Dassault Systèmes SOLIDWORKS eDrawings 安全漏洞

Dassault Systèmes SOLIDWORKS eDrawings is a collaboration tool for viewing, sharing, and labeling 2D/3D design files from Dassault Systèmes, France. A security vulnerability exists in Dassault Systèmes SOLIDWORKS eDrawings, which originates from the presence of uninitialized variables during the...

Honeywell Experion PKS 安全漏洞

Honeywell Experion PKS is a process automation system from Honeywell USA. A security vulnerability exists in Honeywell Experion PKS versions 520.1 to 520.2 TCU9 and 530 to 530 TCU3, which stems from uninitialized variables and could result in a denial of service...

The vulnerability of the gsf_base64_encode_simple function in the structured files library. The GNOME Project’s libgsf allows attackers to compromise the confidentiality of protected information.

The vulnerability of the gsfbase64encodesimple function in the structured file library: The GNOME Project’s libgsf relies on the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the use of uninitialized variables in the wilwritefilewmi function...

The vulnerability of the dcpd service in the microprogramming software of Siemens Scalance LPE9403 allows a hacker to trigger a maintenance failure.

The vulnerability of the dcpd service in Siemens Scalance LPE9403 microprogrammed switching devices is related to the use of uninitialized variables. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by sending specially crafted malware packages...

CVE-2024-31874

IBM Security Verify Access Appliance 10.0.0 through 10.0.7 uses uninitialized variables when deploying that could allow a local user to cause a denial of service. IBM X-Force ID: 287318...

CVE-2023-1719

Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300 allows unauthenticated remote attackers to 1 enumerate attachments on the server and 2 execute arbitrary JavaScript code in the victim's browser, and possibly execute arbitrary PHP code on the server if the victim ha...

CVE-2025-37990

In the Linux kernel, the following vulnerability has been resolved: wifi: brcm80211: fmac: Add error handling for brcmfusbdlwriteimage The function brcmfusbdlwriteimage calls the function brcmfusbdlcmd but dose not check its return value. The 'state.state' and the 'state.bytes' are uninitialized ...

CVE-2025-37990 wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()

In the Linux kernel, the following vulnerability has been resolved: wifi: brcm80211: fmac: Add error handling for brcmfusbdlwriteimage The function brcmfusbdlwriteimage calls the function brcmfusbdlcmd but dose not check its return value. The 'state.state' and the 'state.bytes' are uninitialized ...

CVE-2025-37990

CVE-2025-37990 affects the Linux kernel’s wifi/brcm80211 fmac, where brcmf_usb_dl_writeimage() did not validate the return value of brcmf_usb_dl_cmd(), leaving state.state and state.bytes uninitialized if the call failed. The fix adds error handling to jump to the error path when brcmf_usb_dl_cmd...

CVE-2025-37990 wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()

In the Linux kernel, the following vulnerability has been resolved: wifi: brcm80211: fmac: Add error handling for brcmfusbdlwriteimage The function brcmfusbdlwriteimage calls the function brcmfusbdlcmd but dose not check its return value. The 'state.state' and the 'state.bytes' are uninitialized ...

The vulnerability of the nfsd4_encode_fattr4() function in the network file system of Linux kernel allows a hacker to cause a service failure.

The vulnerability of the nfsd4encodefattr4 function in the Network File System of Linux operating systems is related to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to cause a service failure...

Cisco Meraki Z和Cisco Meraki MX 安全漏洞

Cisco Meraki Z and Cisco Meraki MX are both products of Cisco, Inc.Cisco Meraki Z is an enterprise-class firewall, VPN gateway, and router.Cisco Meraki MX is a multifunction security and SD-WAN enterprise appliance. A security vulnerability exists in Cisco Meraki Z and Cisco Meraki MX that stems...

The vulnerability of the vfiopciIoctlGetPCIHotResetInfo() function in the drivers/vfio/pci/vfiopciCore.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the vfiopciIoctlGetPCIHotResetInfo function in the drivers/vfio/pci/vfiopciCore.c module of the Linux kernel is related to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nfsd_net_init() function in the fs/nfsd/nfsctl.c module of the NFS file system in Linux kernels allows a attacker to cause a service failure.

The vulnerability of the nfsdnetinit function in the fs/nfsd/nfsctl.c file of the NFS network file system in Linux kernels is related to the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to cause a service failure...

Ashlar-Vellum Cobalt 安全漏洞

Ashlar-Vellum Cobalt is a parameter-based computer-aided design and 3D modeling program from Ashlar-Vellum. A security vulnerability exists in Ashlar-Vellum Cobalt that stems from uninitialized variables when parsing VS files, which could lead to remote code execution...

Trimble SketchUp 安全漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. A security vulnerability exists in Trimble SketchUp that stems from uninitialized variables when parsing SKP files, which could lead to remot...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from uninitialized variables in usbread8 and related functions in the staging rtl8712 driver...

Astra Linux – Vulnerability in opensc

A vulnerability was discovered in the pkcs15-init function in OpenSC. An attacker could use a specially crafted USB Device or Smart Card, causing the system to send a specially crafted response to APDUs. Insufficient or missing checks on the return values of functions lead to unexpected behavior...

Astra Linux – Vulnerability in opensc

A vulnerability was discovered in OpenSC, OpenSC tools, the PKCS11 module, minidrivers, and CTK. The issue arises from the lack of initialization of variables that should be initialized as arguments to other functions, etc...