ROS-20260921-73-0083

The vulnerability is related to insecure resource initialization. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

ROS-20260908-73-0066

The vulnerability in nvidia-kmod relates to insecure resource initialization. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

SIMATIC S7 PLC Web Server XSS

The vulnerability of the web server in the SIMATIC S7 PLC is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

EUVD-2026-38089

Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-30805

Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access. This issue affects Pandora FMS: from 777 through 800...

Insecure Default Initialization of Resource

Overview Affected versions of this package are vulnerable to Insecure Default Initialization of Resource due to DNS rebinding protection being disabled by default in HTTP-based servers using StreamableHTTPHandler or SSEHandler. An attacker can access internal resources or invoke tools exposed by...

Spring Boot Actuator Data Compromise

The vulnerability of the Spring Boot Actuator component in the corporate security solution for message exchange via TeleMessage TM SGNL is related to the insecure initialization of resources. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the...

Linux kernel DoS

The vulnerability of the Linux operating system’s kernel is related to insecure resource initialization. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Wago Device Sphere Insecure Initialization

The vulnerability of the software solutions for centralized control of Wago Device Sphere controllers is related to improper session management. Exploiting this vulnerability can allow a malicious actor to gain full access to the tool and all connected devices...

Rockwell Automation ControlLogix Ethernet Module RCE

The vulnerability of Rockwell Automation ControlLogix® Ethernet Module web processors is related to the insecure initialization of resources when a specific IP address is used for connecting to the WDB agent. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

GHSA-794X-8X6X-QPFC Zipkin Server vulnerable to Insecure Resource Initialization through its /heapdump endpoint

Zipkin through 3.5.1 has a /heapdump endpoint associated with the use of Spring Boot Actuator, a similar issue to CVE-2025-48927...

Zipkin Server vulnerable to Insecure Resource Initialization through its /heapdump endpoint

Zipkin through 3.5.1 has a /heapdump endpoint associated with the use of Spring Boot Actuator, a similar issue to CVE-2025-48927...

Mbed TLS Function Unauthenticated Access

The vulnerability of the mbedtlssslsethostname function in Mbed TLS software is related to insecure resource initialization. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Zoom Workplace Insecure Resource Initialization

The vulnerability of software products for conducting Zoom Workplace video conferences on the Windows operating system is related to an insecure initialization of resources. Exploiting this vulnerability could allow an attacker to influence the integrity of protected information...

Schneider Electric Trio Q Licensed Data Radio security vulnerability

The Schneider Electric Trio Q Licensed Data Radio is a radio from Schneider Electric France. The Schneider Electric Trio Q Licensed Data Radio suffers from an information disclosure vulnerability that stems from an insecure initialization of resources, which can be exploited by an attacker to...

Schneider Electric Trio Q Licensed Data Radio security vulnerability

Schneider Electric Trio Q Licensed Data Radio is a radio from Schneider Electric France. A security vulnerability exists in Schneider Electric Trio Q Licensed Data Radio versions prior to v2.7.2, which stems from an insecure resource initialization that could lead to unauthorized access...

CVE-2025-2129

Mage AI 0.9.75 is associated with an insecure default initialization of a resource (insecure default authentication setup) that could enable a remote attack. Documents describe a network-vector, high attack complexity, and partial confidentiality/integrity/availability impact. The exploitability ...

Mage AI security vulnerabilities

Mage AI is a Mage open source intelligent program for building, running and managing data pipelines. A security vulnerability exists in Mage AI version 0.9.75 that stems from insecure resource initialization...

Filament PHP Framework Insecure Resource Disclosure

The vulnerability of the component set of the full stack for the accelerated development of the Filament PHP framework Laravel is related to an insecure initialization of a resource, allowing a malicious actor to exploit this to disclose sensitive information...

Phoenix Contact CHARX SEC-3000 Password Bypass

The vulnerability of the microprogrammed software in modular control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact’s CHARX SEC-3000 is related to an unsafe initialization of resources. Exploiting this vulnerability could allow a malicious actor to reset t...