CVE-2026-21383

CVE-2026-21383 describes a cryptographic issue in which AES-GCM key wrapping uses a static initialization vector (IV). The static IV conflicts with the requirement for a unique IV per operation, which can undermine confidentiality and integrity. The CVSS 3.1 metrics provided indicate a high impac...

CVE-2025-47345 Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Cryptographic issue may occur while encrypting license data...

CVE-2025-47345 Reusing a Nonce, Key Pair in Encryption in Automotive Platform

Cryptographic issue may occur while encrypting license data...

CVE-2024-36289: Reusing a Nonce, Key Pair in Encryption

Reusing a nonce, key pair in encryption issue exists in "FreeFrom - the nostr client" App versions prior to 1.3.5 for Android and iOS. If this vulnerability is exploited, the content of direct messages DMs between users may be manipulated by a man-in-the-middle attack...

CVE-2023-28997: Reusing a Nonce, Key Pair in Encryption

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server. Starting with version 3.0.0 and prior to version 3.6.5, a malicious server administrator can recover and modify the contents of end-to-end encrypted files. Users should upgrade the Nextcloud Desktop client to 3.6.5...

Johnson Controls Metasys Cryptographic Pair Use

The vulnerability of the Johnson Controls Metasys building automation system lies in the repeated use of a cryptographic pair in encryption processes. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected information...

PT-2019-5780

Name of the Vulnerable Software and Affected Versions Metasys versions prior to 9.0 Description The issue is related to the reuse of a cryptographic pair in encryption, which may allow a remote attacker to impact the confidentiality and integrity of protected information. The Metasys system uses ...

CVE-2017-7902

CVE-2017-7902 affects Rockwell Automation Allen‑Bradley MicroLogix 1100 (1763-L16Axx, 16.00 and earlier) and MicroLogix 1400 (1766-L32Axx, 16.00 and earlier). The issue is nonce reuse in encryption, enabling an attacker to capture and replay a valid request until the nonce changes, potentially co...