CWE-1188.

A vulnerability in the BluStar component of Mitel InAttend 2.6 SP4 through 2.7 and CMG 8.5 SP4 through 8.6 could allow access to sensitive information, changes to the system configuration, or executi…

• CWE-1188

Zhejiang Uniview Technologies Co.,Ltd and Atsumi Electric…: Initialization of a resource with an insecure default vulnerability in OET-213H-BTS1 sold…

• Zhejiang Uniview Technologies Co.,Ltd and Atsumi Electric Co., Ltd. OET-213H-BTS1
• CWE-1188

ASA-2024-004: Default configuration param for Evidence may limit window of validity

• CWE-1188

<=0.38.5 · no fixed version yet

EDS-4000/G4000 Series IP Forwarding Vulnerability

• Moxa EDS-4008 Series
• Moxa EDS-4009 Series
• CWE-1188

Liferay Portal has a Stored XSS with Blog entries (Insecure defaults)

• CWE-1188

<5.0.96 · fixed in 5.0.96

Liferay Portal and Liferay DXP HTTP Header Can Expose Versions

• CWE-1188

<7.2.10.fp19 || >=7.3.0, <7.3.10.u5 || >=7.4.0, <7.4.13.u26 · fixed in 7.2.10.fp19, 7.3.10.u5, 7.4.13.u26

An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2.

• Canonical Ltd. Ubuntu EDK II
• CWE-1188

Insecure Default Initialization of Resource in HID Global

• HID Global iCLASS SE CP1000 Encoder
• HID Global iCLASS SE Readers
• CWE-1188

Default swagger-ui configuration exposes all files in the module

• CWE-1188

>=2.0.0, <2.1.0 · fixed in 2.1.0

Unitronics VisiLogic uses a default administrative password

• Unitronics VisiLogic
• CWE-1188

MTProto proxy remote code execution vulnerability

• Code injection
• CWE-1188

<=0.7.2 · no fixed version yet

msdosfs data disclosure

• FreeBSD
• CWE-1188

Improper Access Control in OPTO 22 SNAP PAC S1

• OPTO 22 SNAP PAC S1
• CWE-1188

ETIC Telecom Insecure Default Initialization of Resource

• ETIC Telecom Remote Access Server (RAS)
• CWE-1188

Temporal Server vulnerable to Incorrect Authorization and Insecure Default Initialization of Resource

• Broken access control
• CWE-1188

<1.20.0 · fixed in 1.20.0

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

• Huawei EMUI
• CWE-1188

Configuration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.

• Huawei EMUI
• CWE-1188

Insecure Default Initialization In Liferay Portal

• CWE-1188

>=7.0.0, <7.3.1 · fixed in 7.3.1

User data exposure in Apache InLong

• CWE-1188

>=1.5.0, <1.7.0 · fixed in 1.7.0

Apache superset missing check for default SECRET_KEY

• CWE-1188

<2.1.0 · fixed in 2.1.0

Junos OS Evolved: Read access to some confidential user information is possible

• Juniper Networks Junos OS Evolved
• CWE-1188

In JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed.

• JetBrains IntelliJ IDEA
• CWE-1188

Apache OpenOffice: Empty entry in Java class path

• Apache Software Foundation Apache OpenOffice
• Code injection
• CWE-427

CODESYS: Exposure of Resource to Wrong Sphere in CODESYS V3

• CODESYS Control RTE (SL)
• CODESYS Control RTE (for Beckhoff CX) SL
• CWE-1188

In JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents.

• JetBrains TeamCity
• CWE-1188

Speculative execution attacks in KVM VMX

• Linux Kernel
• CWE-1188

Android: In applyKeyguardFlags of NotificationShadeWindowControllerImpl.java…

• Android
• CWE-1188

A flaw was found in Openshift.

• openshift
• CWE-453
• CWE-1188

HEIDENHAIN Controller TNC 640 NC Software: The HEIDENHAIN Controller TNC 640 NC software Version 340590 07 SP5…

• HEIDENHAIN Controller TNC 640 NC Software
• CWE-1188

Apache Isis webconsole module may directly query the database in prototype mode

• CWE-1188

<2.0.0-M8 · fixed in 2.0.0-M8

WildFly vulnerable to Insecure Default Initialization of Resource

• CWE-1188

<27.0.0.Beta1 · fixed in 27.0.0.Beta1

Dell PowerScale OneFS: Dell PowerScale OneFS, versions 9.0.0, up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6…

• Dell PowerScale OneFS
• CWE-1188

A flaw was found in servicemesh-operator.

• servicemesh-operator
• CWE-1188

Insecure default settings in CODESYS Runtime Toolkit 32 bit full and CODESYS PLCWinNT

• CODESYS PLCWinNT
• CODESYS Runtime Toolkit 32 bit full
• CWE-1188

OpenStack Nova uses insecure keystone middleware tmpdir by default

• CWE-1188

<0.2.4 · fixed in 0.2.4

Insecure Default Initialization of Resource in Pivotal Spring Web Flow

• CWE-1188

<2.4.6 · fixed in 2.4.6

Insecure Default Initialization of Resource in Pivotal Spring Web Flow

• CWE-1188

>=2.4.0, <2.4.5 · fixed in 2.4.5

Intel(R) RealSense(TM) ID Solution F450: Insecure default variable initialization of Intel(R) RealSense(TM) ID Solution F450…

• Intel(R) RealSense(TM) ID Solution F450
• CWE-1188

Siemens SIMATIC PCS 7 V8.2: A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions)…

• Siemens SIMATIC PCS 7 V8.2
• Siemens SIMATIC PCS 7 V9.0
• CWE-1188

Remote Code Execution Vulnerability in Packaging

• Apache Software Foundation Apache CouchDB
• CWE-1188

Insecure default configuration

• redash
• CWE-1188

Insufficient Security Control Vulnerability

• Hitachi Energy Relion 670 Series
• Hitachi Energy Relion 670/650 Series
• CWE-1188

Argo CD Insecure default administrative password

• Authentication bypass
• CWE-1188

<=1.8.0 · no fixed version yet

Arbitrary Code Execution in grunt

• CWE-1188

<1.3.0 · fixed in 1.3.0

Authentication bypass in Apache Airflow

• Authentication bypass
• CWE-1056

<1.10.11 · fixed in 1.10.11

An issue was discovered in Svakom Siime Eye 14.1.00000001.3.330.0.0.3.14.

• CWE-1188

Insecure defaults in UmbracoForms

• CWE-1188

<=8.4.1 · no fixed version yet

Red Hat Tower: A flaw was found in Ansible Tower, versions 3.6.x before 3.6.2 and 3.5.x before 3.5.3…

• Red Hat Tower
• CWE-1188

The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins

• CWE-1188

>=9.0.0.M1, <9.0.9 || >=8.5.0, <8.5.32 || >=8.0.0RC1, <8.0.53 || >=7.0.41, <7.0.88 · fixed in 9.0.9, 8.5.32, 8.0.53, 7.0.88

Electron webPreferences vulnerability can be used to perform remote code execution

• CWE-1188

>=1.7.0, <1.7.16 || >=1.8.0, <1.8.8 || >=2.0.0, <2.0.8 || >=3.0.0-beta.1, <3.0.0-beta.7 · fixed in 1.7.16, 1.8.8, 2.0.8, 3.0.0-beta.7

After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain conditions.

• Siemens RUGGEDCOM i800
• Siemens RUGGEDCOM i800NC
• CWE-1188