Lucene search
+L

79 matches found

BDU FSTEC
BDU FSTEC
•added 2020/09/24 12:00 a.m.•12 views

The vulnerability of the Intel Graphics Driver lies in its improper initialization of data, which allows a hacker to trigger a service failure.

The vulnerability of the Intel Graphics Driver relates to improper data initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

3.2CVSS5.5AI score0.00266EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/08/05 12:00 a.m.•15 views

The vulnerability of the fly-wm window manager, related to incorrect data initialization, allows attackers to compromise data integrity.

The vulnerability of the fly-wm window manager is related to incorrect data initialization. Exploiting this vulnerability can allow attackers to compromise data integrity...

2.8CVSS5.5AI score
SaveExploits0References1Affected Software1
Ubuntu
Ubuntu
•added 2020/05/20 8:16 a.m.•143 views

LSN-0067-1: Kernel Live Patch Security Notice

It was discovered that the Serial CAN interface driver in the Linux kernel did not properly initialize data. A local attacker could use this to expose sensitive information kernel memory. CVE-2020-11494...

4.4CVSS6.5AI score0.00722EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2020/04/27 12:00 a.m.•16 views

The vulnerability of Firefox browser, related to improper data initialization, allows attackers to compromise data integrity.

The vulnerability of the Firefox browser is related to improper data initialization. Exploiting this vulnerability can allow a remote attacker to compromise the integrity of data...

7.1CVSS7.2AI score0.01189EPSS
SaveExploits0References10Affected Software6
Prion
Prion
•added 2019/11/06 5:15 p.m.•30 views

Code injection

Lack of check to ensure crypto engine data passed by user is initialized can result in bus error in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640,...

10CVSS9.3AI score0.00907EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/12/03 12:00 a.m.•3 views

PT-2018-2828

Name of the Vulnerable Software and Affected Versions Edinburgh Speech Tool Library affected versions not specified Description The issue is related to errors in data initialization in the pitchmark tool of the Edinburgh Speech Tool Library. Exploitation of this issue may allow an attacker to cau...

2.1CVSS5.8AI score
SaveExploits0References1
NVD
NVD
•added 2018/11/25 8:29 p.m.•40 views

CVE-2018-19519

In tcpdump 4.9.2, a stack-based buffer over-read exists in the printprefix function of print-hncp.c via crafted packet data because of missing initialization...

5.5CVSS5.8AI score0.02364EPSS
SaveExploits1References9
Cvelist
Cvelist
•added 2018/11/25 8:00 p.m.•39 views

CVE-2018-19519

In tcpdump 4.9.2, a stack-based buffer over-read exists in the printprefix function of print-hncp.c via crafted packet data because of missing initialization...

5.8AI score0.02364EPSS
SaveExploits1References9
OSV
OSV
•added 2015/12/17 7:24 p.m.•23 views

USN-2843-2 linux-lts-wily vulnerabilities

Jan Beulich discovered that the KVM svm hypervisor implementation in the Linux kernel did not properly catch Debug exceptions on AMD processors. An attacker in a guest virtual machine could use this to cause a denial of service system crash in the host OS. CVE-2015-8104 郭永刚 discovered that the pp...

10CVSS6.7AI score0.02481EPSS
SaveExploits1References6
OSV
OSV
•added 2015/03/12 2:59 p.m.•13 views

CVE-2015-2044

The emulation routines for unspecified X86 devices in Xen 3.2.x through 4.5.x does not properly initialize data, which allow local HVM guest users to obtain sensitive information via vectors involving an unsupported access size...

8.7AI score
SaveExploits0References12
CVE
CVE
•added 2015/03/12 2:00 p.m.•120 views

CVE-2015-2044

CVE-2015-2044 concerns the Xen hypervisor: the emulation routines for unspecified X86 devices in Xen 3.2.x–4.5.x do not properly initialize data, enabling local HVM guest users to obtain sensitive information via an unsupported access size. The Mageia advisory MGASA-2016-0098 documents this CVE a...

2.1CVSS4.8AI score0.00414EPSS
SaveExploits0References12Affected Software1
CNVD
CNVD
•added 2015/01/26 12:00 a.m.•15 views

Google Chrome Font Uninitialization Vulnerability

Google Chrome is a simple and efficiently designed web browsing tool developed by Google. Google Chrome Font has an uninitialized vulnerability due to the program fails to properly initialize data structure vulnerability, allowing attackers to construct malicious WEB pages and trick users into...

7.5CVSS6.7AI score0.01593EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2013/11/07 12:00 a.m.•29 views

Mozilla Firefox Multiple Vulnerabilities - 01 (Nov 2013) - Windows

Mozilla Firefox is prone to multiple vulnerabilities. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

10CVSS6.4AI score0.06493EPSS
SaveExploits0References16
OpenVAS
OpenVAS
•added 2013/11/07 12:00 a.m.•75 views

Mozilla Thunderbird Multiple Vulnerabilities-01 (Nov 2013) - Mac OS X

Mozilla Thunderbird is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:thunderbird";...

10CVSS6.8AI score0.06493EPSS
SaveExploits0References14
NVD
NVD
•added 2012/06/12 10:55 p.m.•26 views

CVE-2012-1873

Microsoft Internet Explorer 7 through 9 does not properly create and initialize string data, which allows remote attackers to obtain sensitive information from process memory via a crafted HTML document, aka "Null Byte Information Disclosure Vulnerability."...

4.3CVSS5.6AI score0.18259EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2012/06/12 10:00 p.m.•37 views

CVE-2012-1873

Microsoft Internet Explorer 7 through 9 does not properly create and initialize string data, which allows remote attackers to obtain sensitive information from process memory via a crafted HTML document, aka "Null Byte Information Disclosure Vulnerability."...

5.6AI score0.18259EPSS
SaveExploits0References3
Prion
Prion
•added 2011/04/13 6:55 p.m.•36 views

Buffer overflow

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data...

9.3CVSS8.4AI score0.70166EPSS
SaveExploits10References6Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/04/13 12:00 a.m.•6 views

CVE-2011-0105: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka "Excel Data...

9.3CVSS6.6AI score0.70166EPSS
SaveExploits10References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/08/11 12:00 a.m.•8 views

CVE-2010-1888: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the kernel in Microsoft Windows XP SP3 allows local users to gain privileges via vectors involving thread creation, aka "Windows Kernel Data Initialization Vulnerability."...

6.8CVSS5.8AI score0.02495EPSS
SaveExploits6References2
Rows per page
Query Builder