CVE-2026-19587: Uncontrolled Resource Consumption

Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation...

PT-2026-70977

Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers...

PT-2026-71332

Name of the Vulnerable Software and Affected Versions open-iscsi affected versions not specified Description A flaw in the iscsiuio component involves an integer underflow and out-of-bounds read during the parsing of Dynamic Host Configuration Protocol for IPv6 DHCPv6 packets. An unauthenticated...

PT-2026-71331

Name of the Vulnerable Software and Affected Versions open-iscsi affected versions not specified Description A flaw in the iscsiuio daemon allows a remote attacker on the same local network segment to cause a Denial of Service DoS. By sending a specially crafted Internet Control Message Protocol...

CVE-2026-18727: Integer Underflow (Wrap or Wraparound)

A flaw was found in open-iscsi's iscsiuio component. This vulnerability involves an integer underflow and out-of-bounds read during Dynamic Host Configuration Protocol for IPv6 DHCPv6 packet parsing. Specifically, crafted DHCPv6 Advertise traffic with a short User Datagram Protocol UDP length can...

PT-2026-71371

The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, an unauthenticated request can be made to redirect the user to a query-specified location. This allows an attacker to create a specially-crafted URL to an MRBS installation that wil...

ROS-20260812-73-0031

The vulnerability in Jenkins is related to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary URL addresses...

CVE-2026-18726: Loop with Unreachable Exit Condition

A flaw was found in open-iscsi. This vulnerability allows a remote attacker on the same local network segment to cause a Denial of Service DoS in the iscsiuio daemon. By sending a specially crafted Internet Control Message Protocol version 6 ICMPv6 Router Advertisement with a zero-length option,...

PT-2026-71366

Name of the Vulnerable Software and Affected Versions PDF::WebKit versions through 1.2 Description OS command injection is possible when untrusted input is passed as the output path or as a stylesheet entry. The issue occurs because the to pdf function reads the generated PDF from its path...

CVE-2026-19588: Integer Overflow to Buffer Overflow

Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers...

RHEL 9 : iscsi-initiator-utils (RHSA-2026:53844)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:53844 advisory. The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface iSCSI protocol, as well as th...

RockyLinux 10 : iscsi-initiator-utils (RLSA-2026:53845)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:53845 advisory. open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket CVE-2026-44944 open-iscsi: open-iscsi: Privilege Escalation via Path Traversal...

RockyLinux 8 : isns-utils (RLSA-2026:53848)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:53848 advisory. open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder CVE-2026-55995 Tenable has extracted the preceding description block directly...

RockyLinux 9 : isns-utils (RLSA-2026:53847)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:53847 advisory. open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder CVE-2026-55995 Tenable has extracted the preceding description block directly...

RHEL 9 : isns-utils (RHSA-2026:53847)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:53847 advisory. The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service iSNS protocol allows...

AlmaLinux 9 : isns-utils (ALSA-2026:53847)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:53847 advisory. open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder CVE-2026-55995 Tenable has extracted the preceding description block directly...

AlmaLinux 8 : isns-utils (ALSA-2026:53848)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:53848 advisory. open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder CVE-2026-55995 Tenable has extracted the preceding description block directly...

AlmaLinux 10 : isns-utils (ALSA-2026:53846)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:53846 advisory. open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder CVE-2026-55995 Tenable has extracted the preceding description block directly...

RHEL 8 : isns-utils (RHSA-2026:53848)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:53848 advisory. The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service iSNS protocol allows...

open-iscsi: open-iscsi: Privilege Escalation via Path Traversal

A flaw was found in open-iscsi. This vulnerability, known as Path Traversal, allows remote Man-in-the-Middle MITM attackers to manipulate file paths. By doing so, attackers can create files with root privileges outside the intended database and inject malicious content into system records. This...