agentprime: CWE-323

CVE-2026-109140: Krill login-session tokens reuse their encryption nonce across restarts, so any user who can log in can forge an "admin" token

Mon, 02 Nov 2026 15:41:58 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-71884: Packet CTR reports a full success length after the counter is exhausted

Fri, 09 Oct 2026 09:30:50 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-15890: AEAD nonce reuse in Zephyr secure_storage ITS default nonce provider due to missing thread synchronization

Mon, 21 Sep 2026 21:16:04 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-81341: wolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records

Fri, 28 Aug 2026 14:43:43 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-81020: wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

Fri, 28 Aug 2026 14:42:59 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-81019: wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record

Fri, 28 Aug 2026 14:42:01 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-50577: ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counter

Tue, 18 Aug 2026 16:52:38 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-17578: Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcement

Wed, 05 Aug 2026 10:20:55 GMT

CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-21383: Reusing a Nonce, Key Pair in Encryption in HLOS

Mon, 06 Jul 2026 20:09:39 GMT

CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-59099: Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure

Thu, 02 Jul 2026 19:42:51 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-13602: Session takeover vulnerability

Wed, 01 Jul 2026 13:45:30 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-55967: AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse

Thu, 25 Jun 2026 16:53:14 GMT

CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-12205: Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery

Mon, 15 Jun 2026 21:57:18 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-49952: Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle

Mon, 15 Jun 2026 18:43:21 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

ImageMagick: Information Disclosure in PasskeyEncipherImage via AES-CTR nonce reuse

Thu, 21 May 2026 21:49:09 GMT

Magick.NET-Q16-AnyCPU <14.12.0, fixed in 14.12.0. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Astro: Server island encrypted parameters vulnerable to cross-component replay

Wed, 13 May 2026 01:36:39 GMT

astro <6.1.10, fixed in 6.1.10. CVSS 2.9 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Bouncy Castle for Java GOST 28147 CTR mode reuses keystream after 255 blocks

Fri, 17 Apr 2026 18:31:50 GMT

org.bouncycastle:bcprov-debug-jdk14 >=1.59, <=1.80.1 || >=1.82, <1.84, fixed in 1.84. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-5446: wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse

Thu, 09 Apr 2026 21:02:27 GMT

CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-3559: Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability

Fri, 13 Mar 2026 20:36:57 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-3099: Libsoup: libsoup: authentication bypass via digest authentication replay attack

Thu, 12 Mar 2026 13:53:48 GMT

CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-30785: RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)

Thu, 05 Mar 2026 16:04:36 GMT

CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-25998: strongMan vulnerable to private credential recovery due to key and counter reuse

Thu, 19 Feb 2026 15:51:35 GMT

CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-59870: Improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security risk

Fri, 16 Jan 2026 10:12:01 GMT

CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-47345: Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Tue, 06 Jan 2026 22:48:39 GMT

CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-61739: Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG reusing a nonce, key pair in encryption

Mon, 22 Dec 2025 10:19:34 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

@hpke/core reuses AEAD nonces

Thu, 20 Nov 2025 17:36:13 GMT

@hpke/core <1.7.5, fixed in 1.7.5. CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-46632: Initialization vector (IV) reuse in the web management portal of the Tenda RX2 Pro 16.03.30.14 may allow an attacker to discern information about or more easily decrypt encrypted messages between cli…

Thu, 01 May 2025 00:00:00 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2022-37660: In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association.

Tue, 11 Feb 2025 00:00:00 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-11022: SICK InspectorP61x and SICK InspectorP62x are vulnerable for a replay attack

Fri, 06 Dec 2024 12:13:50 GMT

CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Duplicate Advisory: cocoon Reuses a Nonce, Key Pair in Encryption

Wed, 02 Oct 2024 06:30:26 GMT

cocoon <0.4.0, fixed in 0.4.0. CVSS 4.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

HashiCorp Vault Improper Input Validation vulnerability in github.com/hashicorp/vault

Wed, 21 Aug 2024 14:30:18 GMT

github.com/hashicorp/vault >=1.6.0, <1.12.11 || >=1.13.0, <1.13.7 || >=1.14.0, <1.14.3, fixed in 1.12.11, 1.13.7, 1.14.3. CVSS 6.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

PheonixAppAPI has visible Encoding Maps

Wed, 31 Jul 2024 21:04:28 GMT

pheonixappapi <0.2.5, fixed in 0.2.5. CVSS 4.4 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Withdrawn: SFTPGo's JWT implmentation lacks certain security measures

Mon, 22 Jul 2024 09:31:55 GMT

github.com/drakkan/sftpgo/v2 <=2.6.2, no fixed version yet. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2024-36289: Reusing a nonce, key pair in encryption issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS.

Mon, 17 Jun 2024 07:34:25 GMT

CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

BoringSSLAEADContext in Netty Repeats Nonces

Wed, 05 Jun 2024 16:53:49 GMT

io.netty.incubator:netty-incubator-codec-ohttp >=0.0.3.Final, <0.0.11.Final, fixed in 0.0.11.Final. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-7003: CVE-2023-7003

Fri, 15 Mar 2024 17:09:14 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Duplicate Advisory: Discovery uses the same AES/GCM Nonce throughout the session

Sat, 20 Jan 2024 00:30:27 GMT

tech.pegasys.discovery:discovery <0.4.5, fixed in 0.4.5. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2022-24401: Keystream recovery for arbitrary frames in TETRA

Thu, 19 Oct 2023 09:32:53 GMT

CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-37467: Discourse CSP nonce reuse vulnerability for anonymous users

Fri, 28 Jul 2023 14:42:06 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-28997: Nextcloud Desktop: Initialization vector reuse in E2EE allows malicious server admin to break, manipulate, access files

Tue, 04 Apr 2023 12:42:24 GMT

CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Inbound TCP Agent Protocol/3 authentication bypass in Jenkins

Tue, 24 May 2022 17:07:40 GMT

org.jenkins-ci.main:jenkins-core <2.204.2 || >=2.205, <2.214, fixed in 2.204.2, 2.214. CVSS 8.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2021-32791: Hardcoded static IV and AAD with a reused key in AES GCM encryption in mod_auth_openidc

Mon, 26 Jul 2021 00:00:00 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Discovery uses the same AES/GCM Nonce throughout the session

Tue, 06 Apr 2021 17:22:17 GMT

tech.pegasys.discovery:discovery <0.4.5, fixed in 0.4.5. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2020-1759: ceph: A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container…

Mon, 13 Apr 2020 12:04:04 GMT

CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2019-7593: Metasys use of shared RSA key pairs

Tue, 20 Aug 2019 18:22:43 GMT

CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2017-13088: Wi-Fi Alliance Wi-Fi Protected Access (WPA and WPA2): Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the…

Tue, 17 Oct 2017 13:00:00 GMT