# CWE-665.

Every Advisory and CVE whose sources give the weakness CWE-665, newest first.

## Records, newest first (an older page)

- [Symantec Privileged Access Manager Remote Command Execution vulnerability](https://agentprime.io/advisories/CVE-2024-36455.md)
  `CVE-2024-36455` · CVE record: Broadcom Symantec Privileged Access Management · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jul 2024 · Tags: CWE-665
- [Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability.](https://agentprime.io/advisories/CVE-2023-32467.md)
  `CVE-2023-32467` · CVE record: Dell PowerSwitch Z9664F-ON BIOS · CVSS 5.7 Medium · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-665
- [Apache CloudStack: Integration API service uses dynamic port when disabled](https://agentprime.io/advisories/CVE-2024-39864.md)
  `CVE-2024-39864` · CVE record: Apache Software Foundation Apache CloudStack · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Jul 2024 · Tags: Code injection, CWE-665
- [CVE](https://agentprime.io/advisories/CVE-2024-0089.md)
  `CVE-2024-0089` · CVE record: nvidia GPU display driver, vGPU software, and Cloud Gaming · CVSS 7.8 High · Not analysed yet · Published 13 Jun 2024 · Tags: CWE-665
- [Intel(R) Power Gadget software for Windwos: Improper initialization in some Intel(R) Power Gadget software for Windwos all versions…](https://agentprime.io/advisories/CVE-2023-45315.md)
  `CVE-2023-45315` · CVE record: Intel(R) Power Gadget software for Windwos · CVSS 5.5 Medium · Not analysed yet · Published 16 May 2024 · Tags: CWE-665, CWE-707
- [Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2023-27325.md)
  `CVE-2023-27325` · CVE record: Parallels Desktop · CVSS 7.8 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-665
- [Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2023-27324.md)
  `CVE-2023-27324` · CVE record: Parallels Desktop · CVSS 7.8 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-665
- [Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2023-27322.md)
  `CVE-2023-27322` · CVE record: Parallels Desktop · CVSS 7.8 High · Not analysed yet · Published 3 May 2024 · Tags: CWE-665
- [p2putil.c in iNet wireless daemon (IWD) through 2.15 allows attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact because of initialization issues in situati…](https://agentprime.io/advisories/CVE-2024-28084.md)
  `CVE-2024-28084` · CVE record · CVSS 7.5 High · Not analysed yet · Published 3 Mar 2024 · Tags: CWE-665
- [Intel(R) MAS software: Improper initialization in some Intel(R) MAS software before version 2.3 may allow an…](https://agentprime.io/advisories/CVE-2023-36490.md)
  `CVE-2023-36490` · CVE record: Intel(R) MAS software · CVSS 5.0 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-665
- [Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi…: Improper initialization for the Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi…](https://agentprime.io/advisories/CVE-2023-35061.md)
  `CVE-2023-35061` · CVE record: Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software · CVSS 2.3 Low · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-665
- [Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi…: Improper initialization for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi…](https://agentprime.io/advisories/CVE-2023-28720.md)
  `CVE-2023-28720` · CVE record: Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software · CVSS 6.1 Medium · Not analysed yet · Published 14 Feb 2024 · Tags: CWE-665
- [Eap-galleon: custom provisioning creates unsecured http-invoker](https://agentprime.io/advisories/CVE-2023-4503.md)
  `CVE-2023-4503` · CVE record: Red Hat EAP 7.4.14 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 6 Feb 2024 · Tags: CWE-665
- [Improper initialization of x87 and SSE floating-point configuration registers in the \_\_scone_entry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution in…](https://agentprime.io/advisories/CVE-2022-46487.md)
  `CVE-2022-46487` · CVE record · CVSS 7.8 High · Not analysed yet · Published 30 Dec 2023 · Tags: CWE-665
- [Intel(R) Optane(TM) SSD products: Improper Initialization in firmware for some Intel(R) Optane(TM) SSD products may allow…](https://agentprime.io/advisories/CVE-2023-27306.md)
  `CVE-2023-27306` · CVE record: Intel(R) Optane(TM) SSD products · CVSS 6.5 Medium · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-665
- [Improper privilege management in Intel(R) Aptio\* V UEFI Firmware Integrator Tools](https://agentprime.io/advisories/CVE-2023-28737.md)
  `CVE-2023-28737` · CVE record: Intel(R) Aptio\* V UEFI Firmware Integrator Tools · CVSS 8.8 High · Not analysed yet · Published 14 Nov 2023 · Tags: Privilege escalation, CWE-665
- [Intel Unison software: Improper Initialization for some Intel Unison software may allow a privileged user to…](https://agentprime.io/advisories/CVE-2022-46301.md)
  `CVE-2022-46301` · CVE record: Intel Unison software · CVSS 1.9 Low · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-665
- [Intel Unison software: Improper initialization for some Intel Unison software may allow an authenticated user to…](https://agentprime.io/advisories/CVE-2022-45109.md)
  `CVE-2022-45109` · CVE record: Intel Unison software · CVSS 3.3 Low · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-665
- [Bitrix24 Insecure Global Variable Extraction](https://agentprime.io/advisories/CVE-2023-1719.md)
  `CVE-2023-1719` · CVE record: Bitrix24 Bitrix24 · CVSS 7.5 High · Not analysed yet · Published 1 Nov 2023 · Tags: CWE-665
- [Run copy with container in a malicious directory may cause container escaping](https://agentprime.io/advisories/CVE-2021-33638.md)
  `CVE-2021-33638` · CVE record: openEuler iSulad · CVSS 8.4 High · Not analysed yet · Published 29 Oct 2023 · Tags: CWE-665
- [Export container in a malicious directory may cause process to be hijacked](https://agentprime.io/advisories/CVE-2021-33637.md)
  `CVE-2021-33637` · CVE record: openEuler iSulad · CVSS 8.4 High · Not analysed yet · Published 29 Oct 2023 · Tags: CWE-665
- [Load malicious images may cause process to be hijacked](https://agentprime.io/advisories/CVE-2021-33636.md)
  `CVE-2021-33636` · CVE record: openEuler iSulad · CVSS 8.4 High · Not analysed yet · Published 29 Oct 2023 · Tags: Code injection, CWE-665
- [Pull malicious images may cause process to be hijacked](https://agentprime.io/advisories/CVE-2021-33635.md)
  `CVE-2021-33635` · CVE record: openEuler iSulad · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Oct 2023 · Tags: Code injection, CWE-665
- [Malicious image running containers may cause DoS attacks](https://agentprime.io/advisories/CVE-2021-33634.md)
  `CVE-2021-33634` · CVE record: openEuler lcr · CVSS 6.3 Medium · Not analysed yet · Published 29 Oct 2023 · Tags: CWE-665
- [arm64 boot CPUs may lack speculative execution protections](https://agentprime.io/advisories/CVE-2023-5370.md)
  `CVE-2023-5370` · CVE record: FreeBSD FreeBSD · No CVSS score · Not analysed yet · Published 4 Oct 2023 · Tags: CWE-665
- [Splunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLL](https://agentprime.io/advisories/CVE-2023-40596.md)
  `CVE-2023-40596` · CVE record: Splunk Splunk Enterprise · CVSS 7.0 High · Not analysed yet · Published 30 Aug 2023 · Tags: CWE-665
- [Jenkins Gogs Plugin vulnerable to unsafe default behavior and information disclosure](https://agentprime.io/advisories/GHSA-rc33-44qp-vpvq.md)
  `GHSA-rc33-44qp-vpvq`, `CVE-2023-40349` · Maven `org.jenkins-ci.plugins:gogs-webhook`: affected `<=1.0.15`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 16 Aug 2023 · Tags: CWE-665
- [Intel(R) NUC BIOS firmware: Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to…](https://agentprime.io/advisories/CVE-2023-22356.md)
  `CVE-2023-22356` · CVE record: Intel(R) NUC BIOS firmware · CVSS 6.0 Medium · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-665
- [Intel(R) NUC 13 Extreme Compute Element…: Improper initialization in some Intel(R) NUC 13 Extreme Compute Element…](https://agentprime.io/advisories/CVE-2023-22444.md)
  `CVE-2023-22444` · CVE record: Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, Intel(R) NUC Compute Element, Intel(R) NUC Laptop Kit, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board and Intel(R) NUC Pro Mini PC BIOS firmware · CVSS 6.0 Medium · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-665
- [Intel(R) NUCs: Improper initialization in BIOS firmware for some Intel(R) NUCs may allow a privileged…](https://agentprime.io/advisories/CVE-2023-27887.md)
  `CVE-2023-27887` · CVE record: Intel(R) NUCs · CVSS 6.1 Medium · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-665
- [Intel(R) Processors: Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a…](https://agentprime.io/advisories/CVE-2022-38083.md)
  `CVE-2022-38083` · CVE record: Intel(R) Processors · CVSS 6.1 Medium · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-665
- [Arbitrary File Overwrite using less command](https://agentprime.io/advisories/CVE-2023-31926.md)
  `CVE-2023-31926` · CVE record: Brocade Fabric OS · CVSS 7.1 High · Not analysed yet · Published 2 Aug 2023 · Tags: CWE-281, CWE-665
- [Resource allocation without limits in B&R Industrial Automation B&R Automation Runtime](https://agentprime.io/advisories/CVE-2023-3242.md)
  `CVE-2023-3242` · CVE record: B&R Industrial Automation B&R Automation Runtime · CVSS 8.6 High · Not analysed yet · Published 26 Jul 2023 · Tags: Denial of service, CWE-665
- [Improper sanitization of MXCSR and RFLAGS in OpenEnclave](https://agentprime.io/advisories/CVE-2023-37479.md)
  `CVE-2023-37479` · CVE record: openenclave openenclave · CVSS 5.3 Medium · Not analysed yet · Published 17 Jul 2023 · Tags: CWE-665
- [Intel(R) NUC BIOS firmware: Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user…](https://agentprime.io/advisories/CVE-2022-31477.md)
  `CVE-2022-31477` · CVE record: Intel(R) NUC BIOS firmware · CVSS 4.0 Medium · Not analysed yet · Published 10 May 2023 · Tags: CWE-665
- [A malicious actor may convince a victim to open a malicious USD file that may trigger an uninitialized variable which may result in code execution.](https://agentprime.io/advisories/CVE-2023-25010.md)
  `CVE-2023-25010` · CVE record: Autodesk Maya USD Plugin · CVSS 7.8 High · Not analysed yet · Published 17 Apr 2023 · Tags: CWE-665
- [Some smartphones have data initialization issues.](https://agentprime.io/advisories/CVE-2022-48352.md)
  `CVE-2022-48352` · CVE record: Huawei HarmonyOS and 1 more · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2023 · Tags: CWE-665
- [A flaw was found in KVM.](https://agentprime.io/advisories/CVE-2023-1513.md)
  `CVE-2023-1513` · CVE record: Linux kernel (KVM) · CVSS 3.3 Low · Not analysed yet · Published 23 Mar 2023 · Tags: CWE-665
- [The armv8_dec_aes_gcm_full() API of Arm AArch64cryptolib before 86065c6 fails to the verify the authentication tag of AES-GCM protected data, leading to a man-in-the-middle attack.](https://agentprime.io/advisories/CVE-2023-26084.md)
  `CVE-2023-26084` · CVE record · CVSS 3.7 Low · Not analysed yet · Published 15 Mar 2023 · Tags: CWE-665
- [WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::cat_compute_size.](https://agentprime.io/advisories/PYSEC-2023-316.md)
  `PYSEC-2023-316`, `CVE-2023-27115` · PyPI `wabt`: affected `<=1.0.29`, no fixed version yet · CVSS 5.5 Medium · Not analysed yet · Published 10 Mar 2023 · Tags: CWE-665
- [MMS File Transfer Vulnerability impact on Distribution Automation products](https://agentprime.io/advisories/CVE-2021-22283.md)
  `CVE-2021-22283` · CVE record: ABB Relion protection relays - 611 series and 4 more · CVSS 6.2 Medium · Not analysed yet · Published 28 Feb 2023 · Tags: CWE-665
- [TechPowerUp Ryzen DRAM Calculator WinRing0x64.sys initialization](https://agentprime.io/advisories/CVE-2023-1048.md)
  `CVE-2023-1048` · CVE record: TechPowerUp Ryzen DRAM Calculator · CVSS 5.3 Medium · Not analysed yet · Published 26 Feb 2023 · Tags: CWE-665
- [TechPowerUp RealTemp WinRing0x64.sys initialization](https://agentprime.io/advisories/CVE-2023-1047.md)
  `CVE-2023-1047` · CVE record: TechPowerUp RealTemp · CVSS 5.3 Medium · Not analysed yet · Published 26 Feb 2023 · Tags: CWE-665
- [BIG-IP Virtual Edition vulnerability](https://agentprime.io/advisories/CVE-2023-23555.md)
  `CVE-2023-23555` · CVE record: F5 BIG-IP and 1 more · CVSS 7.5 High · Not analysed yet · Published 1 Feb 2023 · Tags: CWE-665
- [An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret data.](https://agentprime.io/advisories/CVE-2022-46505.md)
  `CVE-2022-46505` · CVE record · CVSS 7.5 High · Not analysed yet · Published 18 Jan 2023 · Tags: CWE-665
- [reject_remote_clients Configuration corruption](https://agentprime.io/advisories/GHSA-7rrj-xr53-82p7.md)
  `GHSA-7rrj-xr53-82p7`, `CVE-2023-22466`, `RUSTSEC-2023-0001` · crates.io `tokio`: affected `>=1.7.0, <1.18.4 || >=1.19.0, <1.20.3 || >=1.21.0, <1.23.1`, fixed in `1.18.4`, `1.20.3`, `1.23.1` · CVSS 5.4 Medium · Not analysed yet · Published 4 Jan 2023 · Tags: CWE-665
- [OpenShift: Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow…](https://agentprime.io/advisories/CVE-2022-3259.md)
  `CVE-2022-3259` · CVE record: OpenShift · CVSS 7.4 High · Not analysed yet · Published 9 Dec 2022 · Tags: CWE-665
- [Hector Cabrera WordPress Popular Posts: External initialization of trusted variables or data stores vulnerability exists in…](https://agentprime.io/advisories/CVE-2022-43468.md)
  `CVE-2022-43468` · CVE record: Hector Cabrera WordPress Popular Posts · CVSS 7.5 High · Not analysed yet · Published 7 Dec 2022 · Tags: CWE-665
- [NodeBB vulnerable to account takeover via prototype vulnerability](https://agentprime.io/advisories/GHSA-rf3g-v8p5-p675.md)
  `GHSA-rf3g-v8p5-p675`, `CVE-2022-46164` · npm `nodebb`: affected `<2.6.1`, fixed in `2.6.1` · CVSS 9.4 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.47 · Not analysed yet · Published 5 Dec 2022 · Tags: CWE-665
- [Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards: Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R)…](https://agentprime.io/advisories/CVE-2022-37334.md)
  `CVE-2022-37334` · CVE record: Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards · CVSS 7.0 High · Not analysed yet · Published 11 Nov 2022 · Tags: CWE-665
- [Codeigniter4's Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued](https://agentprime.io/advisories/GHSA-745p-r637-7vvp.md)
  `GHSA-745p-r637-7vvp`, `BIT-codeigniter-2022-39284`, `CVE-2022-39284`, `PKSA-gdkx-2hq2-gzns` · Packagist `codeigniter4/framework`: affected `<4.2.7`, fixed in `4.2.7` · CVSS 2.6 Low · Not analysed yet · Published 6 Oct 2022 · Tags: Broken access control, CWE-665
- [A memory initialization issue was addressed with improved memory handling.](https://agentprime.io/advisories/CVE-2022-32823.md)
  `CVE-2022-32823` · CVE record: Apple macOS and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 23 Sept 2022 · Tags: CWE-665
- [Improper Initialization vulnerability in local server authentication logic](https://agentprime.io/advisories/CVE-2022-2472.md)
  `CVE-2022-2472` · CVE record: EZVIZ CS-C6N-A0-1C2WFR · CVSS 7.6 High · Not analysed yet · Published 15 Sept 2022 · Tags: CWE-665
- [A flaw was found in the Linux kernel’s implementation of reading the SVC RDMA counters.](https://agentprime.io/advisories/CVE-2021-4218.md)
  `CVE-2021-4218` · CVE record: kernel · No CVSS score · Not analysed yet · Published 24 Aug 2022 · Tags: CWE-665
- [Intel(R) NUC Laptop Kits: Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version…](https://agentprime.io/advisories/CVE-2022-32579.md)
  `CVE-2022-32579` · CVE record: Intel(R) NUC Laptop Kits · CVSS 6.9 Medium · Not analysed yet · Published 18 Aug 2022 · Tags: CWE-665
- [Intel(R) NUC Laptop Kits: Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version…](https://agentprime.io/advisories/CVE-2022-27493.md)
  `CVE-2022-27493` · CVE record: Intel(R) NUC Laptop Kits · CVSS 7.8 High · Not analysed yet · Published 18 Aug 2022 · Tags: CWE-665
- [Intel(R) Data Center Manager software: Improper initialization in the Intel(R) Data Center Manager software before version 4.1…](https://agentprime.io/advisories/CVE-2022-24378.md)
  `CVE-2022-24378` · CVE record: Intel(R) Data Center Manager software · CVSS 5.5 Medium · Not analysed yet · Published 18 Aug 2022 · Tags: CWE-665
- [Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products: Improper initialization for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi…](https://agentprime.io/advisories/CVE-2021-23223.md)
  `CVE-2021-23223` · CVE record: Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products · CVSS 7.8 High · Not analysed yet · Published 18 Aug 2022 · Tags: CWE-665
- [Apache Calcite Avatica JDBC driver arbitrary code execution](https://agentprime.io/advisories/GHSA-w7f5-jrpr-5c2m.md)
  `GHSA-w7f5-jrpr-5c2m`, `CVE-2022-36364` · Maven `org.apache.calcite.avatica:avatica-core`: affected `<1.22.0`, fixed in `1.22.0` · CVSS 8.8 High · Not analysed yet · Published 29 Jul 2022 · Tags: CWE-665
- [Moby Docker cp broken with debian containers](https://agentprime.io/advisories/GHSA-v2cv-wwxq-qq97.md)
  `GHSA-v2cv-wwxq-qq97`, `CVE-2019-14271`, `GO-2024-2521` · Go `github.com/docker/docker`: affected `>=19.03.0, <19.03.1`, fixed in `19.03.1` · CVSS 9.8 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.19 · Not analysed yet · Published 24 May 2022 · Tags: Code injection, CWE-665

Newest: <https://agentprime.io/advisories/tag/cwe-665.md>
Older: <https://agentprime.io/advisories/tag/cwe-665.md?cursor=WyIyMDIyLTA1LTI0VDE2OjUxOjM5LjAwMDAwMFoiLCJHSFNBLXYyY3Ytd3d4cS1xcTk3Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-665&cursor=WyIyMDI0LTA4LTA4VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMy00MDI2MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-665/?cursor=WyIyMDI0LTA4LTA4VDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyMy00MDI2MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.