CWE-665: Improper Initialization
The product does not initialize or incorrectly initializes a resource.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- cisco application policy infrastructure controller enterprise moduleA vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure...8.8 High
- nvidia gpu display driver, gpu driver +1 moreNVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an...5.5 Medium
- p3scan project p3scanThe daemon in P3Scan 3.0_rc1 and earlier creates a p3scan.pid file after dropping privileges to a...5.5 Medium
- bareosbareos-dir, bareos-fd, and bareos-sd in bareos-core in Bareos 16.2.6 and earlier create a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary proc…7.8 High
- kannelThe server daemons in Kannel 1.5.0 and earlier create a PID file after dropping privileges to a...7.8 High
- openldap, oracle blockchain platform +1 moreslapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root...4.7 Medium
- mimedefangMIMEDefang 2.80 and earlier creates a PID file after dropping privileges to a non-root account,...7.8 High
- linux kernelThe __skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel before 4.3 does...9.8 Critical
- unrealircdUnrealIRCd 4.0.13 and earlier creates a PID file after dropping privileges to a non-root account,...5.5 Medium
- nagiosNagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root...6.3 Medium
- google androidA remote code execution vulnerability in the Android media framework (avc decoder). Product:...7.8 High
- google androidA denial of service vulnerability in the Android media framework (libavc). Product: Android....5.5 Medium
- google androidA remote code execution vulnerability in the Android media framework (libavc). Product: Android....7.8 High
- x.org x serverUninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before...6.5 Medium
- microsoft windows 10, windows server 2016, microsoft corporation windows +2 moreThe graphics component in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016...7.0 High
- google androidA remote denial of service vulnerability in libvpx in Mediaserver could enable an attacker to use...5.5 Medium
- google android, qualcomm, inc. all qualcomm products +1 moreIn Boot in all Android releases from CAF using the Linux kernel, a Use of Uninitialized Variable...7.8 High
- mozilla firefoxAn issue with incorrect ownership model of "privateBrowsing" information exposed through...9.1 Critical
- cisco ios xeA vulnerability in Simple Network Management Protocol (SNMP) functions of Cisco ASR 1000 Series...6.5 Medium
- curlcurl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal...6.5 Medium
- gstreamer, fedoraproject fedora, redhat enterprise linux desktop +5 more +7 moreThe vmnc decoder in the gstreamer does not initialize the render canvas, which allows remote...7.5 High
- qemu, debian linux +1 moreThe vmxnet3_complete_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows...6.0 Medium
- librawThe phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory errors...9.8 Critical
- apple iphone os, mac os x, tvos +2 moreThe network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does...1.9 Low
- sambaSamba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs...3.5 Low
- linux kernelThe br_parse_ip_options function in net/bridge/br_netfilter.c in the Linux kernel before 2.6.39...7.5 High
- mozilla firefox, thunderbird, thunderbird esr +15 more +17 moreMozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and...6.5 Medium
- microsoft internet explorerMicrosoft Internet Explorer 9 does not properly handle the creation and initialization of string...4.3 Medium
- google chromeSkia, as used in Google Chrome before 16.0.912.77, does not perform all required initialization...7.5 High
- linux kernel, canonical ubuntu linux, vmware esx +2 morenet/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize certain data structures,...5.5 Medium
- linux kernel, vmware esx +1 moredrivers/scsi/bfa/bfa_core.c in the Linux kernel before 2.6.35 does not initialize a certain port...5.5 Medium
- apple mac os x, mac os x server +1 moreThe Hash-based Message Authentication Code (HMAC) provider in Java on Apple Mac OS X 10.4.11, 10...8.8 High
- mit kerberos 5, canonical ubuntu linux, debian linux +1 more +3 moreKDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which...9.8 Critical
- apple mac os xThe kernel in Apple Mac OS X 10.4 through 10.4.10 does not reset the current Mach Thread Port or...7.8 High
- phpbbprefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP...8.8 High
- microsoft exchange serverModifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until...7.5 High