https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:32:28.455662+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-04500 bdu:2021-04500 2026-10-03T03:32:28.896545+00:00 bdu:2021-04500 https://cve.radiocsirt.org/vuln/cnvd-2021-59226 cnvd-2021-59226 2026-10-03T03:32:28.896585+00:00 cnvd-2021-59226 https://cve.radiocsirt.org/vuln/euvd-2026-27382 EUVD-2026-27382 2026-10-03T03:32:28.896601+00:00 EUVD-2026-27382 https://cve.radiocsirt.org/vuln/fkie_cve-2021-31228 fkie_cve-2021-31228 2026-10-03T03:32:28.896613+00:00

An issue was discovered in HCC embedded InterNiche 4.0.1. This vulnerability allows the attacker to predict a DNS query's source port in order to send forged DNS response packets that will be accepted as valid answers to the DNS client's requests (without sniffing the specific request). Data is predictable because it is based on the time of day, and has too few bits.

 https://cve.radiocsirt.org/vuln/ghsa-j7p3-x6j6-x86p GHSA-j7p3-x6j6-x86p 2026-10-03T03:32:28.896647+00:00

An issue was discovered in HCC embedded InterNiche 4.0.1. This vulnerability allows the attacker to predict a DNS query's source port in order to send forged DNS response packets that will be accepted as valid answers to the DNS client's requests (without sniffing the specific request). Data is predictable because it is based on the time of day, and has too few bits.

 https://cve.radiocsirt.org/vuln/gsd-2021-31228 gsd-2021-31228 2026-10-03T03:32:28.896664+00:00 gsd-2021-31228 https://cve.radiocsirt.org/vuln/icsa-21-217-01 ICSA-21-217-01 — HCC Embedded InterNiche TCP/IP stack, NicheLite (Update B) 2026-10-03T03:32:28.896675+00:00

When parsing DNS domain names, there are no checks on whether a domain name compression pointer is pointing within the bounds of the packet, which may result in an out-of-bounds read.CVE-2020-25767 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The routine for parsing DNS response packets does not check the response data length field of individual DNS answers, which may cause an out-of-bounds read/write.CVE-2020-25928 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The number of queries or responses specified in the DNS packet header is not validated with the query/response data available in the DNS packet, leading to an out-of-bounds read.CVE-2020-25927 has been assigned to this vulnerability. A CVSS v3 base score of 8.2 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H). The DNS client does not sufficiently randomize transaction IDs, facilitating DNS cache poisoning attacks.CVE-2020-25926 has been assigned to this vulnerability. A CVSS v3 base score of 4.0 has been calculated; the CVSS vector string is (AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N). The code that parses ICMP packets relies on an unchecked value of the IP payload size to compute the ICMP checksum, which may result in an out-of-bounds read.CVE-2020-35683 has been assigned…