Siemens SIMATIC S7-1500 CPU 1518 MFP Missing Initialization of Resource (CVE-2026-23300)

This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505760; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate",...

DEBIAN-CVE-2026-64224

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

CVE-2026-64224 octeontx2-pf: fix double free in rvu_rep_rsrc_init()

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

EUVD-2026-48632

In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvureprsrcinit rvureprsrcinit allocates queue memory before calling otx2inithwresources. When hardware resource setup fails, otx2inithwresources already unwinds the partially initialized SQ, CQ, a...

The vulnerability of the ath11k_dp_rx_process_mon_status() function in the drivers/net/wireless/ath/ath11k/dp_rx.c file of the Atheros/Qualcomm wireless adapter driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ath11kdprxprocessmonstatus function in the drivers/net/wireless/ath/ath11k/dprx.c file of the Atheros/Qualcomm wireless adapter driver in the Linux operating system is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker ...

The vulnerability of the virtio_net_hdr_tnl_from_skb() function in the include/linux/virtio_net.h module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the virtionethdrtnlfromskb function in the include/linux/virtionet.h header of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Insecure Default Initialization of Resource

Overview PraisonAI is a PraisonAI is an AI Agents Framework with Self Reflection. PraisonAI application combines PraisonAI Agents, AutoGen, and CrewAI into a low-code solution for building and managing multi-agent LLM systems, focusing on simplicity, customisation, and efficient human-agent...

The vulnerability of the Exim mail server, related to the lack of initialization of resources, allows attackers to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the Exim mail server is related to the lack of initialization of resources. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and accessibility of the protected information...

ROS-20260702-73-0024

The vulnerability of the persistentrampostinit function in the fs/pstore/ramcore.c module, which supports the persistent storage of the Linux kernel, is related to incorrect initialization of the resource. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the smb3_validate_negotiate() function in the fs/cifs/smb2pdu.c module of the Linux kernel file system allows a attacker to trigger a service failure.

The vulnerability of the smb3validatenegotiate function in the fs/cifs/smb2pdu.c module of the Linux kernel operating system is related to incorrect resource initialization. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `init_sched_ext_class()` function in the kernel/sched/ext.c module, which is part of the Linux operating system’s resource management support, allows a hacker to cause a service failure.

The vulnerability of the initschedextclass function in the kernel/sched/ext.c module, which is part of the Linux kernel’s resource management system, relates to improper initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mtk_iommu_isr() function in the drivers/iommu/mtk_iommu.c module of the Linux kernel’s IOMMU driver allows a hacker to cause a service failure.

The vulnerability of the mtkiommuisr function in the drivers/iommu/mtkiommu.c module of the Linux IOMMU driver is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `fix_ndisc_ra_useropt()` function in the `net/ipv6/ndisc.c` module of the Linux operating system allows a attacker to disclose confidential information.

The vulnerability of the fixndiscrauseropt function in the net/ipv6/ndisc.c module of the Linux kernel is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

The vulnerability of the software for working with Splunk AI Tookit (AITK) algorithms (formerly known as Splunk Machine Learning Toolkit (MLTK)) relates to insecure resource initialization, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the software for working with Splunk AI Tookit AITK algorithms formerly known as Splunk Machine Learning Toolkit MLTK is related to insecure resource initialization due to the lack of restrictions on outgoing requests, as approved by external domains. Exploiting this...

EUVD-2026-38089

Initialization of a resource with an insecure default in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...

PT-2026-51035

Name of the Vulnerable Software and Affected Versions GitHub Copilot affected versions not specified Visual Studio Code affected versions not specified Description An insecure default during the initialization of a resource allows an unauthorized attacker to disclose information over a network...

CVE-2026-30805

Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access. This issue affects Pandora FMS: from 777 through 800...

PT-2026-40037

Name of the Vulnerable Software and Affected Versions Schneider Electric EcoStruxure Panel Server affected versions not specified Description An insecure default resource initialization issue exists that may cause credentials to revert to initial settings under rare circumstances. This allows...

PT-2026-40049

Insecure Default Initialization of Resource vulnerability allows Authentication Bypass via API access. This issue affects Pandora FMS: from 777 through 800...

The vulnerabilities of the macro-definitions PCIE_LNKCAP_SLS2SPEED and PCIE_LNKCTL2_TLS2SPEED in the drivers/pci/pci.h module of the Linux kernel allow a hacker to cause a service failure.

The vulnerabilities of the macro-definitions PCIELNKCAPSLS2SPEED and PCIELNKCTL2TLS2SPEED in the drivers/pci/pci.h module of the Linux kernel are related to improper initialization of resources. Exploiting these vulnerabilities can allow an attacker to cause service failures...