a previous build whose main Jenkinsfile script is no longer approved, bypassing script approval checks via the rebuild action. Mitigation...

runc security update

4:1.1.13-4 - rebuild against new golang - Resolves: RHEL-46380 4:1.1.13-3 - rebuild against golang-1.22.4 - Resolves: RHEL-46380 4:1.1.13-2 - rebuild - Resolves: RHEL-46380 4:1.1.13-1 - update to https://github.com/opencontainers/runc/releases/tag/v1.1.13 - Related: RHEL-27608 4:1.1.12-2 - Switch...

Fedora 37 : golang-github-facebookincubator-contest / etc (2022-53fdd2d9c4)

The remote Fedora 37 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-53fdd2d9c4 advisory. Rebuild for CVE-2022-24675,28327,29526 in golang and other go ecosystem CVEs These packages were missed in the initial rawhide go ecosystem rebuild a couple...

Fedora 38 : capnproto / fastnetmon / librime / rr / sonic-visualiser (2022-ef11bad952)

The remote Fedora 38 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-ef11bad952 advisory. Update capnproto to version 0.10.3 to address CVE-2022-46149. Dependent packages were rebuilt for both the fix for the security issue and the capnproto SONAM...

CVE-2024-52550

Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main Jenkinsfile script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build whose Jenkinsfile script is no longer approv...

CVE-2024-52550

Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main Jenkinsfile script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build whose Jenkinsfile script is no longer approv...

CVE-2024-52550

Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main Jenkinsfile script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build whose Jenkinsfile script is no longer approv...

CVE-2024-52550

Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main Jenkinsfile script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build whose Jenkinsfile script is no longer approv...

PT-2024-35372

Name of the Vulnerable Software and Affected Versions Jenkins Pipeline: Groovy Plugin versions 3990.vd281dd77a 388 and earlier, except version 3975.3977.v478dd9e956c3 Description The issue allows attackers with Item/Build permission to rebuild a previous build whose Jenkinsfile script is no longe...