CWE-909

Medium likelihood

Missing Initialization of Resource

Parent: CWE-665 - Improper Initialization

The product does not initialize a critical resource.

102 vulnerabilities with CWE-909
CVE-2020-12523 MEDIUM
Phoenix Contact mGuard Devices <8.8.3 - Info Disclosure
CVSS 5.4
CVE-2020-0488 MEDIUM
Android 11 - Information Disclosure via Uninitialized Data in ihevc_inter_pred_chroma_copy_ssse3
CVSS 6.5
CVE-2020-12352 MEDIUM
Linux Kernel 5.4-5.4.71 - Unauthenticated Information Disclosure via BlueZ Access Control
CVSS 6.5
CVE-2020-20739 MEDIUM
libvips < 8.8.2 - Information Disclosure via Uninitialized Variable in im_vips2dz
CVSS 5.3
CVE-2020-0438 HIGH
Android - Local Privilege Escalation via Uninitialized Data in AIBinder_Class Constructor
CVSS 7.8
CVE-2020-16932 HIGH
Microsoft Excel - Remote Code Execution via Crafted File
CVSS 7.8
CVE-2020-9227 MEDIUM
Huawei Smart Phones Moana-AL00B <10.1.0.166 - Info Disclosure
CVSS 5.5
CVE-2020-1419 MEDIUM
Windows 10 and Windows 7 and Windows 8.1 and Windows RT 8.1 - Information Disclosure via Uninitialized Memory
CVSS 5.5
CVE-2020-0195 MEDIUM
Android 10 - Information Disclosure via Uninitialized Data in ihevcd_iquant_itrans_recon_ctb
CVSS 6.5
CVE-2020-0134 MEDIUM
Android 10 - Information Disclosure via Uninitialized Data in BnDrm::onTransact
CVSS 5.5
CVE-2020-0101 MEDIUM
Android 8.0-10 - Information Disclosure via Uninitialized Data in BnCrypto::onTransact
CVSS 5.5
CVE-2020-11741 HIGH
Xen < 4.13.0 - Denial of Service via Xenoprof Shared Ring Buffer Manipulation
CVSS 8.8
CVE-2020-11494 MEDIUM
Linux Kernel 3.16-5.6.2 - Information Disclosure via Uninitialized can_frame Data in slc_bump
CVSS 4.4
CVE-2020-6792 MEDIUM
Thunderbird < 68.5.0 - Information Disclosure via Uninitialized Memory in Email Identifier Derivation
CVSS 4.3
CVE-2019-25054 HIGH
pnet < 0.27.2 - Segmentation Fault via Uninitialized Descriptor Dereference
CVSS 7.5
CVE-2019-25016 HIGH
OpenDoas <6.9 - Privilege Escalation
CVSS 8.8
CVE-2019-19553 HIGH
Wireshark 2.6.0-2.6.12 and 3.0.0-3.0.6 - Denial of Service in CMS Dissector
CVSS 7.5
CVE-2019-19536 MEDIUM
Linux kernel <5.2.9 - Info Disclosure
CVSS 4.6
CVE-2019-19535 MEDIUM
Linux kernel <5.2.9 - Info Disclosure
CVSS 4.6
CVE-2019-19534 LOW
Linux kernel <5.3.11 - Info Disclosure
CVSS 2.4
CVE-2019-12410 HIGH
Apache Arrow <0.14.1 - Memory Corruption
CVSS 7.5
CVE-2019-12408 HIGH
Apache Arrow <0.14.1 - Memory Corruption
CVSS 7.5
CVE-2019-9321 MEDIUM
Android 10 - Information Disclosure via Missing Variable Initialization in libavc
CVSS 6.5
CVE-2019-9320 MEDIUM
Android 10 - Remote Information Disclosure via Missing Variable Initialization in libavc
CVSS 6.5
CVE-2019-9319 MEDIUM
Android 10 - Remote Information Disclosure via Missing Variable Initialization in libavc
CVSS 6.5
Details
Vulnerabilities 102
Exploit Likelihood Medium