CWE-329

CVEs per yearBy the year they were published

1. 20081
2. 20141
3. 20182
4. 20201
5. 20211
6. 20232
7. 20262
8. 20262
9. 20262

Newest CVEs

• CVE-2025-59322

  CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted as plaintext.

  Product not named

  High7.5
• CVE-2026-14969

  389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryption

  Red Hat · Red Hat Directory Server 11

  Medium4.4
• CVE-2024-56141

  Minosoft has IV equal to key

  Bixilon · Minosoft

  Medium5.0
• CVE-2026-45787

  electerm's encrypt method not safe enough

  electerm · electerm

  Medium6.0
• CVE-2024-49783

  IBM OpenPages with Watson information disclosure

  IBM · OpenPages with Watson

  Medium5.3
• CVE-2025-2814

  Crypt::CBC versions between 1.21 and 3.05 for Perl may use insecure rand() function for cryptographic functions

  LDS · Crypt::CBC

  Medium4.0
• CVE-2022-46397

  FP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode.

  Product not named

  High7.5
• CVE-2022-29054

  A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and DNS keys in Fortinet FortiOS version 7.2.0, 7.0.0 through…

  Fortinet · FortiOS

  Low3.1
• CVE-2021-27499

  Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: All versions prior to 1.7.5,The…

  Ypsomed mylife Cloud, mylife Mobile Application

  Medium5.9
• CVE-2020-5408

  Dictionary attack with Spring Security queryable text encryptor

  Spring by VMware · Spring Security

  Medium6.5

Vendors it comes up for most

1. Das2
2. Bixilon1
3. Fortinet1
4. IBM1
5. LDS1
6. Red Hat1
7. Spring by VMware1
8. electerm1