537 matches found
CVE-2022-48864
In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: add validation for VIRTIONETCTRLMQVQPAIRSSET command When control vq receives a VIRTIONETCTRLMQVQPAIRSSET command request from the driver, presently there is no validation against the number of queue pairs to configure...
CVE-2022-48864 vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command
In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: add validation for VIRTIONETCTRLMQVQPAIRSSET command When control vq receives a VIRTIONETCTRLMQVQPAIRSSET command request from the driver, presently there is no validation against the number of queue pairs to configure...
CVE-2024-36454
Use of uninitialized resource issue exists in IPCOM EX2 Series V01L0x Series V01L07NF0201 and earlier, and IPCOM VE2 Series V01L07NF0201 and earlier. If this vulnerability is exploited, the system may be rebooted or suspended by receiving a specially crafted packet...
PT-2024-27008 · Ip Com · Ipcom Ex2 Series
Name of the Vulnerable Software and Affected Versions: IPCOM EX2 Series versions V01L07NF0201 and earlier IPCOM VE2 Series versions V01L07NF0201 and earlier Description: The issue is related to the use of an uninitialized resource. If exploited, it may cause the system to reboot or suspend by...
The vulnerability of the Local Security Authority Subsystem Service (LSASS) in Windows operating systems allows attackers to disclose sensitive information that is protected by this service.
The vulnerability of the Local Security Authority Subsystem Service LSASS in Windows operating systems relates to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by this service...
The vulnerability of the Android operating system’s downloader on Pixel phones allows attackers to disclose sensitive information.
The vulnerability of the Android operating system’s downloader in Pixel phones relates to the use of an uninitialized resource. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by security measures...
PT-2024-3015 · Microsoft · Lsass +1
Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority Subsystem Service affected versions not specified Description: The issue is related to the use of an uninitialized resource in the Local Security Authority Subsystem Service LSASS of Windows operating system...
CVE-2024-3299
Dassault Systèmes eDrawings (SOLIDWORKS) 2023–2024 file-reading code is affected by Out-of-Bounds Write, Use of Uninitialized Resource, and Use-After-Free vulnerabilities. Opening specially crafted SLDDRW/SLDPRT files can allow arbitrary code execution; root causes are in the file-reading procedu...
CVE-2024-3299 Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the SLDDRW and SLDPRT file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024
Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially...
The vulnerability of the microprogrammed software of the communication module control devices CP-8031 MASTER MODULE and CP-8050 MASTER MODULE allows a perpetrator to execute arbitrary commands on the device with root privileges.
The vulnerability of the microprogrammed software in the CP-8031 MASTER MODULE and CP-8050 MASTER MODULE communication modules is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary commands on the...
The vulnerability of the WPS Office office software package, related to the use of an uninitialized resource, allows a hacker to execute arbitrary code.
The vulnerability of the WPS Office office software package is related to the use of an uninitialized resource. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-46100
in OpenHarmony v3.2.2 and prior versions allow a local attacker get sensitive buffer information through use of uninitialized resource...
Information disclosure
in OpenHarmony v3.2.2 and prior versions allow a local attacker get sensitive buffer information through use of uninitialized resource...
CVE-2023-46100 Cert manager has a use of uninitialized resource vulnerability
in OpenHarmony v3.2.2 and prior versions allow a local attacker get sensitive buffer information through use of uninitialized resource...
PT-2023-29846 · Unknown · Openharmony
Name of the Vulnerable Software and Affected Versions: OpenHarmony versions 3.2.2 and prior Description: The issue allows a local attacker to obtain sensitive buffer information through the use of an uninitialized resource. Recommendations: For OpenHarmony versions 3.2.2 and prior, at the moment,...
The vulnerability of the Microsoft Visual Studio software development tool, related to the use of an uninitialized resource, allows attackers to disclose sensitive information.
The vulnerability of the Microsoft Visual Studio software development tool is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...
The vulnerability of the opcodes/tic4x-dis.c component of the GNU Binutils development environment allows a hacker to trigger a service failure or disclose protected information.
The vulnerability of the opcodes/tic4x-dis.c component of the GNU Binutils development environment is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to cause a service failure or disclose protected information...
The vulnerability of the Exiv2 metadata management library, related to the use of an uninitialized resource, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the Exiv2 metadata management library relates to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...