Skip to content
OpenAdvisories

Weakness (CWE)

CWE-323: Reusing a Nonce, Key Pair in Encryption

Base Incomplete

Nonces should be used for the present occasion and only once.

How to prevent it (2 mitigations)

  1. Implementation

    Refuse to reuse nonce values.

  2. Implementation

    Use techniques such as requiring incrementing, time based and/or challenge response to assure uniqueness of nonces.

Source: MITRE CWE-323

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-49952 Public exploit

    Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle

    Discuz! X5.0 releases 20260320 through 20260501 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to gain unauthorized access to database backup and restore functionality by exploiting a shared cryptographic key betw…

    Discuz! Discuz! X5.0