Generation of Predictable IV with CBC Mode

Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.

1. The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain clea…CVE-2014-3566Openssl · CVSS 3.4 · 100% likely

   OpenSSL3 bounty reports

2. Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSec…CVE-2008-5161Ssh · CVSS 3.7 · 19% likely

   Ssh

3. Dictionary attack with Spring Security queryable text encryptorCVE-2020-5408Spring by VMware · 1.6% likely

   Spring by VMware

4. FP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode.CVE-2022-46397Lfprojects · CVSS 7.5 · 0.6% likely

   Lfprojects

5. CVE-2023-0343Akuvox · CVSS 6.5 · 0.6% likely

   Akuvox

6. CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted as plaintext.CVE-2025-59322CVSS 7.5 · 0.5% likely
7. Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: All versions prior to 1.7.5,The application layer encryptio…CVE-2021-27499Ypsomed · 0.5% likely
8. IBM OpenPages with Watson information disclosureCVE-2024-49783IBM · CVSS 5.3 · 0.3% likely

   IBM

9. Das U-Boot's AES-CBC encryption feature uses a zero (0) initialization vector that may allow attacks against the underlying cryptographic implementation and allow an attacker to d…CVE-2017-3225Das · 0.3% likely

   Das

10. Das U-Boot's AES-CBC encryption feature improperly handles an error condition and may allow attacks against the underlying cryptographic implementation and allow an attacker to de…CVE-2017-3226Das · 0.3% likely

    Das

11. A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and DNS keys in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4…CVE-2022-29054Fortinet · CVSS 3.1 · 0.2% likely

    Fortinet

12. Minosoft has IV equal to keyCVE-2024-56141Bixilon · CVSS 5 · 0.2% likely
13. Deterministic AES/CBC Encryption in Spring Security AesBytesEncryptor Allows Ciphertext CorrelationCVE-2026-47842Spring · CVSS 6.5 · 0.1% likely

    Spring

14. Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mode vulnerability. A low privileged attacker with local access could po…CVE-2026-86363Dell · CVSS 5.5 · 0.1% likely

    Dell

15. 389-ds-base: 389-ds-base: static initialization vector in aes-cbc/3des-cbc attribute encryptionCVE-2026-14969Red Hat · CVSS 4.4 · 0.1% likely

    Red Hat

16. electerm's encrypt method not safe enoughCVE-2026-45787electerm · CVSS 6 · 0.1% likely

    Electerm Project

17. Multiple Vulnerabilities in IBM API ConnectCVE-2026-17137IBM · CVSS 4 · 0.1% likely

    IBM

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.