Lucene search
+L

1649 matches found

CNNVD
CNNVD
•added 2024/08/05 12:00 a.m.•19 views

oFono 安全漏洞

oFono is an open source telephony communication framework open-sourced by UBports. A security vulnerability exists in oFono that stems from an uninitialized variable vulnerability found in the AT CMGL Command module...

3.3CVSS4.3AI score0.00297EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/08/05 12:00 a.m.•22 views

oFono 安全漏洞

oFono is an open source telephony communication framework open-sourced by UBports. A security vulnerability exists in oFono that stems from an uninitialized variable vulnerability found in the AT CMT Command module...

3.3CVSS4.3AI score0.00297EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2024/08/05 12:00 a.m.•20 views

(0Day) (Pwn2Own) oFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability. The specific flaw exists within the parsing of responses from AT+CM...

3.3CVSS6.1AI score0.00297EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/08/05 12:00 a.m.•25 views

oFono 安全漏洞

oFono is an open source telephony communication framework open-sourced by UBports. A security vulnerability exists in oFono that stems from an uninitialized variable vulnerability found in the AT CMGR Command module...

3.3CVSS4.3AI score0.00297EPSS
SaveExploits0References4
CNVD
CNVD
•added 2024/08/02 12:00 a.m.•15 views

Unspecified vulnerability in Linux kernel (CNVD-2024-35101)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the bpf module in the BPFCOREREADBITFIELD macro, where the variable val may be uninitialized. This could...

6.3CVSS6.6AI score0.0022EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/01 12:00 a.m.•2 views

CVE-2024-6990: Use of Uninitialized Variable

Uninitialized Use in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Critical...

8.8CVSS7.9AI score0.00924EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2024/07/29 12:39 p.m.•20 views

kernel: i40e: fix vf may be used uninitialized in this function warning

A flaw was found in the Linux kernel’s Ethernet Controller XL710 family driver. This flaw allows a local user to crash the system...

7.8CVSS7.2AI score0.00257EPSS
SaveExploits0References4
CNVD
CNVD
•added 2024/07/19 12:00 a.m.•17 views

PDF-XChange Editor Uninitialized Variable Vulnerability

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. An uninitialized variable vulnerability exists in PDF-XChange Editor, which can be exploited by an attacker to disclose sensitive information...

5.5CVSS6.4AI score0.00462EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/07/19 12:00 a.m.•44 views

PDF-XChange Editor Uninitialized Variable Vulnerability (CNVD-2024-33518)

PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. An uninitialized variable vulnerability exists in PDF-XChange Editor, which can be exploited by attackers to disclose sensitive information...

5.5CVSS6.4AI score0.00443EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/07/12 12:00 a.m.•59 views

Kofax Power PDF Uninitialized Variable Remote Code Execution Vulnerability

Kofax Power PDF is a professional PDF editing and management software from Kofax. Kofax Power PDF has an uninitialized variable remote code execution vulnerability that can be exploited by an attacker to execute arbitrary code...

7.8CVSS8.2AI score0.00425EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/09 12:00 a.m.•5 views

PT-2024-29231

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.43 Description The issue is related to the initialization of the count variable in collecting hot-reset devices. This variable is used without initialization, resulting in mistakes in device counting and...

7.5CVSS5.7AI score0.00272EPSS
SaveExploits0
NVD
NVD
•added 2024/06/25 3:15 a.m.•43 views

CVE-2024-37002

A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

7.8CVSS0.00386EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/25 12:00 a.m.•4 views

CVE-2024-37002: Use of Uninitialized Variable

A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, could lead to code execution in the current process...

7.8CVSS7.6AI score0.00386EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/25 12:00 a.m.•2 views

CVE-2024-23159: Use of Uninitialized Variable

A maliciously crafted STP file, when parsed in stpaimx64vc15d.dll through Autodesk applications, can be used to uninitialized variables. This vulnerability, along with other vulnerabilities, can lead to code execution in the current process...

7.8CVSS7.8AI score0.00316EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2024/06/13 12:00 a.m.•20 views

Autodesk AutoCAD SLDPRT File Parsing Uninitialized Variable Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

7.8CVSS7.7AI score0.00968EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/06/03 12:00 a.m.•28 views

RHEL 8 : mingw-wavpack (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - wavpack: Use of uninitialized variable in WavpackSetConfiguration64 leads to DoS CVE-2019-11498 - The...

6.5CVSS6.2AI score0.03044EPSS
SaveExploits3References3
Zero Day Initiative
Zero Day Initiative
•added 2024/05/31 12:00 a.m.•28 views

(Pwn2Own) VMware Workstation hgfsVMCI_fileread Use of Uninitialized Variable Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of VMware Workstation. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS7.3AI score0.00505EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/30 12:00 a.m.•2 views

PT-2024-8977

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the i40e component of the Linux kernel, where a variable vf may be used uninitialized, potentially causing servers to hang in rare conditions with reset races...

7.8CVSS5.7AI score0.00257EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/05/20 12:00 a.m.•3 views

PT-2024-7074

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the nci rx work function in the Linux kernel's NFC module, which parses received packets from ndev-rx q. The function should validate the header size, payload siz...

8.8CVSS0.00378EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/15 12:00 a.m.•2 views

CVE-2023-6324: Use of Uninitialized Variable

ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity...

8.8CVSS5.8AI score0.00712EPSS
SaveExploits1References1
Rows per page
Query Builder