EUVD-2026-73425

Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally...

CVE-2026-68895: Numeric Truncation Error

Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally...

Double-free in the iSNS attribute decoder in open-iscsi

...

CVE-2026-70593 Ghost: Theme Upload Path Traversal

Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a vulnerability in custom themes allowed a staff user to write files outside of the uploads directory. This could be used to alter the behavior of the installation through custom theme upload path traversal in LocalStorageBas...

CVE-2026-70593

Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a vulnerability in custom themes allowed a staff user to write files outside of the uploads directory. This could be used to alter the behavior of the installation through custom theme upload path traversal in LocalStorageBas...

CVE-2026-34168 Coolify: Command injection via unsanitized persistent storage name in docker volume commands

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the LocalPersistentVolume.name field is interpolated directly into docker volume shell commands without shell argument escaping, allowing an authenticated user to set a...

CVE-2026-34168

CVE-2026-34168 affects Coolify prior to 4.0.0-beta.471. The vulnerability arises from the LocalPersistentVolume.name field being interpolated directly into docker volume commands without shell-escaping, enabling an authenticated user to inject and execute commands on managed servers when the reso...

EUVD-2023-25866

Malicious code in bioql PyPI...

The vulnerability of the Internet Storage Name Service (iSNS) for Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Internet Storage Name Service iSNS for Windows operating systems is related to insufficient protection of service data due to operations going beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

Information disclosure

Windows Internet Storage Name Service iSNS Server Information Disclosure Vulnerability...

CVE-2023-21699: Out-of-bounds Read

Windows Internet Storage Name Service iSNS Server Information Disclosure Vulnerability...

Microsoft Internet Storage Name Service 安全漏洞

Microsoft Internet Storage Name Service is used by Microsoft Corporation USA for the interaction between iSNS servers and iSNS clients. A security vulnerability exists in the Microsoft Internet Storage Name Service. The following products and editions are affected: Windows Server 2008 R2 for...

PT-2023-1442 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Internet Storage Name Service iSNS of Windows operating systems. It allows a remote attacker to cause a denial of service...

CVE-2023-21697: Buffer Over-read

Windows Internet Storage Name Service iSNS Server Information Disclosure Vulnerability...

The vulnerability of the Internet Storage Name Service (iSNS) on the Microsoft Windows operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the Internet Storage Name Service iSNS on Microsoft Windows operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2021-43215

iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution...

CVE-2021-43215

iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution...

Microsoft Internet Information Services 缓冲区错误漏洞

Microsoft Windows Internet Information Services IIS is a Web server for the Windows Server platform from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Internet Storage Name Service. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

PT-2021-6215 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Internet Storage Name Service iSNS of Microsoft Windows. It allows a remote attacker to execute arbitrary code...

Denial Of Service (DoS)

The scsi-target-utils package is vulnerable to Denial Of Service DoS. Due to buffer overflow flaws found in scsi-target-utils' tgtd daemon,a remote attacker could trigger these flaws by sending a carefully-crafted Internet Storage Name Service iSNS request, causing the tgtd daemon to crash...