https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:02:48.541515+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-14143 cnvd-2021-14143 2026-10-06T15:02:48.650986+00:00 cnvd-2021-14143 https://cve.radiocsirt.org/vuln/euvd-2026-21705 EUVD-2026-21705 2026-10-06T15:02:48.651038+00:00 EUVD-2026-21705 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20643 fkie_cve-2021-20643 2026-10-06T15:02:48.651059+00:00

Improper access control vulnerability in ELECOM LD-PS/U1 allows remote attackers to change the administrative password of the affected device by processing a specially crafted request.

 https://cve.radiocsirt.org/vuln/ghsa-xmmf-j7j7-r9v2 GHSA-xmmf-j7j7-r9v2 2026-10-06T15:02:48.651100+00:00

Improper access control vulnerability in ELECOM LD-PS/U1 allows remote attackers to change the administrative password of the affected device by processing a specially crafted request.

 https://cve.radiocsirt.org/vuln/gsd-2021-20643 gsd-2021-20643 2026-10-06T15:02:48.651125+00:00 gsd-2021-20643 https://cve.radiocsirt.org/vuln/jvndb-2021-000008 jvndb-2021-000008 2026-10-06T15:02:48.651144+00:00

Multiple products provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. *Improper Access Control (CWE-284) - CVE-2021-20643 *Script injection in web setup page (CWE-74) - CVE-2021-20644 *Stored cross-site scripting (CWE-79) - CVE-2021-20645 *Cross-site request forgery (CWE-352) - CVE-2021-20646, CVE-2021-20647, CVE-2021-20650 *OS command injection (CWE-78) - CVE-2021-20648 *Improper server certificate verification (CWE-295) - CVE-2021-20649 *OS command injection via UPnP (CWE-78) - CVE-2014-8361 CVE-2021-20643 NAGAKAWA(ISHIBASHI), Tsuyoshi of INSTITUTE of INFORMATION SECURITY Yuasa Lab. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20644 Ryo Sato reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20645, CVE-2021-20646 Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20647, CVE-2021-20648, CVE-2021-20649 Satoru Nagaoka of Cyber Defense Institute, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2021-20650 Yutaka WATANABE reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Inf…