Skip to content
OpenAdvisories

Archive

18 June 2021

Vulnerabilities first published on this day (UTC), newest first.

← May 2021 2021 / June /18 July 2021 →
  1. 179
  2. 278
  3. 353
  4. 460
  5. 5 
  6. 67
  7. 763
  8. 8108
  9. 9184
  10. 1075
  11. 11158
  12. 1214
  13. 131
  14. 1432
  15. 1557
  16. 1688
  17. 1733
  18. 1840
  19. 19 
  20. 201
  21. 2182
  22. 22104
  23. 2337
  24. 24103
  25. 2547
  26. 26 
  27. 271
  28. 2875
  29. 2962
  30. 3069
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.2
    CVE-2021-21410

    Out-of-bounds read in the 6LoWPAN implementation

    Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be triggered by 6LoWPAN packets sent to devices running Contiki-NG 4.6 and prior. The IPv6 header decompression function (<code>uncompress…

    Contiki-NG Contiki-NG
  • High 8.2
    CVE-2021-21257

    Out-of-bounds write in RPL-Classic and RPL-Lite

    Contiki-NG is an open-source, cross-platform operating system for internet of things devices. The RPL-Classic and RPL-Lite implementations in the Contiki-NG operating system versions prior to 4.6 do not validate the address pointer in the RPL source routing h…

    Contiki-NG Contiki-NG
  • High 7.5
    CVE-2021-21279

    Infinite loop in IPv6 neighbor solicitation processing

    Contiki-NG is an open-source, cross-platform operating system for internet of things devices. In verions prior to 4.6, an attacker can perform a denial-of-service attack by triggering an infinite loop in the processing of IPv6 neighbor solicitation (NS) messa…

    Contiki-NG Contiki-NG
  • High 8.6
    CVE-2021-21280

    Out-of-bounds write when processing 6LoWPAN extension headers

    Contiki-NG is an open-source, cross-platform operating system for internet of things devices. It is possible to cause an out-of-bounds write in versions of Contiki-NG prior to 4.6 when transmitting a 6LoWPAN packet with a chain of extension headers. Unfortuna…

    Contiki-NG Contiki-NG
  • High 7.0
    CVE-2021-21281

    Buffer overflow due to unvalidated TCP data offset

    Contiki-NG is an open-source, cross-platform operating system for internet of things devices. A buffer overflow vulnerability exists in Contiki-NG versions prior to 4.6. After establishing a TCP socket using the tcp-socket library, it is possible for the remo…

    Contiki-NG Contiki-NG
  • High 8.6
    CVE-2021-21282

    Buffer overflow in RPL source routing header processing

    Contiki-NG is an open-source, cross-platform operating system for internet of things devices. In versions prior to 4.5, buffer overflow can be triggered by an input packet when using either of Contiki-NG's two RPL implementations in source-routing mode. The p…

    Contiki-NG Contiki-NG
  • High 8.8
    CVE-2021-23846

    B426 Credential Disclosure

    When using http protocol, the user password is transmitted as a clear text parameter for which it is possible to be obtained by an attacker through a MITM attack. This will be fixed starting from Firmware version 3.11.5, which will be released on the 30th of …

    Bosch B426 Firmware
  • High 8.0
    CVE-2021-23845

    B426 Web Configuration Authentication Bypass

    This vulnerability could allow an attacker to hijack a session while a user is logged in the configuration web page. This vulnerability was discovered by a security researcher in B426 and found during internal product tests in B426-CN/B429-CN, and B426-M and …

    Bosch B426 Firmware B426-CN/B429- CN Firmware B426-M Firmware