ROS-20260921-73-0083

The vulnerability is related to insecure resource initialization. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

ROS-20260908-73-0066

The vulnerability in nvidia-kmod relates to insecure resource initialization. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of the SIMATIC S7 PLC web server, related to insecure resource initialization, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the web server in the SIMATIC S7 PLC is related to insufficient protection of the web page structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

EUVD-2026-38089

Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

CVE-2026-30805

Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access. This issue affects Pandora FMS: from 777 through 800...

Insecure Default Initialization of Resource

Overview Affected versions of this package are vulnerable to Insecure Default Initialization of Resource due to DNS rebinding protection being disabled by default in HTTP-based servers using StreamableHTTPHandler or SSEHandler. An attacker can access internal resources or invoke tools exposed by...

CVE-2026-24148

Affected product: NVIDIA Jetson platforms running JetPack/JETSON Linux. The vulnerability resides in the system initialization logic, allowing an unprivileged attacker to initialize a resource with an insecure default. Consequences stated include information disclosure of encrypted data, data tam...

PT-2026-29291

Name of the Vulnerable Software and Affected Versions NVIDIA Jetson for JetPack affected versions not specified Description An unprivileged attacker could cause a resource to initialize with an insecure default due to a flaw in the system initialization logic. A successful exploit may lead to...

CVE-2026-2617

CVE-2026-2617 affects Beetel 777VR1 up to version 01.00.09, with a vulnerability in the Telnet Service/SSH Service causing insecure default initialization of a resource. Impact details in the connected sources indicate the issue is exploitable from the local network, and exploitation has been pub...

The vulnerability of the Spring Boot Actuator component in the corporate security solution for the TeleMessage TM SGNL messaging service allows attackers to compromise the confidentiality of the protected information.

The vulnerability of the Spring Boot Actuator component in the corporate security solution for message exchange via TeleMessage TM SGNL is related to the insecure initialization of resources. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the...

The vulnerability of the Linux operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel is related to insecure resource initialization. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of software solutions for centralized control of Wago Device Sphere controllers lies in the insecure initialization of resources. This allows a malicious actor to gain full access to the tool and all connected devices.

The vulnerability of the software solutions for centralized control of Wago Device Sphere controllers is related to improper session management. Exploiting this vulnerability can allow a malicious actor to gain full access to the tool and all connected devices...

The vulnerability of the monitoring tool for VMware Aria Operations, related to insecure resource initialization, allows a perpetrator to disclose protected information.

The vulnerability of the monitoring tool for VMware Aria Operations relates to the insecure initialization of resources. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

The vulnerability of Rockwell Automation ControlLogix® Ethernet Module’s web processor allows a hacker to execute arbitrary code.

The vulnerability of Rockwell Automation ControlLogix® Ethernet Module web processors is related to the insecure initialization of resources when a specific IP address is used for connecting to the WDB agent. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

GHSA-794X-8X6X-QPFC Zipkin Server vulnerable to Insecure Resource Initialization through its /heapdump endpoint

Zipkin through 3.5.1 has a /heapdump endpoint associated with the use of Spring Boot Actuator, a similar issue to CVE-2025-48927...

Zipkin Server vulnerable to Insecure Resource Initialization through its /heapdump endpoint

Zipkin through 3.5.1 has a /heapdump endpoint associated with the use of Spring Boot Actuator, a similar issue to CVE-2025-48927...

The vulnerability of the mbedtls_ssl_set_hostname function in Mbed TLS software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the mbedtlssslsethostname function in Mbed TLS software is related to insecure resource initialization. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of software products for conducting Zoom Workplace video conferences on the Windows operating system, related to insecure resource initialization, allows a perpetrator to influence the integrity of protected information.

The vulnerability of software products for conducting Zoom Workplace video conferences on the Windows operating system is related to an insecure initialization of resources. Exploiting this vulnerability could allow an attacker to influence the integrity of protected information...

Arbitrary Command Injection

Overview @cdklabs/cdk-proserve-lib is an AWS CDK library containing constructs, aspects, and patterns. Affected versions of this package are vulnerable to Arbitrary Command Injection due to forgetting to export the new Aspect. An attacker can compromise insecure resource policy settings,...

Schneider Electric Trio Q Licensed Data Radio 安全漏洞

The Schneider Electric Trio Q Licensed Data Radio is a radio from Schneider Electric France. The Schneider Electric Trio Q Licensed Data Radio suffers from an information disclosure vulnerability that stems from an insecure initialization of resources, which can be exploited by an attacker to...