CWE-1188

Initialization of a Resource with an Insecure Default

Parent: CWE-1419 - Incorrect Initialization of Resource

The product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.

261 vulnerabilities with CWE-1188
CVE-2020-0271 HIGH
Android <11 - Privilege Escalation
CVSS 7.3
CVE-2020-0394 HIGH
Android - Privilege Escalation
CVSS 7.8
CVE-2020-0386 MEDIUM
Android - Privilege Escalation
CVSS 5.5
CVE-2020-16873 MEDIUM
Microsoft Xamarin.Forms <83.0.4103.106 - SSRF
CVSS 4.7
CVE-2020-7729 HIGH
grunt <1.3.0 - RCE
CVSS 7.1
CVE-2020-7685 MEDIUM
UmbracoForms - Info Disclosure
CVSS 5.4
CVE-2020-10279 CRITICAL
Aliasrobotics Mir100 Firmware < 2.8.1.1 - Race Condition
CVSS 9.8
CVE-2020-14011 CRITICAL
Lansweeper <7.2.x - Command Injection
CVSS 9.8
CVE-2020-11532 CRITICAL
ManageEngine ADAudit Plus Xnode Enumeration
CVSS 9.8
CVE-2020-8828 HIGH
Argocd-server <1.5.0 - Privilege Escalation
CVSS 8.8
CVE-2019-25219 HIGH
Asio C++ Library <1.13.0 - Info Disclosure
CVSS 7.5
CVE-2019-20470 HIGH
Tk-star Q90 Junior Gps Horloge Firmware - Improper Access Control
CVSS 7.5
CVE-2019-13393 HIGH
Voo NETGEAR CG3700b V2.02.03 - Info Disclosure
CVSS 7.5
CVE-2019-17274 HIGH
NetApp FAS 8300/8700 and AFF A400 BMC - Command Injection
CVSS 7.8
CVE-2019-1950 HIGH
Cisco IOS XE SD-WAN - Privilege Escalation
CVSS 8.4
CVE-2019-16272 CRITICAL
DTEN D5-D7 <1.3.4 - Info Disclosure
CVSS 9.8
CVE-2019-19340 HIGH
Ansible Tower <3.6.2-3.5.3 - Privilege Escalation
CVSS 8.2
CVE-2019-19251 MEDIUM
Last.fm Scrobbler <2.1.39 - Info Disclosure
CVSS 5.3
CVE-2019-4621 CRITICAL
IBM DataPower Gateway - Privilege Escalation
CVSS 9.8
CVE-2019-2197 MEDIUM
Android - Info Disclosure
CVSS 5.5
CVE-2019-16102 CRITICAL
Silver Peak EdgeConnect <8.1.7.x - Info Disclosure
CVSS 9.8
CVE-2019-14222 CRITICAL
Alfresco Community Edition <=6.0 - Auth Bypass
CVSS 9.8
CVE-2019-4169 CRITICAL
IBM Open Power Firmware - Privilege Escalation
CVSS 9.1
CVE-2019-15304 CRITICAL
Progradegrill Wifi Grilling Thermometer Firmware - Denial of Service
CVSS 9.1
CVE-2019-2131 HIGH
Android - Privilege Escalation
CVSS 7.8
Details
Vulnerabilities 261
Links
MITRE CWE Entry Search this CWE With Exploits