EUVD-2026-73425

Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally...

CVE-2026-68895: Numeric Truncation Error

Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally...

Double-free in the iSNS attribute decoder in open-iscsi

...

CVE-2026-70593 Ghost: Theme Upload Path Traversal

Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a vulnerability in custom themes allowed a staff user to write files outside of the uploads directory. This could be used to alter the behavior of the installation through custom theme upload path traversal in LocalStorageBas...

CVE-2026-70593

Ghost is a Node.js content management system. From 0.10.0 until 6.54.1, a vulnerability in custom themes allowed a staff user to write files outside of the uploads directory. This could be used to alter the behavior of the installation through custom theme upload path traversal in LocalStorageBas...

CVE-2026-34168 Coolify: Command injection via unsanitized persistent storage name in docker volume commands

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.471, the LocalPersistentVolume.name field is interpolated directly into docker volume shell commands without shell argument escaping, allowing an authenticated user to set a...

CVE-2026-34168

CVE-2026-34168 affects Coolify prior to 4.0.0-beta.471. The vulnerability arises from the LocalPersistentVolume.name field being interpolated directly into docker volume commands without shell-escaping, enabling an authenticated user to inject and execute commands on managed servers when the reso...

SUSE SLES15 Security Update : sg3_utils (SUSE-SU-2026:2690-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:2690-1 advisory. This update for sg3utils fixes the following issue Update to version 1.44763+23.769c9b5b: - sginq: --export output conformance for SCSI name string and...

EUVD-2023-25866

Malicious code in bioql PyPI...

iSNS Windows Unauthorized Access

The vulnerability of the Internet Storage Name Service iSNS for Windows operating systems is related to insufficient protection of service data due to operations going beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

Information disclosure

Windows Internet Storage Name Service iSNS Server Information Disclosure Vulnerability...

CVE-2023-21697: Buffer Over-read

Windows Internet Storage Name Service iSNS Server Information Disclosure Vulnerability...

CVE-2023-21699: Out-of-bounds Read

Windows Internet Storage Name Service iSNS Server Information Disclosure Vulnerability...

PT-2023-1442 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient input validation in the Internet Storage Name Service iSNS of Windows operating systems. It allows a remote attacker to cause a denial of service...

Microsoft Internet Storage Name Service 安全漏洞

Microsoft Internet Storage Name Service is used by Microsoft Corporation USA for the interaction between iSNS servers and iSNS clients. A security vulnerability exists in the Microsoft Internet Storage Name Service. The following products and editions are affected: Windows Server 2008 R2 for...

iSNS Microsoft Windows Code Execution

The vulnerability of the Internet Storage Name Service iSNS on Microsoft Windows operating systems is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2021-43215

iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution...

CVE-2021-43215

iSNS Server Memory Corruption Vulnerability Can Lead to Remote Code Execution...

PT-2021-6215 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to incorrect code generation management in the Internet Storage Name Service iSNS of Microsoft Windows. It allows a remote attacker to execute arbitrary code...

Microsoft Internet Information Services 缓冲区错误漏洞

Microsoft Windows Internet Information Services IIS is a Web server for the Windows Server platform from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Internet Storage Name Service. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...