PT-2024-6254 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a component of the Windows operating system's authentication mechanism, specifically involving the use of an uninitialized resource. This can allow an attacker to...

PT-2024-6242 · Microsoft · Windows Kernel-Mode Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel-Mode Driver affected versions not specified Description: The issue is related to the use of an uninitialized resource in the Windows Kernel-Mode Driver, which can be exploited to disclose protected information. This allows...

The vulnerability of the vdpa/mlx5 component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the vdpa/mlx5 component in the Linux operating system is related to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20240829-02

A vulnerability in the hciqca component of the Linux operating system kernel is related to memory usage after a release. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability in the gso component of the Linux operating system kernel is related to the...

ROS-20240828-08

Vulnerability of ANGLE library in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to using uninitialized resource. is related to the use of an uninitialized resource. Exploitation of the vulnerability could allow an attacker to disclose protected information Vulnerability in...

The vulnerability of the ANGLE library in Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows attackers to disclose protected information.

The vulnerability of the ANGLE library in Mozilla Firefox, Firefox ESR, and the Thunderbird email client is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of the Local Security Authority (LSA) service, which is responsible for verifying identities and managing user policies in Windows operating systems, allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Local Security Authority LSA service, which is responsible for verifying identities and managing user policies on Microsoft Windows operating systems, is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to disclose...

The vulnerability of the Local Security Authority (LSA) service, which is responsible for verifying identities and managing user policies in Windows operating systems, allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Local Security Authority LSA service, which is responsible for verifying identities and managing user policies on Microsoft Windows operating systems, is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to disclose...

PT-2024-5625 · Microsoft · Local Security Authority (Lsa) Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority LSA Server affected versions not specified Description: The issue is related to the use of an uninitialized resource in the Microsoft Local Security Authority LSA Server, which can allow an attacker to...

PT-2024-5628 · Microsoft · Local Security Authority (Lsa) Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority LSA Server affected versions not specified Description: The issue is related to the use of an uninitialized resource in the Microsoft Local Security Authority LSA Server. Exploitation of this issue may allow...

CVE-2022-48864

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: add validation for VIRTIONETCTRLMQVQPAIRSSET command When control vq receives a VIRTIONETCTRLMQVQPAIRSSET command request from the driver, presently there is no validation against the number of queue pairs to configure...

CVE-2022-48864 vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command

In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: add validation for VIRTIONETCTRLMQVQPAIRSSET command When control vq receives a VIRTIONETCTRLMQVQPAIRSSET command request from the driver, presently there is no validation against the number of queue pairs to configure...

CVE-2024-36454

Use of uninitialized resource issue exists in IPCOM EX2 Series V01L0x Series V01L07NF0201 and earlier, and IPCOM VE2 Series V01L07NF0201 and earlier. If this vulnerability is exploited, the system may be rebooted or suspended by receiving a specially crafted packet...

PT-2024-27008 · Ip Com · Ipcom Ex2 Series

Name of the Vulnerable Software and Affected Versions: IPCOM EX2 Series versions V01L07NF0201 and earlier IPCOM VE2 Series versions V01L07NF0201 and earlier Description: The issue is related to the use of an uninitialized resource. If exploited, it may cause the system to reboot or suspend by...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in Windows operating systems allows attackers to disclose sensitive information that is protected by this service.

The vulnerability of the Local Security Authority Subsystem Service LSASS in Windows operating systems relates to the use of an uninitialized resource. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by this service...

The vulnerability of the Android operating system’s downloader on Pixel phones allows attackers to disclose sensitive information.

The vulnerability of the Android operating system’s downloader in Pixel phones relates to the use of an uninitialized resource. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by security measures...

PT-2024-3015 · Microsoft · Lsass +1

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority Subsystem Service affected versions not specified Description: The issue is related to the use of an uninitialized resource in the Local Security Authority Subsystem Service LSASS of Windows operating system...

CVE-2024-3299 Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the SLDDRW and SLDPRT file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024

Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially...

CVE-2024-3299

Dassault Systèmes eDrawings (SOLIDWORKS) 2023–2024 file-reading code is affected by Out-of-Bounds Write, Use of Uninitialized Resource, and Use-After-Free vulnerabilities. Opening specially crafted SLDDRW/SLDPRT files can allow arbitrary code execution; root causes are in the file-reading procedu...

The vulnerability of the microprogrammed software of the communication module control devices CP-8031 MASTER MODULE and CP-8050 MASTER MODULE allows a perpetrator to execute arbitrary commands on the device with root privileges.

The vulnerability of the microprogrammed software in the CP-8031 MASTER MODULE and CP-8050 MASTER MODULE communication modules is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary commands on the...