PT-2021-28806

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-28690

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. This is an automated ID intended to aid in the discovery of potential security...

PT-2021-28882

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.119 Description The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2021-24812

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2021-28916

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.191 Description The issue allows only the init netns to set the default TCP congestion algorithm to a restricted algorithm. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2021-24888

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.119 Description: The issue allows only the init netns to set the default TCP congestion algorithm to a restricted one. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

Schneider Electric homeLYnk and spaceLYnk Unauthorized Access Vulnerability

Schneider Electric homeLYnk and spaceLYnk are both automation programming software for different logic controllers from Schneider Electric, France. An unauthorized access vulnerability exists in Schneider Electric homeLYnk and spaceLYnk, which arises from the presence of a broken or dangerous...

CVE-2021-22738

Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior that could cause unauthorized access when credentials are discovered after a brute force attack...

Design/Logic Flaw

Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior that could cause unauthorized access when credentials are discovered after a brute force attack...

CVE-2021-22738

Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior that could cause unauthorized access when credentials are discovered after a brute force attack...

CVE-2021-22738

CVE-2021-22738 affects Schneider Electric homeLYnk and spaceLYnk (versions up to and including 2.60). The root cause is use of a broken or risky cryptographic algorithm that could allow unauthorized access after credentials are discovered via brute force. The Red Hat, CNVD, CVE/NVD entries corrob...

CVE-2021-22738

Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior that could cause unauthorized access when credentials are discovered after a brute force attack...

CVE-2021-22160

If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens JWT, the signature of the token is not validated if the algorithm of the presented token is set to "none". This allows an attacker to connect to Pulsar instances as any user incl. admins...

CVE-2021-22160

If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens JWT, the signature of the token is not validated if the algorithm of the presented token is set to "none". This allows an attacker to connect to Pulsar instances as any user incl. admins...

Code injection

If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens JWT, the signature of the token is not validated if the algorithm of the presented token is set to "none". This allows an attacker to connect to Pulsar instances as any user incl. admins...

CVE-2021-22160

If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens JWT, the signature of the token is not validated if the algorithm of the presented token is set to "none". This allows an attacker to connect to Pulsar instances as any user incl. admins...

CVE-2021-22738: Use of a Broken or Risky Cryptographic Algorithm

Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior that could cause unauthorized access when credentials are discovered after a brute force attack...

CVE-2021-22160: Improper Verification of Cryptographic Signature

If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens JWT, the signature of the token is not validated if the algorithm of the presented token is set to "none". This allows an attacker to connect to Pulsar instances as any user incl. admins...

Code injection

IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196280...

CVE-2021-20419: Use of a Broken or Risky Cryptographic Algorithm

IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196280...