UBUNTU-CVE-2021-28091

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature...

CVE-2021-28091

Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature...

Improper Verification of Cryptographic Signature in aws-encryption-sdk-javascript

This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before the ECDSA signature is validated...

Improper Verification of Cryptographic Signature in aws-encryption-sdk-java

This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages...

Schneider Electric homeLYnk and spaceLYnk cryptographic signature vulnerability (CNVD-2021-45718)

Schneider Electric homeLYnk and spaceLYnk are both automation programming software for different logic controllers from Schneider Electric, France. A security vulnerability exists in Schneider Electric homeLYnk and spaceLYnk. An attacker can exploit the vulnerability to execute arbitrary code in...

GitHub Security Lab: [JAVA]: CWE-347 - Improper Verification of Cryptographic Signature : Potential for Auth Bypass

This bug was reported directly to GitHub Security Lab...

CVE-2021-22735

Improper Verification of Cryptographic Signature vulnerability exists inhomeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could allow remote code execution when unauthorized code is copied to the device...

CVE-2021-22734

Improper Verification of Cryptographic Signature vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause remote code execution when an attacker loads unauthorized code...

CVE-2021-22735

Improper Verification of Cryptographic Signature vulnerability exists inhomeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could allow remote code execution when unauthorized code is copied to the device...

CVE-2021-22734

Improper Verification of Cryptographic Signature vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause remote code execution when an attacker loads unauthorized code...

Design/Logic Flaw

Improper Verification of Cryptographic Signature vulnerability exists inhomeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could allow remote code execution when unauthorized code is copied to the device...

Design/Logic Flaw

Improper Verification of Cryptographic Signature vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause remote code execution when an attacker loads unauthorized code...

CVE-2021-22735

Improper Verification of Cryptographic Signature vulnerability exists inhomeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could allow remote code execution when unauthorized code is copied to the device...

CVE-2021-22735

The CVE concerns Schneider Electric homeLYnk and spaceLYnk (Wiser For KNX/SpaceLYnk) up to version 2.60. Root cause: improper verification of cryptographic signatures, which could permit remote code execution if unauthorized code is copied to the device. The connected sources confirm the affected...

CVE-2021-22734

Schneider Electric homeLYnk and spaceLYnk (≤ version 2.60) are affected by an Improper Verification of Cryptographic Signature vulnerability that could allow remote code execution when unauthorized code is loaded. The Connected documents do not provide exploit details, in‑the‑wild status, or a co...

CVE-2021-22734

Improper Verification of Cryptographic Signature vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause remote code execution when an attacker loads unauthorized code...

CVE-2021-22734: Improper Verification of Cryptographic Signature

Improper Verification of Cryptographic Signature vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause remote code execution when an attacker loads unauthorized code...

CVE-2021-22735: Improper Verification of Cryptographic Signature

Improper Verification of Cryptographic Signature vulnerability exists inhomeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could allow remote code execution when unauthorized code is copied to the device...

CVE-2021-22160: Improper Verification of Cryptographic Signature

If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens JWT, the signature of the token is not validated if the algorithm of the presented token is set to "none". This allows an attacker to connect to Pulsar instances as any user incl. admins...

CVE-2021-3421: Improper Verification of Cryptographic Signature

A flaw was found in the RPM package in the read functionality. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package or compromise an RPM repository, to cause RPM database corruption. The highest threat from this vulnerability is to data integrity. This...