CWE-665 · Improper Initialization (page 2)
Page 2 of 4 — CVEs classified under CWE-665, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-26084 | Low | 3.7 | 2023-03-15 | The armv8_dec_aes_gcm_full() API of Arm AArch64cryptolib before 86065c6 fails to the verify the authentication tag of AES-GCM protected data, leading to a man-… |
CVE-2023-27115 | Medium | 5.5 | 2023-03-10 | WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::cat_compute_size. |
CVE-2021-22283 | Medium | 6.2 | 2023-02-28 | Improper Initialization vulnerability in ABB Relion protection relays - 611 series, ABB Relion protection relays - 615 series IEC 4.0 FP1, ABB Relion protectio… |
CVE-2023-1048 | Medium | 5.3 | 2023-02-26 | A vulnerability, which was classified as critical, has been found in TechPowerUp Ryzen DRAM Calculator 1.2.0.5. This issue affects some unknown processing in t… |
CVE-2023-1047 | Medium | 5.3 | 2023-02-26 | A vulnerability classified as critical was found in TechPowerUp RealTemp 3.7.0.0. This vulnerability affects unknown code in the library WinRing0x64.sys. The m… |
CVE-2021-3329 | Critical | 9.6 | 2023-02-26 | Lack of proper validation in HCI Host stack initialization can cause a crash of the bluetooth stack |
CVE-2022-34153 | High | 8.2 | 2023-02-16 | Improper initialization in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allow an authenticated user to potentially enable escala… |
CVE-2022-32231 | High | 7.5 | 2023-02-16 | Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local a… |
CVE-2022-30704 | High | 7.2 | 2023-02-16 | Improper initialization in the Intel(R) TXT SINIT ACM for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege vi… |
CVE-2023-23555 | High | 7.5 | 2023-02-01 | On BIG-IP Virtual Edition versions 15.1x beginning in 15.1.4 to before 15.1.8 and 14.1.x beginning in 14.1.5 to before 14.1.5.3, and BIG-IP SPK beginning in 1… |
CVE-2023-0397 | Critical | 9.6 | 2023-01-19 | A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in le_read_buffer_size_complete. |
CVE-2022-46505 | High | 7.5 | 2023-01-18 | An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that c… |
CVE-2023-22466 | Medium | 5.4 | 2023-01-04 | Tokio is a runtime for writing applications with Rust. Starting with version 1.7.0 and prior to versions 1.18.4, 1.20.3, and 1.23.1, when configuring a Windows… |
CVE-2022-3259 | High | 7.4 | 2022-12-09 | Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow man-in-the-middle (MITM) attacks. |
CVE-2022-43468 | High | 7.5 | 2022-12-07 | External initialization of trusted variables or data stores vulnerability exists in WordPress Popular Posts 6.0.5 and earlier, therefore the vulnerable product… |
CVE-2022-46164 | Critical | 9.4 | 2022-12-05 | NodeBB is an open source Node.js based forum software. Due to a plain object with a prototype being used in socket.io message handling a specially crafted payl… |
CVE-2022-37334 | High | 7.8 | 2022-11-11 | Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards before version TNTGL357.0064 may allow an authenticat… |
CVE-2022-39384 | Medium | 5.6 | 2022-11-04 | OpenZeppelin Contracts is a library for secure smart contract development. Before version 4.4.1 but after 3.2.0, initializer functions that are invoked separat… |
CVE-2022-39284 | Low | 2.6 | 2022-10-06 | CodeIgniter is a PHP full-stack web framework. In versions prior to 4.2.7 setting `$secure` or `$httponly` value to `true` in `Config\Cookie` is not reflected… |
CVE-2022-32823 | Medium | 5.5 | 2022-09-23 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7… |
CVE-2022-2472 | High | 7.6 | 2022-09-15 | Improper Initialization vulnerability in the local server component of EZVIZ CS-C6N-A0-1C2WFR allows a local attacker to read the contents of the memory space… |
CVE-2022-36061 | Medium | 6.5 | 2022-09-06 | Elrond go is the go implementation for the Elrond Network protocol. In versions prior to 1.3.35, read only calls between contracts can generate smart contracts… |
CVE-2022-37128 | Critical | 9.8 | 2022-08-31 | In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end. |
CVE-2021-4218 | Medium | 5.5 | 2022-08-24 | A flaw was found in the Linux kernel’s implementation of reading the SVC RDMA counters. Reading the counter sysctl panics the system. This flaw allows a local… |
CVE-2022-32579 | High | 7.2 | 2022-08-18 | Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of… |
CVE-2022-27493 | High | 7.8 | 2022-08-18 | Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable an escalation… |
CVE-2022-24378 | Medium | 5.5 | 2022-08-18 | Improper initialization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable denial of service… |
CVE-2021-23223 | High | 7.8 | 2022-08-18 | Improper initialization for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of pri… |
CVE-2022-2620 | High | 8.8 | 2022-08-12 | Use after free in WebUI in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific user interact… |
CVE-2022-36364 | High | 8.8 | 2022-07-28 | Apache Calcite Avatica JDBC driver creates HTTP client instances based on class names provided via `httpclient_impl` connection property; however, the driver d… |
CVE-2022-29695 | High | 7.5 | 2022-06-02 | Unicorn Engine v2.0.0-rc7 contains memory leaks caused by an incomplete unicorn engine initialization. |
CVE-2022-26722 | High | 7.8 | 2022-05-26 | A memory initialization issue was addressed. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious a… |
CVE-2022-26721 | High | 7.8 | 2022-05-26 | A memory initialization issue was addressed. This issue is fixed in Security Update 2022-004 Catalina, macOS Monterey 12.4, macOS Big Sur 11.6.6. A malicious a… |
CVE-2022-0947 | Critical | 9.0 | 2022-05-10 | A vulnerability in ABB ARG600 Wireless Gateway series that could allow an attacker to exploit the vulnerability by remotely connecting to the serial port gatew… |
CVE-2021-26353 | High | 7.8 | 2022-05-10 | Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulti… |
CVE-2022-20731 | Medium | 4.6 | 2022-04-15 | Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persi… |
CVE-2022-20661 | Medium | 4.6 | 2022-04-15 | Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persi… |
CVE-2022-22186 | High | 7.2 | 2022-04-14 | Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on EX4650 devices, packets received on the management interface (em0) but not dest… |
CVE-2021-44169 | High | 8.2 | 2022-04-06 | A improper initialization in Fortinet FortiClient (Windows) version 6.0.10 and below, version 6.2.9 and below, version 6.4.7 and below, version 7.0.3 and below… |
CVE-2022-1122 | Medium | 5.5 | 2022-03-29 | A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allo… |
CVE-2022-22657 | High | 7.8 | 2022-03-18 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Ope… |
CVE-2022-22719 | High | 7.5 | 2022-03-14 | A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52… |
CVE-2022-0847 | High | 7.8 | 2022-03-10 | A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe funct… |
CVE-2022-24316 | High | 7.5 | 2022-02-09 | A CWE-665: Improper Initialization vulnerability exists that could cause information exposure when an attacker sends a specially crafted message. Affected Prod… |
CVE-2021-0145 | Medium | 5.5 | 2022-02-09 | Improper initialization of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local… |
CVE-2021-0125 | Medium | 6.6 | 2022-02-09 | Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical acc… |
CVE-2021-0119 | Medium | 6.2 | 2022-02-09 | Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical acc… |
CVE-2021-46320 | High | 7.5 | 2022-02-04 | In OpenZeppelin <=v4.4.0, initializer functions that are invoked separate from contract creation (the most prominent example being minimal proxies) may be reen… |
CVE-2022-21724 | High | 7.0 | 2022-02-02 | pgjdbc is the offical PostgreSQL JDBC Driver. A security hole was found in the jdbc driver for postgresql database while doing security research. The system us… |
CVE-2022-22169 | Medium | 5.9 | 2022-01-19 | An Improper Initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker who sends sp… |
CVE-2022-22164 | Medium | 6.5 | 2022-01-19 | An Improper Initialization vulnerability in Juniper Networks Junos OS Evolved may cause a commit operation for disabling the telnet service to not take effect… |
CVE-2021-20613 | High | 7.5 | 2022-01-14 | Improper initialization vulnerability in MELSEC-F series FX3U-ENET Firmware version 1.16 and prior, FX3U-ENET-L Firmware version 1.16 and prior and FX3U-ENET-P… |
CVE-2021-46283 | Medium | 5.5 | 2022-01-11 | nf_tables_newset in net/netfilter/nf_tables_api.c in the Linux kernel before 5.12.13 allows local users to cause a denial of service (NULL pointer dereference… |
CVE-2022-22815 | Medium | 6.5 | 2022-01-10 | path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path. |
CVE-2021-40025 | High | 7.5 | 2022-01-10 | The eID module has a vulnerability that causes the memory to be used without being initialized,Successful exploitation of this vulnerability may affect data co… |
CVE-2021-39636 | Medium | 4.4 | 2021-12-15 | In do_ipt_get_ctl and do_ipt_set_ctl of ip_tables.c, there is a possible way to leak kernel information due to uninitialized data. This could lead to local inf… |
CVE-2021-36319 | Low | 3.3 | 2021-11-20 | Dell Networking OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x contain an information exposure vulnerability. A low privileged authenticated malicious user can… |
CVE-2021-0120 | Medium | 5.5 | 2021-11-17 | Improper initialization in the installer for some Intel(R) Graphics DCH Drivers for Windows 10 before version 27.20.100.9316 may allow an authenticated user to… |
CVE-2021-0053 | Medium | 5.7 | 2021-11-17 | Improper initialization in firmware for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an authenticated user to potentially ena… |
CVE-2021-26326 | High | 7.8 | 2021-11-16 | Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity. |
CVE-2021-26312 | Medium | 5.5 | 2021-11-16 | Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be abl… |
CVE-2021-41264 | Critical | 9.8 | 2021-11-12 | OpenZeppelin Contracts is a library for smart contract development. In affected versions upgradeable contracts using `UUPSUpgradeable` may be vulnerable to an… |
CVE-2021-0423 | Medium | 5.5 | 2021-09-27 | In memory management driver, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no addi… |
CVE-2021-20317 | Medium | 4.4 | 2021-09-27 | A flaw was found in the Linux kernel. A corrupted timer tree caused the task wakeup to be missing in the timerqueue_add function in lib/timerqueue.c. This flaw… |
CVE-2021-34703 | Medium | 6.8 | 2021-09-23 | A vulnerability in the Link Layer Discovery Protocol (LLDP) message parser of Cisco IOS Software and Cisco IOS XE Software could allow an attacker to trigger a… |
CVE-2021-34697 | Medium | 5.8 | 2021-09-23 | A vulnerability in the Protection Against Distributed Denial of Service Attacks feature of Cisco IOS XE Software could allow an unauthenticated, remote attacke… |
CVE-2021-1860 | Medium | 6.5 | 2021-09-08 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in Security Update 2021-002 Catalina, Security Update 2021-003 M… |
CVE-2021-1857 | Medium | 6.5 | 2021-09-08 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina… |
CVE-2021-1820 | Medium | 6.5 | 2021-09-08 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS 14.5, watchOS 7.4, tv… |
CVE-2021-35995 | Low | 3.3 | 2021-09-02 | Adobe After Effects version 18.2.1 (and earlier) is affected by an Improper input validation vulnerability when parsing a specially crafted file. An unauthenti… |
CVE-2021-30962 | Medium | 5.5 | 2021-08-24 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in tvOS 15.2, macOS Big Sur 11.6.2. Parsing a maliciously crafte… |
CVE-2021-36006 | Low | 3.3 | 2021-08-20 | Adobe Photoshop versions 21.2.9 (and earlier) and 22.4.2 (and earlier) are affected by an Improper input validation vulnerability when parsing a specially craf… |
CVE-2021-0061 | High | 7.8 | 2021-08-11 | Improper initialization in some Intel(R) Graphics Driver before version 27.20.100.9030 may allow an authenticated user to potentially enable escalation of priv… |
CVE-2021-0280 | High | 7.5 | 2021-07-15 | Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on PTX platforms and QFX10K Series with Paradise (PE) chipset-based line cards, dd… |
CVE-2020-24475 | Medium | 5.5 | 2021-06-09 | Improper initialization in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authe… |
CVE-2021-0095 | Medium | 4.4 | 2021-06-09 | Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access. |
CVE-2020-24507 | Medium | 4.4 | 2021-06-09 | Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11… |
CVE-2020-12357 | Medium | 6.7 | 2021-06-09 | Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2021-3565 | Medium | 5.9 | 2021-06-04 | A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import used a fixed AES key for the inner wrapper, potentially allowing a MITM a… |
CVE-2021-29614 | High | 7.1 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. The implementation of `tf.io.decode_raw` produces incorrect results and crashes the Pyth… |
CVE-2021-29613 | Medium | 6.3 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in `tf.raw_ops.CTCLoss` allows an attacker to trigger an OOB read… |
CVE-2021-29611 | Low | 3.6 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in `SparseReshape` results in a denial of service based on a `CHEC… |
CVE-2021-29610 | Low | 3.6 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. The validation in `tf.raw_ops.QuantizeAndDequantizeV2` allows invalid values for `axis`… |
CVE-2021-29609 | Medium | 5.3 | 2021-05-14 | TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in `SparseAdd` results in allowing attackers to exploit undefined… |
CVE-2020-28019 | High | 7.5 | 2021-05-06 | Exim 4 before 4.94.2 has Improper Initialization that can lead to recursion-based stack consumption or other consequences. This occurs because use of certain g… |
CVE-2021-0234 | Medium | 5.8 | 2021-04-22 | Due to an improper Initialization vulnerability on Juniper Networks Junos OS QFX5100-96S devices with QFX 5e Series image installed, ddos-protection configurat… |
CVE-2021-0226 | High | 7.1 | 2021-04-22 | On Juniper Networks Junos OS Evolved devices, receipt of a specific IPv6 packet may cause an established IPv6 BGP session to terminate, creating a Denial of Se… |
CVE-2021-0435 | High | 7.5 | 2021-04-13 | In avrc_proc_vendor_command of avrc_api.cc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure w… |
CVE-2021-28688 | Medium | 6.5 | 2021-04-06 | The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went… |
CVE-2021-1780 | Medium | 4.4 | 2021-04-02 | A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.4 and iPadOS 14.4. An attacker in a privileged positio… |
CVE-2020-25578 | Medium | 5.3 | 2021-03-26 | In FreeBSD 12.2-STABLE before r368969, 11.4-STABLE before r369047, 12.2-RELEASE before p3, 12.1-RELEASE before p13 and 11.4-RELEASE before p7 several file syst… |
CVE-2020-35508 | Medium | 4.5 | 2021-03-26 | A flaw possibility of race condition and incorrect initialization of the process id was found in the Linux kernel child/parent process identification handling… |
CVE-2019-10196 | Critical | 9.8 | 2021-03-19 | A flaw was found in http-proxy-agent, prior to version 2.1.0. It was discovered http-proxy-agent passes an auth option to the Buffer constructor without proper… |
CVE-2020-26886 | High | 7.8 | 2021-03-18 | Softaculous before 5.5.7 is affected by a code execution vulnerability because of External Initialization of Trusted Variables or Data Stores. This leads to pr… |
CVE-2021-0453 | Medium | 4.4 | 2021-03-10 | In the Titan-M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with Sy… |
CVE-2021-0452 | Medium | 4.4 | 2021-03-10 | In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with Sy… |
CVE-2021-0451 | Medium | 4.4 | 2021-03-10 | In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with Sy… |
CVE-2021-0450 | Medium | 4.4 | 2021-03-10 | In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with Sy… |
CVE-2021-0449 | Medium | 4.4 | 2021-03-10 | In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with Sy… |
CVE-2020-0522 | Medium | 4.4 | 2021-02-17 | Improper initialization in the firmware for the Intel(R) Ethernet I210 Controller series of network adapters before version 3.30 may allow a privileged user to… |