Intel Improper Data Initialization

The vulnerability of Intel microprogramming software is related to incorrect data initialization. Exploiting this vulnerability can allow attackers to enhance their privileges...

Intel Software Guard Extensions SDK Privilege Escalation

The vulnerability of Intel Software Guard Extensions SDK relates to incorrect data initialization. Exploiting this vulnerability can allow attackers to enhance their privileges...

Intel Graphics Driver DoS

The vulnerability of the Intel Graphics Driver relates to improper data initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2020-20901 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 14.0 iPadOS versions prior to 14.0 Description: A memory initialization issue was addressed with improved memory handling, allowing a local user to potentially read kernel memory. Recommendations: For iOS versions prior ...

CVE-2020-1472

A flaw was found in the Microsoft Windows Netlogon Remote Protocol MS-NRPC, where it reuses a known, static, zero-value initialization vector IV in AES-CFB8 mode. This flaw allows an unauthenticated attacker to impersonate a domain-joined computer, including a domain controller, and possibly obta...

CVE-2020-1592

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information t...

Microsoft Windows/Windows Server Information Disclosure Vulnerability (CNVD-2021-63312)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. Microsoft Windows/Windows Server is vulnerable to an information disclosure vulnerability that originates...

CVE-2020-1592: Improper Initialization

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information t...

Microsoft Windows WebM Video Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

SAP 3D Visual Enterprise Viewer U3D File Parsing 3difr Plugin Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SAP 3D Visual Enterprise Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

Low: Red Hat Security Advisory: cloud-init security update

An update for cloud-init is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information t...

PT-2020-4288

Name of the Vulnerable Software and Affected Versions: IntelR CoreTM versions 8th through 10th Generation IntelR CeleronR Processor versions 4000 & 5000 Series Description: The issue is related to improper initialization in BIOS firmware, which may allow a privileged user to enable denial of...

PT-2020-3908 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: An information disclosure issue exists due to improper initialization of objects in memory by the Windows kernel. To exploit this, an authenticated attacker could run a specially crafted...

Hardcoded Initialization Vector in parsel

All versions of parsel have a default hardcoded initialization vector. In cases where the IV is not provided, the package defaults to a hardcoded IV which renders the cipher vulnerable to chosen plaintext attacks. Recommendation The package is deprecated and will not be updated. Consider using an...

PT-2020-21452

Name of the Vulnerable Software and Affected Versions parsel versions affected versions not specified Description The issue concerns a hardcoded initialization vector in the parsel package. When the IV is not provided, the package defaults to this hardcoded IV, making the cipher susceptible to...

USN-4488-1 xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04 vulnerabilities

Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled the input extension protocol. A local attacker could possibly use this issue to escalate privileges. CVE-2020-14346 Jan-Niklas Sohn discovered that the X.Org X Server incorrectly initialized memory. A local attacker could...

Linux Systemd Service Management Data Compromise

Vulnerabilities in the initialization and service management of Linux’s systemd are related to incorrect standard permissions for low-security administrators. Exploiting these vulnerabilities can allow remote attackers to access sensitive data, compromise its integrity, and cause service failures...

Fly-wm Resource Initialization DoS

The vulnerability of the Fly-wm window manager is related to incorrect initialization of resources. Exploiting this vulnerability can allow attackers to cause service failures...

Coturn STUN TURN Buffer Overflow

The vulnerability of the STUN/TURN response buffer in the Coturn web server is related to initialization errors. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...