CWE-329 — known CVE vulnerabilities

CVEs classified under CWE-329, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2022-46397 — CVSS 7.5 (high): FP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable…
• CVE-2024-49783 — CVSS 5.3 (medium): IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data. If an authenticated remote…
• CVE-2024-56141 — CVSS 5.0 (medium): Minosoft is an open-source, multi-version Minecraft Java Edition client written in Kotlin. Starting in commit f1ae30e2b046a490026a8413b07568…
• CVE-2026-14969 — CVSS 4.4 (medium): A flaw was found in 389-ds-base where the LDBM backend attribute encryption uses a hardcoded static initialization vector for AES-CBC and…
• CVE-2025-2814 — CVSS 4.0 (medium): Crypt::CBC versions between 1.21 and 3.05 for Perl may use the rand() function as the default source of entropy, which is not…
• CVE-2022-29054 — CVSS 3.3 (low): A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and DNS keys in Fortinet FortiOS version…