https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:57:31.463134+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-14144 cnvd-2021-14144 2026-10-06T14:57:31.466778+00:00 cnvd-2021-14144 https://cve.radiocsirt.org/vuln/euvd-2026-21725 EUVD-2026-21725 2026-10-06T14:57:31.466809+00:00 EUVD-2026-21725 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20647 fkie_cve-2021-20647 2026-10-06T14:57:31.466824+00:00

Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-S allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector. As a result, the device settings may be altered and/or telnet daemon may be started.

 https://cve.radiocsirt.org/vuln/ghsa-95x3-j4xq-37g5 GHSA-95x3-j4xq-37g5 2026-10-06T14:57:31.466851+00:00

Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-S allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector. As a result, the device settings may be altered and/or telnet daemon may be started.

 https://cve.radiocsirt.org/vuln/gsd-2021-20647 gsd-2021-20647 2026-10-06T14:57:31.466867+00:00 gsd-2021-20647 https://cve.radiocsirt.org/vuln/jvndb-2021-000008 jvndb-2021-000008 2026-10-06T14:57:31.466878+00:00

Multiple products provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. *Improper Access Control (CWE-284) - CVE-2021-20643 *Script injection in web setup page (CWE-74) - CVE-2021-20644 *Stored cross-site scripting (CWE-79) - CVE-2021-20645 *Cross-site request forgery (CWE-352) - CVE-2021-20646, CVE-2021-20647, CVE-2021-20650 *OS command injection (CWE-78) - CVE-2021-20648 *Improper server certificate verification (CWE-295) - CVE-2021-20649 *OS command injection via UPnP (CWE-78) - CVE-2014-8361 CVE-2021-20643 NAGAKAWA(ISHIBASHI), Tsuyoshi of INSTITUTE of INFORMATION SECURITY Yuasa Lab. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20644 Ryo Sato reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20645, CVE-2021-20646 Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20647, CVE-2021-20648, CVE-2021-20649 Satoru Nagaoka of Cyber Defense Institute, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20650 Yutaka WATANABE reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Inf…