CWE-665
Medium likelihoodImproper Initialization
The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used.
354 vulnerabilities with CWE-665
CVE-2017-12847
MEDIUM
Nagios Core <4.3.3 - Privilege Escalation
CVSS 6.3
CVE-2017-0745
HIGH
Android 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 - Remote Code Execution in AVC Decoder
CVSS 7.8
CVE-2017-0735
MEDIUM
Android 6.0 6.0.1 7.0 7.1.1 7.1.2 - Denial of Service in Media Framework
CVSS 5.5
CVE-2017-0723
HIGH
Android 6.0 6.0.1 7.0 7.1.1 7.1.2 - Remote Code Execution in Media Framework
CVSS 7.8
CVE-2017-10972
MEDIUM
X.Org X Server <2017-06-19 - Info Disclosure
CVSS 6.5
CVE-2017-8576
HIGH
Microsoft Windows < - Privilege Escalation
CVSS 7.0
CVE-2017-0641
MEDIUM
Android 4.4.4 5.0.2 5.1.1 6.0 6.0.1 7.0 7.1.1 7.1.2 - Denial of Service in libvpx
CVSS 5.5
CVE-2017-3820
MEDIUM
Cisco IOS XE 15.5(3)S2.1 15.6(1)S1.1 - Authenticated Denial of Service via SNMP Functions
CVSS 6.5
CVE-2016-1000109
MEDIUM
HHVM < 3.9.6, 3.10.0-3.12.4, 3.13.0-3.14.2 - HTTP Proxy Header Injection via HTTP_PROXY Environment Variable
CVSS 5.3
CVE-2016-9594
MEDIUM
curl < 7.52.1 - Improper Initialization in Random Value Generation
CVSS 6.5
CVE-2016-9446
HIGH
GStreamer < 1.11.1 - Information Disclosure via VMNC Decoder Canvas Initialization
CVSS 7.5
CVE-2016-6836
MEDIUM
QEMU < 2.7.1 - Information Disclosure via Uninitialized txcq_descr Object
CVSS 6.0
CVE-2015-8367
CRITICAL
LibRaw < 0.17.1 - Memory Corruption via Improper Initialization in phase_one_correct
CVSS 9.8
CVE-2014-8181
MEDIUM
Red Hat Enterprise Linux 7 & MRG-2 - Info Disclosure
CVSS 5.5
CVE-2014-9942
HIGH
Boot in Android - Use of Uninitialized Variable
CVSS 7.8
CVE-2014-4371
Apple tvOS < 6.2 - Information Disclosure via Uninitialized Kernel Memory
CVE-2014-0178
Samba 3.6.6-4.1.8 - Info Disclosure
CVE-2013-1634
HIGH
Intel 82574L Controller Firmware < 2013-02-06 - Denial of Service via Malformed Packet Parsing
CVSS 7.5
CVE-2013-1675
MEDIUM
KEV
Mozilla Firefox <21 - Info Disclosure
CVSS 6.5
CVE-2012-0012
Microsoft Internet Explorer 9 - Information Disclosure via Improper String Object Initialization
CVE-2011-4087
HIGH
Linux Kernel < 2.6.39 - Denial of Service via Uninitialized Data Structure in br_parse_ip_options
CVSS 7.5
CVE-2011-3927
Google Chrome < 16.0.912.77 - Denial of Service via Skia Initialization Issue
CVE-2010-4655
MEDIUM
Linux kernel <2.6.36 - Info Disclosure
CVSS 5.5
CVE-2010-4343
MEDIUM
Linux Kernel < 2.6.35 - Denial of Service via Uninitialized Port Data Structure
CVSS 5.5
CVE-2008-3637
HIGH
Apple Mac OS X 10.4.11, 10.5.4, 10.5.5 - Remote Code Execution via Uninitialized HMAC Variable
CVSS 8.8
Details
Vulnerabilities
354
Exploit Likelihood
Medium