CWE-453: Insecure Default Variable Initialization
The product, by default, initializes an internal variable with an insecure or less secure value than is possible.
A kind of CWE-1188 Initialization of a Resource with an Insecure Default.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +10 more +12 more Microsoft QUIC Security Feature Bypass Vulnerability 7.5 High
-
libsndfileAlpaquita libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse uninitialized variable 5.3 Medium - patriksimek vm2 vm2 before 3.11.7 Sandbox Escape via CLI require 9.3 Critical
- No product listed WonderTrader TraderATP Cash Trade Conversion WTSTradeDef.hpp uninitialized variable 5.3 Medium
- google android In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app access... 10.0 Critical
- openclaw OpenClaw < 2026.3.31 - Environment Variable Override via Host Exec Policy 2.0 Low
- ossf allstar Allstar Reviewbot has Authentication Bypass via Hard-coded Webhook Secret 4.6 Medium
- google android In onNullBinding of RemoteFillService.java, there is a possible background activity launch due to... 7.8 High
- donetick Donetick Has Weak Default JWT Secret 9.1 Critical
- donknap dpanel Dpanel's hard-coded JWT secret leads to remote code execution 9.8 Critical
- microsoft windows server 2012, windows server 2012 (server core installation), windows server 2012 r2 +10 more +12 more Windows Remote Desktop Services Remote Code Execution Vulnerability 8.1 High
- google android there is a possible arbitrary read due to an insecure default value. This could lead to local... 4.4 Medium
- google android In onForegroundServiceButtonClicked of FooterActionsViewModel.kt, there is a possible way to... 7.8 High
- filestash Filestash configured to skip TLS certificate verification when using the FTPS protocol 7.5 High
- fogproject NFS server misconfiguration allows file access outside the exported directory 6.4 Medium
-
fgrPyPI fgr Vulnerable to Insecure Default Variable Initialization 3.7 Low - microsoft skype for consumer, skype +1 more Skype for Consumer Remote Code Execution Vulnerability 8.8 High
- softether vpn An authentication bypass vulnerability exists in the CiRpcAccepted() functionality of SoftEther... 7.3 High
- ghost An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation... 9.0 Critical
- ghost An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation... 9.0 Critical
- ghost An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation... 9.0 Critical
- ghost An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation... 9.0 Critical
- jetbrains teamcity In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default... 6.6 Medium
- redhat openshift A flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve... 8.1 High
- ge ur family, multilin b30 firmware, multilin b90 firmware +17 more +19 more GE UR family insecure default variable initialization 9.8 Critical
- socket socket.io Insecure Defaults 5.3 Medium
- dnnsoftware dotnetnuke DotNetNuke Default Machine Key Exposure 5.1 Medium