740 matches found
CVE-2019-1409: Improper Initialization
An information disclosure vulnerability exists when the Windows Remote Procedure Call RPC runtime improperly initializes objects in memory, aka 'Windows Remote Procedure Call Information Disclosure Vulnerability'...
CVE-2019-16921: Improper Initialization
In the Linux kernel before 4.17, hnsroceallocucontext in drivers/infiniband/hw/hns/hnsrocemain.c does not initialize the resp data structure, which might allow attackers to obtain sensitive information from kernel stack memory, aka CID-df7e40425813...
CVE-2019-11747: Improper Initialization
The "Forget about this site" feature in the History pane is intended to remove all saved user data that indicates a user has visited a site. This includes removing any HTTP Strict Transport Security HSTS settings received from sites that use it. Due to a bug, sites on the pre-load list also have...
CVE-2019-12646: Improper Initialization
A vulnerability in the Network Address Translation NAT Session Initiation Protocol SIP Application Layer Gateway ALG of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to improper processing of transient SIP...
CVE-2019-1299: Improper Initialization
An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory, aka 'Microsoft Edge based on Edge HTML Information Disclosure Vulnerability'...
CVE-2019-1274: Improper Initialization
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'...
PT-2019-3207
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an information disclosure problem in the Windows kernel, which occurs due to improper initialization of a memory address. This can allow an attacker to gain unauthoriz...
CVE-2019-5605: Improper Initialization
In FreeBSD 11.3-STABLE before r350217, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, due to insufficient initialization of memory copied to userland in the freebsd32ioctl interface, small amounts of kernel memory may be disclosed to userland processes. This may...
CVE-2019-1039: Improper Initialization
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information t...
CVE-2017-18131: Improper Initialization
In QTEE, an incorrect fuse value can be blown in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 820, SD 820A, SD 835, SD 845, SDM429, SDM439,...
The vulnerability of the DHCPv6 input processor in the Cisco Prime Network Registrar software, which manages network services, allows a attacker to trigger a service failure.
The vulnerability of the DHCPv6 input processor in the Cisco Prime Network Registrar network service management software is related to improper initialization. Exploiting this vulnerability can allow a malicious actor to cause service failure by sending corrupted DHCPv6 packets remotely...
CVE-2019-0767: Improper Initialization
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated attacker could run a specially crafted application, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from...
CVE-2019-0782: Improper Initialization
An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0702, CVE-2019-0755, CVE-2019-0767, CVE-2019-0775...
CVE-2018-4351: Improper Initialization
A memory initialization issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14...
CVE-2019-1761: Improper Initialization
A vulnerability in the Hot Standby Router Protocol HSRP subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to receive potentially sensitive information from an affected device. The vulnerability is due to insufficient memory initialization. An attacker...
CVE-2019-0663: Improper Initialization
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.To exploit this vulnerability, an authenticated attacker could run a specially crafted application, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from...
CVE-2019-6230: Improper Initialization
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3,macOS Mojave 10.14.3,tvOS 12.1.2,watchOS 5.1.3. A malicious application may be able to break out of its sandbox...
The vulnerability of the cleancache subsystem in the Linux operating system allows a hacker to disclose protected information.
The vulnerability of the cleancache subsystem in Linux kernels is related to improper initialization of new files. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these mechanisms...
CVE-2019-3464: Improper Initialization
Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands...
openSUSE Security Update : LibVNCServer (openSUSE-2019-53)
This update for LibVNCServer fixes the following issues : Security issues fixed : - CVE-2018-15126: Fixed use-after-free in file transfer extension bsc1120114 - CVE-2018-6307: Fixed use-after-free in file transfer extension server code bsc1120115 - CVE-2018-20020: Fixed heap out-of-bound write...