CWE-665

Medium likelihood

Improper Initialization

Parent: CWE-664 - Improper Control of a Resource Through its Lifetime

The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.

354 vulnerabilities with CWE-665
CVE-2017-12847 MEDIUM
Nagios Core <4.3.3 - Privilege Escalation
CVSS 6.3
CVE-2017-0745 HIGH
Android 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 - Remote Code Execution in AVC Decoder
CVSS 7.8
CVE-2017-0735 MEDIUM
Android 6.0 6.0.1 7.0 7.1.1 7.1.2 - Denial of Service in Media Framework
CVSS 5.5
CVE-2017-0723 HIGH
Android 6.0 6.0.1 7.0 7.1.1 7.1.2 - Remote Code Execution in Media Framework
CVSS 7.8
CVE-2017-10972 MEDIUM
X.Org X Server <2017-06-19 - Info Disclosure
CVSS 6.5
CVE-2017-8576 HIGH
Microsoft Windows < - Privilege Escalation
CVSS 7.0
CVE-2017-0641 MEDIUM
Android 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 - Denial of Service in libvpx
CVSS 5.5
CVE-2017-3820 MEDIUM
Cisco IOS XE 15.5(3)S2.1 15.6(1)S1.1 - Authenticated Denial of Service via SNMP Functions
CVSS 6.5
CVE-2016-1000109 MEDIUM
HHVM < 3.9.6, 3.10.0-3.12.4, 3.13.0-3.14.2 - HTTP Proxy Header Injection via HTTP_PROXY Environment Variable
CVSS 5.3
CVE-2016-9594 MEDIUM
curl < 7.52.1 - Improper Initialization in Random Value Generation
CVSS 6.5
CVE-2016-9446 HIGH
GStreamer < 1.11.1 - Information Disclosure via VMNC Decoder Canvas Initialization
CVSS 7.5
CVE-2016-6836 MEDIUM
QEMU < 2.7.1 - Information Disclosure via Uninitialized txcq_descr Object
CVSS 6.0
CVE-2015-8367 CRITICAL
LibRaw < 0.17.1 - Memory Corruption via Improper Initialization in phase_one_correct
CVSS 9.8
CVE-2014-8181 MEDIUM
Red Hat Enterprise Linux 7 & MRG-2 - Info Disclosure
CVSS 5.5
CVE-2014-9942 HIGH
Boot in Android - Use of Uninitialized Variable
CVSS 7.8
CVE-2014-4371
Apple tvOS < 6.2 - Information Disclosure via Uninitialized Kernel Memory
CVE-2014-0178
Samba 3.6.6-4.1.8 - Info Disclosure
CVE-2013-1634 HIGH
Intel 82574L Controller Firmware < 2013-02-06 - Denial of Service via Malformed Packet Parsing
CVSS 7.5
CVE-2013-1675 MEDIUM KEV
Mozilla Firefox <21 - Info Disclosure
CVSS 6.5
CVE-2012-0012
Microsoft Internet Explorer 9 - Information Disclosure via Improper String Object Initialization
CVE-2011-4087 HIGH
Linux Kernel < 2.6.39 - Denial of Service via Uninitialized Data Structure in br_parse_ip_options
CVSS 7.5
CVE-2011-3927
Google Chrome < 16.0.912.77 - Denial of Service via Skia Initialization Issue
CVE-2010-4655 MEDIUM
Linux kernel <2.6.36 - Info Disclosure
CVSS 5.5
CVE-2010-4343 MEDIUM
Linux Kernel < 2.6.35 - Denial of Service via Uninitialized Port Data Structure
CVSS 5.5
CVE-2008-3637 HIGH
Apple Mac OS X 10.4.11, 10.5.4, 10.5.5 - Remote Code Execution via Uninitialized HMAC Variable
CVSS 8.8
Details
Vulnerabilities 354
Exploit Likelihood Medium