Lucene search
+L

1649 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/23 12:00 a.m.•3 views

CVE-2024-7022: Use of Uninitialized Variable

Uninitialized Use in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS6.5AI score0.00366EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/09/23 12:00 a.m.•56 views

PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability

PDF-XChange Editor is a PDF editor software and PDF reader. PDF-XChange Editor RTF file parsing has an uninitialized variable remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code on the system...

7.8CVSS8.3AI score0.0038EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/09/18 7:12 a.m.•50 views

CVE-2024-46794 x86/tdx: Fix data leak in mmio_read()

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix data leak in mmioread The mmioread function makes a TDVMCALL to retrieve MMIO data for an address from the VMM. Sean noticed that mmioread unintentionally exposes the value of an initialized variable val on the stack...

0.00197EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2024/09/17 12:00 a.m.•19 views

PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS6.9AI score0.0038EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/09/17 12:00 a.m.•16 views

The vulnerability of the H5A__attr_release_table() function in the H5Aint.c file of the HDF5 library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the H5Aattrreleasetable function in the H5Aint.c file of the HDF5 library is related to the use of an uninitialized variable. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected informati...

10CVSS7.5AI score0.00951EPSS
SaveExploits0References10Affected Software6
Positive Technologies
Positive Technologies
•added 2024/09/13 12:00 a.m.•5 views

PT-2025-10648

Name of the Vulnerable Software and Affected Versions Ashlar-Vellum Cobalt affected versions not specified Description The issue is related to the use of an uninitialized variable in the file parsing component, which can lead to remote code execution. Recommendations At the moment, there is no...

7.8CVSS0.00284EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2024/09/03 12:00 a.m.•19 views

PT-2024-7535 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to the use of an uninitialized variable in the acdb25.dll library of Autodesk AutoCAD. This can be exploited by a malicious actor using a specially crafted DXF...

7.8CVSS7AI score0.00203EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/03 12:00 a.m.•2 views

CVE-2024-45618: Use of Uninitialized Variable

A vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient or missing checking of return values of functions leads to unexpected work with variables that have...

3.9CVSS6.2AI score0.00311EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/03 12:00 a.m.•2 views

CVE-2024-45617: Use of Uninitialized Variable

A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient or missing checking of return values of functions leads to...

3.9CVSS6.2AI score0.00327EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/03 12:00 a.m.•3 views

CVE-2024-45616: Use of Uninitialized Variable

A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. The following problems were caused by insufficient control of the response AP...

3.9CVSS6.5AI score0.00358EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/03 12:00 a.m.•1 views

CVE-2024-45615: Use of Uninitialized Variable

A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. The problem is missing initialization of variables expected to be initialized as arguments to other functions, etc...

3.9CVSS6.3AI score0.00358EPSS
SaveExploits0References5
OSV
OSV
•added 2024/08/15 9:15 p.m.•13 views

CVE-2024-7868

In Xpdf 4.05 and earlier, invalid header info in a DCT JPEG stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes a segfault attempting to read from an invalid address...

8.2CVSS5.8AI score0.00391EPSS
SaveExploits0References1
OSV
OSV
•added 2024/08/15 9:15 p.m.•20 views

AZL-47857 CVE-2024-7868 affecting package cppcheck 2.7-2

In Xpdf 4.05 and earlier, invalid header info in a DCT JPEG stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes a segfault attempting to read from an invalid address...

8.2CVSS5.8AI score0.00391EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2024/08/15 9:15 p.m.•257 views

CVE-2024-7868

In Xpdf 4.05 and earlier, invalid header info in a DCT JPEG stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes a segfault attempting to read from an invalid address...

8.2CVSS5.9AI score0.00391EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/08/15 8:22 p.m.•51 views

CVE-2024-7868 Uninitialized variable in Xpdf 4.05 due to invalid JPEG header

In Xpdf 4.05 and earlier, invalid header info in a DCT JPEG stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes a segfault attempting to read from an invalid address...

2.1CVSS0.00391EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/08/15 8:22 p.m.•24 views

CVE-2024-7868 Uninitialized variable in Xpdf 4.05 due to invalid JPEG header

In Xpdf 4.05 and earlier, invalid header info in a DCT JPEG stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes a segfault attempting to read from an invalid address...

2.1CVSS6.7AI score0.00391EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2024/08/15 8:22 p.m.•95 views

CVE-2024-7868

In Xpdf 4.05 and earlier, invalid header info in a DCT JPEG stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes a segfault attempting to read from an invalid address...

8.2CVSS6.9AI score0.00391EPSS
SaveExploits0References1
CVE
CVE
•added 2024/08/15 8:22 p.m.•84 views

CVE-2024-7868

CVE-2024-7868 affects Xpdf 4.05 and earlier, where invalid header info in a DCT (JPEG) stream can trigger an uninitialized variable in the DCT decoder, with a proof-of-concept PDF causing a segfault. Fedora/Slackware advisories indicate the issue is addressed by upgrading to Xpdf 4.06; multiple a...

8.2CVSS6.4AI score0.00391EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/08/15 12:00 a.m.•15 views

PT-2024-38645

Name of the Vulnerable Software and Affected Versions Xpdf versions 4.05 and earlier Description The issue arises from invalid header information in a DCT JPEG stream, leading to an uninitialized variable in the DCT decoder. This can cause a segfault when attempting to read from an invalid addres...

8.5CVSS4.3AI score0.00391EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/15 12:00 a.m.•3 views

CVE-2024-7868: Use of Uninitialized Variable

In Xpdf 4.05 and earlier, invalid header info in a DCT JPEG stream can lead to an uninitialized variable in the DCT decoder. The proof-of-concept PDF file causes a segfault attempting to read from an invalid address...

8.2CVSS7.5AI score0.00391EPSS
SaveExploits0References1
Rows per page
Query Builder