<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-329</title><description>Every new CWE-329 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2025-59322: CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted as plaintext.</title><link>https://agentprime.io/advisories/CVE-2025-59322/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-59322/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Aug 2026 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-14969: 389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryption</title><link>https://agentprime.io/advisories/CVE-2026-14969/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-14969/</guid><description>CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Jul 2026 15:48:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-56141: Minosoft has IV equal to key</title><link>https://agentprime.io/advisories/CVE-2024-56141/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-56141/</guid><description>CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 06 Jul 2026 23:17:54 GMT</pubDate><category>CVE</category></item><item><title>electerm&apos;s encrypt method not safe enough</title><link>https://agentprime.io/advisories/GHSA-g29v-q6h7-76wh/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-g29v-q6h7-76wh/</guid><description>electerm &lt;3.9.5, fixed in 3.9.5. CVSS 6.0 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Thu, 14 May 2026 20:30:04 GMT</pubDate><category>npm</category><category>electerm</category></item><item><title>Keylime has a hardcoded attestation challenge nonce that allows replay attacks</title><link>https://agentprime.io/advisories/GHSA-q8w6-w55c-ccv5/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-q8w6-w55c-ccv5/</guid><description>keylime &gt;=7.14.0, &lt;7.14.2, fixed in 7.14.2. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 11 May 2026 14:42:46 GMT</pubDate><category>PyPI</category><category>keylime</category></item><item><title>CVE-2024-49783: IBM OpenPages with Watson information disclosure</title><link>https://agentprime.io/advisories/CVE-2024-49783/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-49783/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Jul 2025 18:36:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-2814: Crypt::CBC versions between 1.21 and 3.05 for Perl may use insecure rand() function for cryptographic functions</title><link>https://agentprime.io/advisories/CVE-2025-2814/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2814/</guid><description>CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 12 Apr 2025 23:41:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-46397: FP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode.</title><link>https://agentprime.io/advisories/CVE-2022-46397/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-46397/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 28 Mar 2023 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-29054: Fortinet FortiOS: A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the…</title><link>https://agentprime.io/advisories/CVE-2022-29054/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-29054/</guid><description>CVSS 3.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 16 Feb 2023 18:07:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-27499: Ypsomed mylife Cloud, mylife Mobile Application: Ypsomed mylife Cloud, mylife Mobile Application…</title><link>https://agentprime.io/advisories/CVE-2021-27499/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-27499/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Aug 2021 20:42:09 GMT</pubDate><category>CVE</category></item><item><title>Insufficient Entropy in Spring Security</title><link>https://agentprime.io/advisories/GHSA-2ppp-9496-p23q/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-2ppp-9496-p23q/</guid><description>org.springframework.security:spring-security-core &gt;=5.3.0, &lt;5.3.2 || &gt;=5.2.0, &lt;5.2.4 || &gt;=5.1.0, &lt;5.1.10 || &gt;=5.0.0, &lt;5.0.16 || &lt;4.2.16, fixed in 5.3.2, 5.2.4, 5.1.10, 5.0.16, 4.2.16. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Mon, 15 Jun 2020 19:34:31 GMT</pubDate><category>Maven</category><category>org.springframework.security:spring-security-core</category></item><item><title>CVE-2017-3226: Das U-Boot&apos;s AES-CBC encryption feature improperly handles an error condition and may allow attacks against the underlying cryptographic implementation and allow an attacker to decrypt the data</title><link>https://agentprime.io/advisories/CVE-2017-3226/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-3226/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 24 Jul 2018 15:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2017-3225: Das U-Boot&apos;s AES-CBC encryption feature uses a zero (0) initialization vector that may allow attacks against the underlying cryptographic implementation and allow an attacker to decrypt the data</title><link>https://agentprime.io/advisories/CVE-2017-3225/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2017-3225/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 24 Jul 2018 15:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2014-3566: The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a pad…</title><link>https://agentprime.io/advisories/CVE-2014-3566/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2014-3566/</guid><description>CVSS 3.4 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 15 Oct 2014 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2008-5161: Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.…</title><link>https://agentprime.io/advisories/CVE-2008-5161/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2008-5161/</guid><description>CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Nov 2008 17:00:00 GMT</pubDate><category>CVE</category></item></channel></rss>