# CWE-665.

Every Advisory and CVE whose sources give the weakness CWE-665, newest first.

## Records, newest first (an older page)

- [Arctic Wireless Gateway Firewall vulnerability](https://agentprime.io/advisories/CVE-2022-0947.md)
  `CVE-2022-0947` · CVE record: ABB ABB ARG600 Wireless Gateway series · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 May 2022 · Tags: CWE-665
- [Junos OS: EX4650 Series: Certain traffic received by the Junos OS device on the management interface may be forwarded to egress interfaces instead of discarded](https://agentprime.io/advisories/CVE-2022-22186.md)
  `CVE-2022-22186` · CVE record: Juniper Networks Junos OS · CVSS 7.2 High · Not analysed yet · Published 14 Apr 2022 · Tags: CWE-665
- [openjpeg2: A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles…](https://agentprime.io/advisories/CVE-2022-1122.md)
  `CVE-2022-1122` · CVE record: openjpeg2 · No CVSS score · Not analysed yet · Published 29 Mar 2022 · Tags: CWE-665
- [mod_lua Use of uninitialized value of in r:parsebody](https://agentprime.io/advisories/CVE-2022-22719.md)
  `CVE-2022-22719` · CVE record: Apache Software Foundation Apache HTTP Server · No CVSS score · EPSS 0.70 · Not analysed yet · Published 14 Mar 2022 · Tags: CWE-665
- [kernel: A flaw was found in the way the "flags" member of the new pipe buffer structure was…](https://agentprime.io/advisories/CVE-2022-0847.md)
  `CVE-2022-0847` · CVE record: kernel · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.93 · Not analysed yet · Published 7 Mar 2022 · Tags: CWE-665
- [TPM 1.2 key authorization values vulnerable to TPM transport eavesdropper in go-tpm](https://agentprime.io/advisories/GHSA-5x29-3hr9-6wpw.md)
  `GHSA-5x29-3hr9-6wpw`, `CVE-2020-8918`, `GO-2021-0095` · Go `github.com/google/go-tpm`: affected `<0.3.0`, fixed in `0.3.0` · CVSS 6.3 Medium · Not analysed yet · Published 11 Feb 2022 · Tags: CWE-665
- [Interactive Graphical SCADA System Data Server…: A CWE-665: Improper Initialization vulnerability exists that could cause information…](https://agentprime.io/advisories/CVE-2022-24316.md)
  `CVE-2022-24316` · CVE record: Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) · No CVSS score · Not analysed yet · Published 9 Feb 2022 · Tags: CWE-665
- [Intel(R) Processors: Improper initialization of shared resources in some Intel(R) Processors may allow an…](https://agentprime.io/advisories/CVE-2021-0145.md)
  `CVE-2021-0145` · CVE record: Intel(R) Processors · CVSS 5.5 Medium · Not analysed yet · Published 9 Feb 2022 · Tags: CWE-665
- [Intel(R) Processors: Improper initialization in the firmware for some Intel(R) Processors may allow a…](https://agentprime.io/advisories/CVE-2021-0125.md)
  `CVE-2021-0125` · CVE record: Intel(R) Processors · CVSS 6.6 Medium · Not analysed yet · Published 9 Feb 2022 · Tags: CWE-665
- [Intel(R) Processors: Improper initialization in the firmware for some Intel(R) Processors may allow a…](https://agentprime.io/advisories/CVE-2021-0119.md)
  `CVE-2021-0119` · CVE record: Intel(R) Processors · CVSS 6.2 Medium · Not analysed yet · Published 9 Feb 2022 · Tags: CWE-665
- [pgjdbc Does Not Check Class Instantiation when providing Plugin Classes](https://agentprime.io/advisories/GHSA-v7wg-cpwc-24m4.md)
  `GHSA-v7wg-cpwc-24m4`, `BIT-postgresql-jdbc-driver-2022-21724`, `CVE-2022-21724` · Maven `org.postgresql:postgresql`: affected `>=9.4.1208, <42.2.25 || >=42.3.0, <42.3.2`, fixed in `42.2.25`, `42.3.2` · CVSS 7.0 High · Not analysed yet · Published 2 Feb 2022 · Tags: Other injection, Information disclosure, CWE-665
- [Junos OS and Junos OS Evolved: OSPFv3 session might go into INIT state upon receipt of multiple crafted packets from a trusted neighbor device.](https://agentprime.io/advisories/CVE-2022-22169.md)
  `CVE-2022-22169` · CVE record: Juniper Networks Junos OS and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 19 Jan 2022 · Tags: CWE-665
- [Junos OS Evolved: Telnet service may be enabled when it is expected to be disabled.](https://agentprime.io/advisories/CVE-2022-22164.md)
  `CVE-2022-22164` · CVE record: Juniper Networks Junos OS Evolved · CVSS 6.5 Medium · Not analysed yet · Published 19 Jan 2022 · Tags: CWE-665
- [Improper Initialization in Pillow](https://agentprime.io/advisories/GHSA-pw3c-h7wp-cvhx.md)
  `GHSA-pw3c-h7wp-cvhx`, `BIT-pillow-2022-22815`, `CVE-2022-22815`, `PYSEC-2022-8` · PyPI `pillow`: affected `<9.0.0`, fixed in `9.0.0` · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2022 · Tags: CWE-665
- [Resource Exhaustion Denial of Service in http-proxy-agent](https://agentprime.io/advisories/GHSA-86wf-436m-h424.md)
  `GHSA-86wf-436m-h424`, `CVE-2019-10196` · npm `http-proxy-agent`: affected `<2.1.0`, fixed in `2.1.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Jan 2022 · Tags: CWE-665
- [OpenZeppelin Contracts initializer reentrancy may lead to double initialization](https://agentprime.io/advisories/GHSA-88g8-f5mf-f5rj.md)
  `GHSA-88g8-f5mf-f5rj`, `CVE-2021-46320`, `CVE-2022-39384`, `GHSA-9c22-pwxw-p6hx` · npm `@openzeppelin/contracts` and 1 more: affected `>=3.2.0, <4.4.1`, fixed in `4.4.1` · CVSS 5.6 Medium · Not analysed yet · Published 14 Dec 2021 · Tags: CWE-665
- [Dell Networking OS10: Dell Networking OS10 versions 10.4.3.x…](https://agentprime.io/advisories/CVE-2021-36319.md)
  `CVE-2021-36319` · CVE record: Dell Dell Networking OS10 · CVSS 3.3 Low · Not analysed yet · Published 20 Nov 2021 · Tags: CWE-665
- [Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential lo…](https://agentprime.io/advisories/CVE-2021-26312.md)
  `CVE-2021-26312` · CVE record: AMD EPYC™ Processors and 2 more · No CVSS score · Not analysed yet · Published 16 Nov 2021 · Tags: CWE-665
- [Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity.](https://agentprime.io/advisories/CVE-2021-26326.md)
  `CVE-2021-26326` · CVE record: AMD 3rd Gen AMD EPYC™ · No CVSS score · Not analysed yet · Published 16 Nov 2021 · Tags: CWE-665
- [A flaw was found in the Linux kernel.](https://agentprime.io/advisories/CVE-2021-20317.md)
  `CVE-2021-20317` · CVE record: kernel · No CVSS score · Not analysed yet · Published 27 Sept 2021 · Tags: CWE-665
- [Cisco IOS XE Software Protection Against Distributed Denial of Service Attacks Feature Vulnerability](https://agentprime.io/advisories/CVE-2021-34697.md)
  `CVE-2021-34697` · CVE record: Cisco Cisco IOS XE Software · CVSS 5.8 Medium · Not analysed yet · Published 23 Sept 2021 · Tags: CWE-665
- [UUPSUpgradeable vulnerability in @openzeppelin/contracts](https://agentprime.io/advisories/GHSA-5vp3-v4hc-gx76.md)
  `GHSA-5vp3-v4hc-gx76`, `CVE-2021-41264` · npm `@openzeppelin/contracts` and 1 more: affected `>=4.1.0, <4.3.2`, fixed in `4.3.2` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2021 · Tags: CWE-665
- [Use of Uninitialized Resource in alg_ds](https://agentprime.io/advisories/GHSA-3vv3-frrq-6486.md)
  `GHSA-3vv3-frrq-6486`, `CVE-2020-36432`, `RUSTSEC-2020-0033` · crates.io `alg_ds`: affected `<=0.3.1`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2021 · Tags: Memory corruption, CWE-665
- [Junos OS: PTX Series, QFX10K Series: Upon receipt of specific packets BFD sessions might flap due to DDoS policer implementation in Packet Forwarding Engine](https://agentprime.io/advisories/CVE-2021-0280.md)
  `CVE-2021-0280` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 15 Jul 2021 · Tags: CWE-665
- [tpm2-tools: A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import…](https://agentprime.io/advisories/CVE-2021-3565.md)
  `CVE-2021-3565` · CVE record: tpm2-tools · No CVSS score · Not analysed yet · Published 4 Jun 2021 · Tags: CWE-665
- [Interpreter crash from \`tf.io.decode_raw\`](https://agentprime.io/advisories/GHSA-8pmx-p244-g88h.md)
  `GHSA-8pmx-p244-g88h`, `BIT-tensorflow-2021-29614`, `CVE-2021-29614`, `PYSEC-2021-251`, `PYSEC-2021-542`, `PYSEC-2021-740` · PyPI `tensorflow` and 2 more: affected `<2.1.4 || >=2.2.0, <2.2.3 || >=2.3.0, <2.3.3 || >=2.4.0, <2.4.2`, fixed in `2.1.4`, `2.2.3`, `2.3.3`, `2.4.2` · CVSS 7.1 High · Not analysed yet · Published 21 May 2021 · Tags: Memory corruption, CWE-665
- [Incomplete validation in \`tf.raw_ops.CTCLoss\`](https://agentprime.io/advisories/GHSA-vvg4-vgrv-xfr7.md)
  `GHSA-vvg4-vgrv-xfr7`, `BIT-tensorflow-2021-29613`, `CVE-2021-29613`, `PYSEC-2021-250`, `PYSEC-2021-541`, `PYSEC-2021-739` · PyPI `tensorflow` and 2 more: affected `<2.1.4 || >=2.2.0, <2.2.3 || >=2.3.0, <2.3.3 || >=2.4.0, <2.4.2`, fixed in `2.1.4`, `2.2.3`, `2.3.3`, `2.4.2` · CVSS 6.3 Medium · Not analysed yet · Published 21 May 2021 · Tags: Memory corruption, CWE-665
- [Incomplete validation in \`SparseReshape\`](https://agentprime.io/advisories/GHSA-9rpc-5v9q-5r7f.md)
  `GHSA-9rpc-5v9q-5r7f`, `BIT-tensorflow-2021-29611`, `CVE-2021-29611`, `PYSEC-2021-248`, `PYSEC-2021-539`, `PYSEC-2021-737` · PyPI `tensorflow` and 2 more: affected `>=2.3.0, <2.3.3 || >=2.4.0, <2.4.2`, fixed in `2.3.3`, `2.4.2` · CVSS 3.6 Low · Not analysed yet · Published 21 May 2021 · Tags: CWE-20, CWE-665
- [Invalid validation in \`QuantizeAndDequantizeV2\`](https://agentprime.io/advisories/GHSA-mq5c-prh3-3f3h.md)
  `GHSA-mq5c-prh3-3f3h`, `BIT-tensorflow-2021-29610`, `CVE-2021-29610`, `PYSEC-2021-247`, `PYSEC-2021-538`, `PYSEC-2021-736` · PyPI `tensorflow` and 2 more: affected `<2.1.4 || >=2.2.0, <2.2.3 || >=2.3.0, <2.3.3 || >=2.4.0, <2.4.2`, fixed in `2.1.4`, `2.2.3`, `2.3.3`, `2.4.2` · CVSS 3.6 Low · Not analysed yet · Published 21 May 2021 · Tags: Memory corruption, CWE-665
- [Incomplete validation in \`SparseAdd\`](https://agentprime.io/advisories/GHSA-cjc7-49v2-jp64.md)
  `GHSA-cjc7-49v2-jp64`, `BIT-tensorflow-2021-29609`, `CVE-2021-29609`, `PYSEC-2021-246`, `PYSEC-2021-537`, `PYSEC-2021-735` · PyPI `tensorflow` and 2 more: affected `<2.1.4 || >=2.2.0, <2.2.3 || >=2.3.0, <2.3.3 || >=2.4.0, <2.4.2`, fixed in `2.1.4`, `2.2.3`, `2.3.3`, `2.4.2` · CVSS 5.3 Medium · Not analysed yet · Published 21 May 2021 · Tags: Memory corruption, CWE-665
- [Junos OS: QFX5100-96S: DDoS protection does not work as expected.](https://agentprime.io/advisories/CVE-2021-0234.md)
  `CVE-2021-0234` · CVE record: Juniper Networks Junos OS · CVSS 5.8 Medium · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-665
- [Junos OS Evolved: The IPv6 BGP session will flap due to receipt of a specific IPv6 packet](https://agentprime.io/advisories/CVE-2021-0226.md)
  `CVE-2021-0226` · CVE record: Juniper Networks Junos OS Evolved · CVSS 7.1 High · Not analysed yet · Published 22 Apr 2021 · Tags: CWE-665
- [kernel: A flaw possibility of race condition and incorrect initialization of the process id was…](https://agentprime.io/advisories/CVE-2020-35508.md)
  `CVE-2020-35508` · CVE record: kernel · No CVSS score · Not analysed yet · Published 26 Mar 2021 · Tags: CWE-665
- [A memory initialization issue was addressed.](https://agentprime.io/advisories/CVE-2020-27950.md)
  `CVE-2020-27950` · CVE record: Apple watchOS and 2 more · CVSS 5.5 Medium · Critical (KEV) · In CISA KEV · EPSS 0.17 · Not analysed yet · Published 8 Dec 2020 · Tags: CWE-665
- [Improper access control in Red Hat kernel](https://agentprime.io/advisories/CVE-2020-25662.md)
  `CVE-2020-25662` · CVE record: Red Hat kernel · CVSS 5.3 Medium · Not analysed yet · Published 5 Nov 2020 · Tags: Broken access control, CWE-665
- [A flaw was found in the way xserver memory was not properly initialized.](https://agentprime.io/advisories/CVE-2020-14347.md)
  `CVE-2020-14347` · CVE record: The Xorg Project xorg-x11-server · CVSS 5.5 Medium · Not analysed yet · Published 5 Aug 2020 · Tags: CWE-665
- [Improper Initialization in coturn](https://agentprime.io/advisories/CVE-2020-4067.md)
  `CVE-2020-4067` · CVE record: coturn coturn · CVSS 7.0 High · Not analysed yet · Published 29 Jun 2020 · Tags: CWE-665
- [Code execution vulnerability in HtmlUnit](https://agentprime.io/advisories/GHSA-5mh9-r3rr-9597.md)
  `GHSA-5mh9-r3rr-9597`, `CVE-2020-5529` · Maven `net.sourceforge.htmlunit:htmlunit`: affected `<2.37.0`, fixed in `2.37.0` · CVSS 8.1 High · Not analysed yet · Published 21 May 2020 · Tags: Code injection, CWE-665
- [\[UNKNOWN\] dpdk: A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a…](https://agentprime.io/advisories/CVE-2020-10725.md)
  `CVE-2020-10725` · CVE record: \[UNKNOWN\] dpdk · CVSS 7.7 High · Not analysed yet · Published 20 May 2020 · Tags: CWE-665
- [Junos OS: PTX1000 and PTX10000 Series, QFX10000 Series using non-AFT architectures: A specific genuine packet inspected by sFlow will cause a reboot.](https://agentprime.io/advisories/CVE-2020-1617.md)
  `CVE-2020-1617` · CVE record: Juniper Networks Junos OS · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2020 · Tags: CWE-665
- [Kaspersky LibVNC: LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak…](https://agentprime.io/advisories/CVE-2019-15681.md)
  `CVE-2019-15681` · CVE record: Kaspersky LibVNC · No CVSS score · Not analysed yet · Published 29 Oct 2019 · Tags: CWE-665
- [Cisco Prime Network Registrar Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2019-1840.md)
  `CVE-2019-1840` · CVE record: Cisco Cisco Prime Network Registrar · CVSS 8.6 High · Not analysed yet · Published 18 Apr 2019 · Tags: CWE-665
- [Cisco IOS and IOS XE Software Hot Standby Router Protocol Information Leak Vulnerability](https://agentprime.io/advisories/CVE-2019-1761.md)
  `CVE-2019-1761` · CVE record: Cisco Cisco IOS and IOS XE Software · CVSS 4.3 Medium · Not analysed yet · Published 28 Mar 2019 · Tags: CWE-665
- [Kaspersky Lab UltraVNC: UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code…](https://agentprime.io/advisories/CVE-2019-8277.md)
  `CVE-2019-8277` · CVE record: Kaspersky Lab UltraVNC · No CVSS score · Not analysed yet · Published 9 Mar 2019 · Tags: CWE-665
- [UltraVNC: UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code…](https://agentprime.io/advisories/CVE-2019-8259.md)
  `CVE-2019-8259` · CVE record: UltraVNC UltraVNC · No CVSS score · Not analysed yet · Published 5 Mar 2019 · Tags: CWE-665
- [Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization.](https://agentprime.io/advisories/CVE-2018-14647.md)
  `CVE-2018-14647` · CVE record: The Python Project Python · CVSS 5.3 Medium · EPSS 0.11 · Not analysed yet · Published 25 Sept 2018 · Tags: CWE-335, CWE-665
- [Information disclosure in postgresql](https://agentprime.io/advisories/CVE-2018-10915.md)
  `CVE-2018-10915` · CVE record: PostgreSQL Global Development Group postgresql · CVSS 8.5 High · Not analysed yet · Published 9 Aug 2018 · Tags: SQL injection, Information disclosure, CWE-665
- [Foxit Reader: This vulnerability allows remote attackers to execute arbitrary code on vulnerable…](https://agentprime.io/advisories/CVE-2018-14282.md)
  `CVE-2018-14282` · CVE record: Foxit Foxit Reader · No CVSS score · Not analysed yet · Published 31 Jul 2018 · Tags: CWE-665
- [A flaw was found in Linux kernel's KVM virtualization subsystem.](https://agentprime.io/advisories/CVE-2018-10901.md)
  `CVE-2018-10901` · CVE record: \[UNKNOWN\] kernel: · CVSS 7.8 High · Not analysed yet · Published 26 Jul 2018 · Tags: CWE-665
- [Foxit Reader: This vulnerability allows remote attackers to disclose sensitive information on…](https://agentprime.io/advisories/CVE-2018-1175.md)
  `CVE-2018-1175` · CVE record: Foxit Foxit Reader · No CVSS score · Not analysed yet · Published 17 May 2018 · Tags: CWE-665
- [Foxit Reader: This vulnerability allows remote attackers to disclose sensitive information on…](https://agentprime.io/advisories/CVE-2018-1174.md)
  `CVE-2018-1174` · CVE record: Foxit Foxit Reader · No CVSS score · Not analysed yet · Published 17 May 2018 · Tags: CWE-665
- [Foxit Reader: This vulnerability allows remote attackers to execute arbitrary code on vulnerable…](https://agentprime.io/advisories/CVE-2018-10484.md)
  `CVE-2018-10484` · CVE record: Foxit Foxit Reader · No CVSS score · Not analysed yet · Published 17 May 2018 · Tags: CWE-665
- [kernel vhost: Linux kernel vhost since version 4.8 does not properly initialize memory in messages…](https://agentprime.io/advisories/CVE-2018-1118.md)
  `CVE-2018-1118` · CVE record: kernel vhost · CVSS 2.3 Low · Not analysed yet · Published 10 May 2018 · Tags: CWE-665
- [curl: curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal…](https://agentprime.io/advisories/CVE-2016-9594.md)
  `CVE-2016-9594` · CVE record: unspecified curl · CVSS 6.5 Medium · Not analysed yet · Published 23 Apr 2018 · Tags: CWE-665
- [Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mP…](https://agentprime.io/advisories/CVE-2013-1675.md)
  `CVE-2013-1675` · CVE record · CVSS 6.5 Medium · Critical (KEV) · In CISA KEV · Not analysed yet · Published 16 May 2013 · Tags: CWE-665

Newest: <https://agentprime.io/advisories/tag/cwe-665.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-665&cursor=WyIyMDIyLTA1LTI0VDE2OjUxOjM5LjAwMDAwMFoiLCJHSFNBLXYyY3Ytd3d4cS1xcTk3Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-665/?cursor=WyIyMDIyLTA1LTI0VDE2OjUxOjM5LjAwMDAwMFoiLCJHSFNBLXYyY3Ytd3d4cS1xcTk3Il0>. Everything for agents: <https://agentprime.io/llms.txt>.