The vulnerability of the software for discrete event simulation and automation in Rockwell Automation Arena allows a intruder to execute arbitrary code by exploiting incorrect resource initialization.

The vulnerability of the software for discrete event simulation and automation in Rockwell Automation Arena is related to incorrect initialization of resources. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created DOE file...

PT-2025-21118

Name of the Vulnerable Software and Affected Versions: IntelR Core Ultra Processors affected versions not specified Description: The issue is related to the incorrect initialization of resources in the branch prediction unit for some IntelR Core Ultra Processors. This may allow an authenticated...

CVE-2024-53221 f2fs: fix null-ptr-deref in f2fs_submit_page_bio()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix null-ptr-deref in f2fssubmitpagebio There's issue as follows when concurrently installing the f2fs.ko module and mounting the f2fs file system: KASAN: null-ptr-deref in range 0x0000000000000020-0x0000000000000027 RIP:...

The vulnerability of Intel NUC Software Studio Service’s software for the Windows operating system, related to improper resource initialization, allows attackers to disclose sensitive information.

The vulnerability of Intel NUC Software Studio Service’s software for the Windows operating system is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to disclose protected information...

PT-2024-9455 · Intel · Intel Nuc Software Studio Service

Name of the Vulnerable Software and Affected Versions: Intel NUC Software Studio Service affected versions not specified Description: The issue is related to incorrect resource initialization, which can be exploited to disclose protected information. Recommendations: At the moment, there is no...

The vulnerability of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine (CSME) arises from improper initialization of resources, allowing attackers to disclose protected information.

The vulnerability of the software for remote management and monitoring of the Intel Converged Security and Manageability Engine CSME is related to improper initialization of resources. Exploiting this vulnerability can allow attackers to disclose protected information...

Vulnerability of RDMA/mlx5 components of the Linux operating system, allowing a hacker to cause a service failure

The vulnerability of the isofs component in Linux operating systems is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerability of components of Linux operating system’s kernel/mlx5, allowing a hacker to cause a service failure

The vulnerability of the net/mlx5 components of the Linux operating system’s kernel is related to incorrect initialization of a resource in the addrulefg function. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the component set in the full stack for rapid development of the Filament PHP framework Laravel, related to insecure resource initialization, allows attackers to exploit it to disclose sensitive information.

The vulnerability of the component set of the full stack for the accelerated development of the Filament PHP framework Laravel is related to an insecure initialization of a resource, allowing a malicious actor to exploit this to disclose sensitive information...

The vulnerability of the microprogrammed software in modular controller devices for AC charging stations and wall-mounted charging devices from Phoenix Contact, CHARX SEC-3000, arises from insecure resource initialization. This allows a hacker to bypass the password protection of arbitrary users.

The vulnerability of the microprogrammed software in modular control devices for AC charging stations and wall-mounted charging devices from Phoenix Contact’s CHARX SEC-3000 is related to an unsafe initialization of resources. Exploiting this vulnerability could allow a malicious actor to reset t...

CVE-2024-45217

Insecure Default Initialization of Resource vulnerability in Apache Solr. New ConfigSets that are created via a Restore command, which copy a configSet from the backup and give it a new name, are created without setting the "trusted" metadata. ConfigSets that do not contain the flag are trusted...

CVE-2024-47967

Improper resource initialization handling in firmware of some Solidigm DC Products may allow an attacker to potentially enable denial of service...

Solidigm DC Products 安全漏洞

Solidigm DC Products is a line of solid state drives from Solidigm. A security vulnerability exists in Solidigm DC Products that stems from improper handling of resource initialization, which can lead to a denial of service...

PT-2024-32917 · Solidigm · Solidigm Dc Products

Name of the Vulnerable Software and Affected Versions: Solidigm DC Products affected versions not specified Description: The issue is related to improper resource initialization handling in the firmware of some Solidigm DC Products, which may allow an attacker to potentially enable denial of...

CVE-2024-41995

Initialization of a resource with an insecure default vulnerability exists in JavaTM Platform Ver.12.89 and earlier. If this vulnerability is exploited, the product may be affected by some known TLS1.0 and TLS1.1 vulnerabilities. As for the specific products/models/versions of MFPs and printers...

The vulnerability of the zabbix-agent2 package for the Alpine Linux operating system allows a hacker to elevate their privileges to the root level.

The vulnerability of the zabbix-agent2 package for the Alpine Linux operating system relates to the absence of resource initialization. Exploiting this vulnerability allows a malicious actor to gain privileges to the root level remotely...

The vulnerability of the Telnet service of the microprogramming software for routers such as FutureNet NXR, FutureNet VXR, and FutureNet WXR allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Telnet service provided by the microprogramming software for FutureNet NXR, FutureNet VXR, and FutureNet WXR is related to insecure resource initialization. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality,...

The vulnerability of the SMM control mode of Dell Edge Gateway BIOS microprogramming software allows a hacker to execute arbitrary code and gain increased privileges.

The vulnerability of the SMM mode of the BIOS software for Dell Edge Gateways is related to incorrect initialization of resources. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...

ROS-20240723-04

A vulnerability in the fetchmail mail receiving and forwarding utility is related to incorrect resource initialization. Exploitation of the vulnerability may allow an attacker to gain access to confidential information...

CVE-2024-31070

Initialization of a resource with an insecure default vulnerability in FutureNet NXR series, VXR series and WXR series provided by Century Systems Co., Ltd. allows a remote unauthenticated attacker to access telnet service unlimitedly...