# CWE-329. Every Advisory and CVE whose sources give the weakness CWE-329, newest first. ## Records, newest first - [CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted as plaintext.](https://agentprime.io/advisories/CVE-2025-59322.md) `CVE-2025-59322` · CVE record · CVSS 7.5 High · Not analysed yet · Published 12 Aug 2026 · Tags: CWE-329, CWE-703 - [389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryption](https://agentprime.io/advisories/CVE-2026-14969.md) `CVE-2026-14969` · CVE record: Red Hat Red Hat Directory Server 11 and 4 more · CVSS 4.4 Medium · Not analysed yet · Published 7 Jul 2026 · Tags: CWE-329 - [Minosoft has IV equal to key](https://agentprime.io/advisories/CVE-2024-56141.md) `CVE-2024-56141` · CVE record: Bixilon Minosoft · CVSS 5.0 Medium · Not analysed yet · Published 6 Jul 2026 · Tags: CWE-329 - [electerm's encrypt method not safe enough](https://agentprime.io/advisories/GHSA-g29v-q6h7-76wh.md) `GHSA-g29v-q6h7-76wh`, `CVE-2026-45787` · npm `electerm`: affected `<3.9.5`, fixed in `3.9.5` · CVSS 6.0 Medium · Not analysed yet · Published 14 May 2026 · Tags: Weak cryptography or TLS, CWE-329, CWE-353, CWE-759 - [Keylime has a hardcoded attestation challenge nonce that allows replay attacks](https://agentprime.io/advisories/GHSA-q8w6-w55c-ccv5.md) `GHSA-q8w6-w55c-ccv5`, `CVE-2026-6420`, `PYSEC-2026-2548` · PyPI `keylime`: affected `>=7.14.0, <7.14.2`, fixed in `7.14.2` · CVSS 6.3 Medium · Not analysed yet · Published 11 May 2026 · Tags: Authentication bypass, CWE-329, CWE-547, CWE-1241 - [IBM OpenPages with Watson information disclosure](https://agentprime.io/advisories/CVE-2024-49783.md) `CVE-2024-49783` · CVE record: IBM OpenPages with Watson · CVSS 5.3 Medium · Not analysed yet · Published 8 Jul 2025 · Tags: CWE-329 - [Crypt::CBC versions between 1.21 and 3.05 for Perl may use insecure rand() function for cryptographic functions](https://agentprime.io/advisories/CVE-2025-2814.md) `CVE-2025-2814` · CVE record: LDS Crypt::CBC · CVSS 4.0 Medium · Not analysed yet · Published 12 Apr 2025 · Tags: Weak cryptography or TLS, CWE-329, CWE-331 - [FP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode.](https://agentprime.io/advisories/CVE-2022-46397.md) `CVE-2022-46397` · CVE record · CVSS 7.5 High · Not analysed yet · Published 28 Mar 2023 · Tags: CWE-329 - [Fortinet FortiOS: A missing cryptographic steps vulnerability \[CWE-325\] in the functions that encrypt the…](https://agentprime.io/advisories/CVE-2022-29054.md) `CVE-2022-29054` · CVE record: Fortinet FortiOS and 1 more · CVSS 3.1 Low · Not analysed yet · Published 16 Feb 2023 · Tags: CWE-329 - [Ypsomed mylife Cloud, mylife Mobile Application: Ypsomed mylife Cloud, mylife Mobile Application…](https://agentprime.io/advisories/CVE-2021-27499.md) `CVE-2021-27499` · CVE record: Ypsomed mylife Cloud, mylife Mobile Application · No CVSS score · Not analysed yet · Published 2 Aug 2021 · Tags: CWE-329 - [Insufficient Entropy in Spring Security](https://agentprime.io/advisories/GHSA-2ppp-9496-p23q.md) `GHSA-2ppp-9496-p23q`, `CVE-2020-5408` · Maven `org.springframework.security:spring-security-core`: affected `>=5.3.0, <5.3.2 || >=5.2.0, <5.2.4 || >=5.1.0, <5.1.10 || >=5.0.0, <5.0.16 || <4.2.16`, fixed in `5.3.2`, `5.2.4`, `5.1.10`, `5.0.16`, `4.2.16` · CVSS 6.5 Medium · Not analysed yet · Published 15 Jun 2020 · Tags: Weak cryptography or TLS, CWE-329 - [Das U-Boot's AES-CBC encryption feature improperly handles an error condition and may allow attacks against the underlying cryptographic implementation and allow an attacker to decrypt the data](https://agentprime.io/advisories/CVE-2017-3226.md) `CVE-2017-3226` · CVE record: Das U-Boot · No CVSS score · Not analysed yet · Published 24 Jul 2018 · Tags: CWE-329 - [Das U-Boot's AES-CBC encryption feature uses a zero (0) initialization vector that may allow attacks against the underlying cryptographic implementation and allow an attacker to decrypt the data](https://agentprime.io/advisories/CVE-2017-3225.md) `CVE-2017-3225` · CVE record: Das U-Boot · No CVSS score · Not analysed yet · Published 24 Jul 2018 · Tags: CWE-329 - [The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a pad…](https://agentprime.io/advisories/CVE-2014-3566.md) `CVE-2014-3566` · CVE record · CVSS 3.4 Low · EPSS 1.00 · Not analysed yet · Published 15 Oct 2014 · Tags: CWE-329 - [Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.…](https://agentprime.io/advisories/CVE-2008-5161.md) `CVE-2008-5161` · CVE record · CVSS 3.7 Low · EPSS 0.19 · Not analysed yet · Published 19 Nov 2008 · Tags: CWE-329 ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .