Lucene search
+L

66 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 12:33 p.m.•15 views

CVE-2023-31101

Insecure Default Initialization of Resource Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.5.0 through 1.6.0. Users registered in InLong who joined later can see deleted users' data. Users are advised to upgrade to Apache InLong's 1.7.0 or...

6.5CVSS6.9AI score0.0111EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:57 a.m.•19 views

CVE-2020-12327

Insecure default variable initialization in some IntelR ThunderboltTM DCH drivers for Windows before version 72 may allow a privileged user to potentially enable information disclosure via local access...

4.4CVSS6.2AI score0.00315EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•24 views

EUVD-2020-4639

Malware in sbrugna...

4.4CVSS4.9AI score0.00315EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•24 views

EUVD-2025-7513

Malicious code in bioql PyPI...

6.3CVSS6.1AI score0.01068EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-10251

Malicious code in bioql PyPI...

5.5CVSS6.4AI score0.00164EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/09/29 12:00 a.m.•10 views

GE UR family Insecure Default Variable Initialization (CVE-2021-27426)

GE UR IED firmware versions prior to version 8.1x with Basic security variant does not allow the disabling of the Factory Mode, which is used for servicing the IED by a Factory user. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

9.8CVSS7.3AI score0.0121EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/09/25 12:00 a.m.•14 views

The vulnerability of the generateRandomPassword() function in the LocalBluetoothLeBroadcast.java module for Android operating systems allows a hacker to disclose confidential information.

The vulnerability of the generateRandomPassword function in the LocalBluetoothLeBroadcast.java module of Android operating systems is related to insecure resource initialization. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information...

5.7CVSS5.7AI score0.00128EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/05/19 12:00 a.m.•17 views

The vulnerability of programming tools for balancing and managing connections in Pgpool-II and HAProxy for PostgreSQL databases lies in their insecure resource initialization, which allows attackers to gain unauthorized access to the database.

The vulnerabilities of the Pgpool-II and HAProxy software for PostgreSQL databases in terms of connection balancing and management involve insecure resource initialization. Exploiting these vulnerabilities can allow an attacker, operating remotely, to gain unauthorized access to the database with...

9.6CVSS5.5AI score0.00499EPSS
SaveExploits0References2Affected Software2
Snyk
Snyk
•added 2025/04/25 6:30 a.m.•3 views

Insecure Default Initialization of Resource

Overview Affected versions of this package are vulnerable to Insecure Default Initialization of Resource due to the misconfiguration of the ReadOnlyPort setting. An attacker can gain unauthorized access to exposed credentials by connecting to the open port without authentication. Remediation...

6.9CVSS7AI score0.00451EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/04/24 12:00 a.m.•13 views

The vulnerability of the integrated development environment for software, JetBrains RubyMine, arises from insecure resource initialization, allowing attackers to exploit it to disclose protected information.

The vulnerability of the integrated development environment for software, JetBrains RubyMine, is related to the insecure initialization of resources. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

8.3CVSS5.4AI score0.00251EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/04/14 12:00 a.m.•17 views

The vulnerability of the Factory Default configuration of the Microprogramming Software for Digital Radio Data Transmission Devices Trio Q Data Radio, which allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Factory Default configuration of the Microprogramming Software for Digital Radio Data Transmission Devices from Trio Q Data Radio is related to the insecure initialization of resources. Exploiting this vulnerability can allow an intruder to gain unauthorized access to...

4.9CVSS5.5AI score0.00225EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/04/14 12:00 a.m.•18 views

The vulnerability of the Factory Default configuration of the Microprogramming Software for Digital Radio Data Transmission Devices Trio Q Data Radio, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Factory Default configuration of the Microprogramming Software for Digital Radio Data Transmission Devices from Trio Q Data Radio is related to the insecure initialization of resources. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

7.2CVSS5.5AI score0.00249EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
•added 2025/04/11 3:12 a.m.•25 views

CVE-2025-27443

Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access...

2.8CVSS6.6AI score0.00164EPSS
SaveExploits0References3
Snyk
Snyk
•added 2025/04/09 1:53 p.m.•26 views

Insecure Default Initialization of Resource

Overview shopware/core is a Shopware platform is the core for all Shopware ecommerce products. Affected versions of this package are vulnerable to Insecure Default Initialization of Resource via the default newsletter opt-in settings. An attacker can abuse the system for mass unsolicited newslett...

6.9CVSS7AI score0.00305EPSS
SaveExploits0References2
CVE
CVE
•added 2025/04/08 4:16 p.m.•82 views

CVE-2025-27443

CVE-2025-27443 concerns Zoom Workplace Apps for Windows, caused by insecure default variable initialization in the affected software. The vulnerability could allow an authenticated user to cause a loss of integrity via local access. Multiple connected sources consistently describe the issue in Zo...

5.5CVSS6.8AI score0.00164EPSS
SaveExploits0References1Affected Software4
Cvelist
Cvelist
•added 2025/04/08 4:16 p.m.•69 views

CVE-2025-27443 Zoom Workplace Apps for Windows - Insecure Default Variable Initialization

Insecure default variable initialization in some Zoom Workplace Apps for Windows may allow an authenticated user to conduct a loss of integrity via local access...

2.8CVSS0.00164EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/08 12:00 a.m.•15 views

PT-2025-15464 · Zoom · Zoom Workplace Apps

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps for Windows affected versions not specified Description: The issue is related to insecure default variable initialization, which may allow an authenticated user to conduct a loss of integrity via local access...

5.5CVSS6.6AI score0.00164EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2025/04/08 12:00 a.m.•15 views

Zoom Workplace 安全漏洞

Zoom Workplace Apps for Windows is an official suite of collaboration tools from Zoom that includes core features such as team chat, whiteboards, notes, and more, and is required to be used through a Zoom Meetings account. A security vulnerability exists in Zoom Workplace Apps for Windows, which...

5.5CVSS6.7AI score0.00164EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/08 12:00 a.m.•16 views

PT-2025-15688 · Schneider Electric · Trio Q Data Radio +1

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A vulnerability exists due to the initialization of a resource with an insecure default, potentially leading to unauthorized access. This could result in the loss of confidentiality,...

7.2CVSS5.8AI score0.00249EPSS
SaveExploits0References8
CNVD
CNVD
•added 2024/10/23 12:00 a.m.•26 views

Apache Solr Code Issue Vulnerability

Apache Solr is the United States Apache Apache Foundation of a search server based on Lucene a full-text search engine. The product supports level search , vertical search , highlighting search results and so on. A code issue vulnerability exists in Apache Solr, which stems from the presence of a...

8.1CVSS6.7AI score0.00742EPSS
SaveExploits0References1
Rows per page
Query Builder