Search Vulnerabilities

Reusing a Nonce, Key Pair in Encryption in HLOS

Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure

Session takeover vulnerability

ImageMagick - Information Disclosure via AES-CTR Nonce Reuse in PasskeyEncipherImage

AES-GCM streaming APIs do not reject >64 GiB cumulative single messages, enabling counter wrap and keystream reuse

Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery

Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle

Astro: Server island encrypted parameters vulnerable to cross-component replay

wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse

Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability

Libsoup: libsoup: authentication bypass via digest authentication replay attack

RustDesk Encrypts Local Passwords with World-Readable Machine ID and Fixed Zero Nonce (XSalsa20-Poly1305)

strongMan vulnerable to private credential recovery due to key and counter reuse

Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG reusing a nonce, key pair in encryption

hpke-js reuses AEAD nonces

SICK InspectorP61x and SICK InspectorP62x are vulnerable for a replay attack

Versions of the package cocoon before 0.4.0 are vulnerable to Reusing a Nonce, Key Pair in Encryption when the encrypt, wrap, and dump functions ar...

PheonixAppAPI has visible Encoding Maps

netty-incubator-codec-ohttp's BoringSSLAEADContext Repeats Nonces