https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 18:01:01 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-092 certfr-2022-avi-092 https://cve.radiocsirt.org/vuln/certfr-2022-avi-092 https://cve.radiocsirt.org/vuln/euvd-2026-20723 EUVD-2026-20723 https://cve.radiocsirt.org/vuln/euvd-2026-20723 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3139 <p>In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev in tcmur_cmd_handler.c lacks a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY request. For example, an attack can occur over a network if the attacker has access to one iSCSI LUN. NOTE: relative to CVE-2020-28374, this is a similar mistake in a different algorithm.</p> <p>In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev in tcmur_cmd_handler.c lacks a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY request. For example, an attack can occur over a network if the attacker has access to one iSCSI LUN. NOTE: relative to CVE-2020-28374, this is a similar mistake in a different algorithm.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-3139 https://cve.radiocsirt.org/vuln/ghsa-j364-gjm2-cwx8 <p>In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev in tcmur_cmd_handler.c lacks a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY request. For example, an attack can occur over a network if the attacker has access to one iSCSI LUN. NOTE: relative to CVE-2020-28374, this is a similar mistake in a different algorithm.</p> <p>In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev in tcmur_cmd_handler.c lacks a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY request. For example, an attack can occur over a network if the attacker has access to one iSCSI LUN. NOTE: relative to CVE-2020-28374, this is a similar mistake in a different algorithm.</p> https://cve.radiocsirt.org/vuln/ghsa-j364-gjm2-cwx8 https://cve.radiocsirt.org/vuln/gsd-2021-3139 gsd-2021-3139 https://cve.radiocsirt.org/vuln/gsd-2021-3139 https://cve.radiocsirt.org/vuln/opensuse-su-2021:0097-1 <p>Security update for tcmu-runner</p> <p>Security update for tcmu-runner</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:0097-1 https://cve.radiocsirt.org/vuln/rhsa-2021:1452 <p>ceph: mgr modules&#39; passwords are in clear text in mgr logs tcmu-runner: SCSI target (LIO) write to any block on ILO backstore</p> <p>ceph: mgr modules&#39; passwords are in clear text in mgr logs tcmu-runner: SCSI target (LIO) write to any block on ILO backstore</p> https://cve.radiocsirt.org/vuln/rhsa-2021:1452 https://cve.radiocsirt.org/vuln/suse-su-2021:0093-1 <p>Security update for tcmu-runner</p> <p>Security update for tcmu-runner</p> https://cve.radiocsirt.org/vuln/suse-su-2021:0093-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3139 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: tcmu, Ubuntu:22.04:LTS: tcmu, Ubuntu:24.04:LTS: tcmu, Ubuntu:25.10: tcmu, Ubuntu:26.04:LTS: tcmu</p> <p>In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev in tcmur_cmd_handler.c lacks a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY request. For example, an attack can occur over a network if the attacker has access to one iSCSI LUN. NOTE: relative to CVE-2020-28374, this is a similar mistake in a different algorithm.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: tcmu, Ubuntu:22.04:LTS: tcmu, Ubuntu:24.04:LTS: tcmu, Ubuntu:25.10: tcmu, Ubuntu:26.04:LTS: tcmu</p> <p>In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev in tcmur_cmd_handler.c lacks a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY request. For example, an attack can occur over a network if the attacker has access to one iSCSI LUN. NOTE: relative to CVE-2020-28374, this is a similar mistake in a different algorithm.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3139