TYPE DE FAIBLESSE

CWE-323

27 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-323 (en anglais) →

CVE-2026-15890Zephyr RTOS est affecté via son module Internal Trusted Storage (ITS), qui gère les données chiffrées sur le stockage flash. La faille provient du fait que la fonction générant les… 5.3 MOYENNE

CVE-2026-81341Les systèmes utilisant wolfEngine (versions antérieures à 1.4.1) avec des suites de chiffrement AES-CCM explicitement activées pour TLS 1.2 ou DTLS 1.2 sont concernés. Un attaquant… 6.5 MOYENNE

CVE-2026-56369Les versions d'ImageMagick antérieures à 7.1.2-22 sont affectées par une faille dans la manière dont elles chiffrent les images via AES-CTR. Un attaquant peut récupérer les données… 6.3 MOYENNE

CVE-2026-5446Les systèmes utilisant wolfSSL configuré avec ARIA-GCM et le SDK propriétaire MagicCrypto sont concernés. Un attaquant distant disposant de privilèges de bas niveau peut exploiter … 6.0 MOYENNE

CVE-2026-3099Les applications utilisant la bibliothèque Libsoup pour l'authentification digest côté serveur sont vulnérables aux attaques par rejeu d'identifiants. Si un attaquant parvient à in… 5.8 MOYENNE

CVE-2025-46632Initialization vector (IV) reuse in the web management portal of the Tenda RX2 Pro 16.03.30.14 may allow an attacker to discern information about or more easily decrypt encrypted m… 6.5 MOYENNE

CVE-2022-37660In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using… 6.5 MOYENNE

CVE-2024-11022The authentication process to the web server uses a challenge response procedure which inludes the nonce and additional information. This challenge can be used several times for lo… 5.6 MOYENNE

CVE-2024-21530Versions of the package cocoon before 0.4.0 are vulnerable to Reusing a Nonce, Key Pair in Encryption when the encrypt, wrap, and dump functions are sequentially called. An attacke… 4.5 MOYENNE

CVE-2024-41951Pheonix App is a Python application designed to streamline various tasks, from managing files to playing mini-games. The issue is that the map of encoding/decoding languages are vi… 4.4 MOYENNE

CVE-2024-36289Reusing a nonce, key pair in encryption issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS. If this vulnerability is exploited, the conte… 5.3 MOYENNE

CVE-2024-36121 netty-incubator-codec-ohttp is the OHTTP implementation for netty. BoringSSLAEADContext keeps track of how many OHTTP responses have been sent and uses this sequence number to cal… 5.9 MOYENNE

CVE-2023-7003The AES key utilized in the pairing process between a lock using Sciener firmware and a wireless keypad is not unique, and can be reused to compromise other locks using the Sciener… 6.8 MOYENNE

CVE-2024-23688Consensys Discovery versions less than 0.4.5 uses the same AES/GCM nonce for the entire session. which should ideally be unique for every message. The node's private key isn't comp… 5.3 MOYENNE

CVE-2023-4680HashiCorp Vault and Vault Enterprise transit secrets engine allowed authorized users to specify arbitrary nonces, even with convergent encryption disabled. The encrypt endpoint, in… 6.8 MOYENNE

CVE-2023-37467Discourse is an open source discussion platform. Prior to version 3.1.0.beta7 of the `beta` and `tests-passed` branches, a CSP (Content Security Policy) nonce reuse vulnerability w… 6.8 MOYENNE

CVE-2023-28997The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a malicious server administrator can reco… 6.7 MOYENNE

CVE-2021-32791mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID … 5.9 MOYENNE

CVE-2020-1759A vulnerability was found in Red Hat Ceph Storage 4 and Red Hat Openshift Container Storage 4.2 where, A nonce reuse vulnerability was discovered in the secure mode of the messenge… 6.4 MOYENNE

CVE-2019-7593Metasys® ADS/ADX servers and NAE/NIE/NCE engines prior to 9.0 make use of a shared RSA key pair for certain encryption operations involving the Site Management Portal (SMP). 6.8 MOYENNE

CVE-2017-13088Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network Management (WNM) Slee… 5.3 MOYENNE

CVE-2017-13086Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an attacker within radio ran… 6.8 MOYENNE

CVE-2017-13084Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radi… 6.8 MOYENNE

CVE-2017-13081Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshake, allowing an attack… 5.3 MOYENNE

CVE-2017-13080Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames… 5.3 MOYENNE

CVE-2017-13079Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacke… 5.3 MOYENNE

CVE-2017-13078Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio range to replay frames … 5.3 MOYENNE