https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T22:03:36.526922+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-01237 bdu:2021-01237 2026-10-03T22:03:36.541853+00:00 bdu:2021-01237 https://cve.radiocsirt.org/vuln/certfr-2021-avi-176 certfr-2021-avi-176 — De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un atta… 2026-10-03T22:03:36.541890+00:00 certfr-2021-avi-176 https://cve.radiocsirt.org/vuln/cnvd-2021-16433 cnvd-2021-16433 2026-10-03T22:03:36.541925+00:00 cnvd-2021-16433 https://cve.radiocsirt.org/vuln/euvd-2026-42170 EUVD-2026-42170 2026-10-03T22:03:36.541938+00:00 EUVD-2026-42170 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13987 fkie_cve-2020-13987 2026-10-03T22:03:36.541948+00:00

An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.

 https://cve.radiocsirt.org/vuln/ghsa-g438-vfc9-cq65 GHSA-g438-vfc9-cq65 2026-10-03T22:03:36.541978+00:00

An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.

 https://cve.radiocsirt.org/vuln/gsd-2020-13987 gsd-2020-13987 2026-10-03T22:03:36.541993+00:00 gsd-2020-13987 https://cve.radiocsirt.org/vuln/icsa-20-343-01 ICSA-20-343-01 — Multiple Embedded TCP/IP Stacks 2026-10-03T22:03:36.542003+00:00

The function used in uIP-Contiki-OS to process IPv6 extension headers and extension header options can be forced into an infinite loop state due to unchecked header/option lengths.CVE-2020-13984 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The function used in uIP-Contiki-OS to decapsulate RPL extension headers does not check for unsafe integer conversion when parsing the values provided in a header, allowing an attacker to corrupt memory.CVE-2020-13985 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The function used in uIP-Contiki-OS to decapsulate RPL extension headers does not check the length value of an RPL extension header received, allowing an attacker to cause it to enter an infinite loop.CVE-2020-13986 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The function in open-iscsi, uIP-Contiki-OS, and uIP that parses incoming transport layer packets (TCP/UDP) does not check the length fields of packet headers against the data available in the packets. Given arbitrary lengths, an out-of-bounds memory read may be performed during the checksum computation.CVE-2020-13987 has been assigned to this vulnerability. A CVSS v3 base score of 8.2 has been calculat…

 https://cve.radiocsirt.org/vuln/rhba-2021:4446 RHBA-2021:4446 — Red Hat Bug Fix Advisory: iscsi-initiator-utils bug fix and enhancement update 2026-10-03T22:03:36.542095+00:00

Open-iSCSI: OOB read in checksum calculation in uIP

 https://cve.radiocsirt.org/vuln/suse-ru-2021:1517-1 SUSE-RU-2021:1517-1 — Recommended update for open-iscsi 2026-10-03T22:03:36.542112+00:00

Recommended update for open-iscsi

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13987 UBUNTU-CVE-2020-13987 2026-10-03T22:03:36.542128+00:00

Affected: Ubuntu:Pro:16.04:LTS: open-iscsi, Ubuntu:Pro:18.04:LTS: open-iscsi, Ubuntu:20.04:LTS: open-iscsi

An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1044 WID-SEC-W-2022-1044 — TCP/IP Stack: Mehrere Schwachstellen 2026-10-03T22:03:36.542162+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in TCP/IP Stack ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, einen Denial of Service Angriff durchzuführen, vertrauliche Daten einzusehen oder Daten zu manipulieren.