https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T06:32:17.720699+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-02039 bdu:2022-02039 2026-10-05T06:32:17.829474+00:00 bdu:2022-02039 https://cve.radiocsirt.org/vuln/certfr-2021-avi-706 certfr-2021-avi-706 — De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un atta… 2026-10-05T06:32:17.829509+00:00 certfr-2021-avi-706 https://cve.radiocsirt.org/vuln/cnvd-2021-71450 cnvd-2021-71450 2026-10-05T06:32:17.829530+00:00 cnvd-2021-71450 https://cve.radiocsirt.org/vuln/euvd-2026-48181 EUVD-2026-48181 2026-10-05T06:32:17.829543+00:00 EUVD-2026-48181 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36478 fkie_cve-2020-36478 2026-10-05T06:32:17.829554+00:00

An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.

 https://cve.radiocsirt.org/vuln/ghsa-8xrj-2854-7x44 GHSA-8xrj-2854-7x44 2026-10-05T06:32:17.829580+00:00

An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.

 https://cve.radiocsirt.org/vuln/gsd-2020-36478 gsd-2020-36478 2026-10-05T06:32:17.829596+00:00 gsd-2020-36478 https://cve.radiocsirt.org/vuln/icsa-21-257-20 ICSA-21-257-20 — Siemens LOGO! CMR and SIMATIC RTU 3000 2026-10-05T06:32:17.829607+00:00

The calculations performed in the third-party component Mbed TLS are not limited. Supplying overly large parameters could lead to denial-of-service condition when generating Diffie-Hellman key pairs.CVE-2020-36475 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.CVE-2020-36478 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).

 https://cve.radiocsirt.org/vuln/msrc_cve-2020-36478 msrc_CVE-2020-36478 — An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm param… 2026-10-05T06:32:17.829636+00:00 msrc_CVE-2020-36478 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-36478 UBUNTU-CVE-2020-36478 2026-10-05T06:32:17.829653+00:00

Affected: Ubuntu:16.04:LTS: mbedtls, Ubuntu:Pro:18.04:LTS: mbedtls, Ubuntu:Pro:20.04:LTS: mbedtls

An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS). A NULL algorithm parameters entry looks identical to an array of REAL (size zero) and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate should be considered invalid.