11335 matches found
PT-2022-30081
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to the initialization of vdev-priv before using VQs in vsock/virtio. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
Exploit for Missing Initialization of Resource in Linux Linux_Kernel
CVE-2022-29968 Proof-of-concept exploit for CVE-2022-29968 un...
TECH_OPERATIONS_ROLE is not initialized properly
Lines of code Vulnerability details Impact setGuestlist and setTokenInLimit are unavailable for use during KnightingRound to use due to a mistake in initializing roles. Proof of Concept The role TECHOPERATIONSROLE, created in L30 of GlobalAccessControl.sol , is not initialized in the initialize t...
CVE-2021-44498
An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause a type to be incorrectly initialized in the function fincr in srport/fincr.c and cause a crash due to a NULL pointer dereference...
CVE-2021-44492
An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be incorrectly initialized in the function fincr in srport/fincr.c and cause a crash due to a NULL pointer dereference...
Null pointer dereference
An issue was discovered in YottaDB through r1.32 and V7.0-000 and FIS GT.M through V7.0-000. Using crafted input, attackers can cause a type to be incorrectly initialized in the function fincr in srport/fincr.c and cause a crash due to a NULL pointer dereference...
FIS GT.M Code Issues and Vulnerabilities
FIS GT.M is a database platform. A denial of service vulnerability exists in FIS GT.M versions prior to V7.0-000, which stems from the fincr function in srport/fincr.c incorrectly initializing the type and the presence of a NULL pointer dereference, which can be exploited by an attacker to cause ...
CVE-2022-22186
Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on EX4650 devices, packets received on the management interface em0 but not destined to the device, may be improperly forwarded to an egress interface, instead of being discarded. Such traffic being sent by a client may...
CVE-2022-22186
Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on EX4650 devices, packets received on the management interface em0 but not destined to the device, may be improperly forwarded to an egress interface, instead of being discarded. Such traffic being sent by a client may...
Input validation
Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on EX4650 devices, packets received on the management interface em0 but not destined to the device, may be improperly forwarded to an egress interface, instead of being discarded. Such traffic being sent by a client may...
CVE-2022-22186: Improper Initialization
Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on EX4650 devices, packets received on the management interface em0 but not destined to the device, may be improperly forwarded to an egress interface, instead of being discarded. Such traffic being sent by a client may...
PT-2022-15285
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on EX4650 Series versions prior to 19.1R3-S8 Juniper Networks Junos OS on EX4650 Series 19.2 versions prior to 19.2R3-S5 Juniper Networks Junos OS on EX4650 Series 19.3 versions prior to 19.3R3-S5 Juniper Networks Jun...
libsndfile Heap Buffer Overflow DoS
The vulnerability of the psfbinheaderreadf function in the library for reading and writing audio files in libsndfile is due to errors during initialization. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
CVE-2022-22186
Due to an Improper Initialization vulnerability in Juniper Networks Junos OS on EX4650 devices, packets received on the management interface em0 but not destined to the device, may be improperly forwarded to an egress interface, instead of being discarded. Such traffic being sent by a client may...
USN-5377-1: Linux kernel (BlueField) vulnerabilities
It was discovered that the network traffic control implementation in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-1055 Yiqi Sun and Kevin Wang discovered that the...
opensc:fuzz_pkcs15init: Heap-buffer-overflow in sc_pkcs15init_delete_by_path
Project: https://github.com/OpenSC/OpenSC.git Detailed Report: https://oss-fuzz.com/testcase?key=6181807449571328 Project: opensc Fuzzing Engine: afl Fuzz Target: fuzzpkcs15init Job Type: aflasanopensc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x618000003dfe Crash...
CVE-2022-21168
The affected product is vulnerable due to an invalid pointer initialization, which may lead to information disclosure...
CVE-2022-21168
Fuji Electric Alpha5 is affected by CVE-2022-21168 due to an invalid pointer initialization in C5V file parsing, enabling information disclosure. The root cause is an uninitialized pointer accessed during parsing, with vulnerability details appearing in multiple sources (NVD entry, ICS advisory, ...
