Advisories · Weakness
CWE-665.
Every Advisory and CVE whose sources give the weakness CWE-665, newest first.
- CVSS 9.4 CriticalCritical · CVSS 9+
Symantec Privileged Access Manager Remote Command Execution vulnerability
- Broadcom Symantec Privileged Access Management
- CWE-665
- CVSS 5.7 Medium
Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability.
- Dell PowerSwitch Z9664F-ON BIOS
- CWE-665
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache CloudStack: Integration API service uses dynamic port when disabled
- Apache Software Foundation Apache CloudStack
- Code injection
- CWE-665
- CVSS 7.8 High
CVE
- nvidia GPU display driver, vGPU software, and Cloud Gaming
- CWE-665
- CVSS 5.5 Medium
Intel(R) Power Gadget software for Windwos: Improper initialization in some Intel(R) Power Gadget software for Windwos all versions…
- Intel(R) Power Gadget software for Windwos
- CWE-665
- CWE-707
- CVSS 7.8 High
Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability
- Parallels Desktop
- CWE-665
- CVSS 7.8 High
Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability
- Parallels Desktop
- CWE-665
- CVSS 7.8 High
Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability
- Parallels Desktop
- CWE-665
- CVSS 7.5 High
p2putil.c in iNet wireless daemon (IWD) through 2.15 allows attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact because of initialization issues in situati…
- CWE-665
- CVSS 5.0 Medium
Intel(R) MAS software: Improper initialization in some Intel(R) MAS software before version 2.3 may allow an…
- Intel(R) MAS software
- CWE-665
- CVSS 2.3 Low
Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi…: Improper initialization for the Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi…
- Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software
- CWE-665
- CVSS 6.1 Medium
Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi…: Improper initialization for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi…
- Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software
- CWE-665
- CVSS 6.8 Medium
Eap-galleon: custom provisioning creates unsecured http-invoker
- Red Hat EAP 7.4.14
- Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
- CWE-665
- CVSS 7.8 High
Improper initialization of x87 and SSE floating-point configuration registers in the __scone_entry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution in…
- CWE-665
- CVSS 6.5 Medium
Intel(R) Optane(TM) SSD products: Improper Initialization in firmware for some Intel(R) Optane(TM) SSD products may allow…
- Intel(R) Optane(TM) SSD products
- CWE-665
- CVSS 8.8 High
Improper privilege management in Intel(R) Aptio* V UEFI Firmware Integrator Tools
- Intel(R) Aptio* V UEFI Firmware Integrator Tools
- Privilege escalation
- CWE-665
- CVSS 1.9 Low
Intel Unison software: Improper Initialization for some Intel Unison software may allow a privileged user to…
- Intel Unison software
- CWE-665
- CVSS 3.3 Low
Intel Unison software: Improper initialization for some Intel Unison software may allow an authenticated user to…
- Intel Unison software
- CWE-665
- CVSS 7.5 High
Bitrix24 Insecure Global Variable Extraction
- Bitrix24
- CWE-665
- CVSS 8.4 High
Run copy with container in a malicious directory may cause container escaping
- openEuler iSulad
- CWE-665
- CVSS 8.4 High
Export container in a malicious directory may cause process to be hijacked
- openEuler iSulad
- CWE-665
- CVSS 8.4 High
Load malicious images may cause process to be hijacked
- openEuler iSulad
- Code injection
- CWE-665
- CVSS 9.8 CriticalCritical · CVSS 9+
Pull malicious images may cause process to be hijacked
- openEuler iSulad
- Code injection
- CWE-665
- CVSS 6.3 Medium
Malicious image running containers may cause DoS attacks
- openEuler lcr
- CWE-665
-
arm64 boot CPUs may lack speculative execution protections
- FreeBSD
- CWE-665
- CVSS 7.0 High
Splunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLL
- Splunk Enterprise
- CWE-665
- CVSS 6.5 Medium
Jenkins Gogs Plugin vulnerable to unsafe default behavior and information disclosure
- CWE-665
<=1.0.15 · no fixed version yet
GHSA-rc33-44qp-vpvq · CVE-2023-40349 - CVSS 6.0 Medium
Intel(R) NUC BIOS firmware: Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to…
- Intel(R) NUC BIOS firmware
- CWE-665
- CVSS 6.0 Medium
Intel(R) NUC 13 Extreme Compute Element…: Improper initialization in some Intel(R) NUC 13 Extreme Compute Element…
- Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, Intel(R) NUC Compute Element, Intel(R) NUC Laptop Kit, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board and Intel(R) NUC Pro Mini PC BIOS firmware
- CWE-665
- CVSS 6.1 Medium
Intel(R) NUCs: Improper initialization in BIOS firmware for some Intel(R) NUCs may allow a privileged…
- Intel(R) NUCs
- CWE-665
- CVSS 6.1 Medium
Intel(R) Processors: Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a…
- Intel(R) Processors
- CWE-665
- CVSS 7.1 High
Arbitrary File Overwrite using less command
- Brocade Fabric OS
- CWE-281
- CWE-665
- CVSS 8.6 High
Resource allocation without limits in B&R Industrial Automation B&R Automation Runtime
- B&R Industrial Automation B&R Automation Runtime
- Denial of service
- CWE-665
- CVSS 5.3 Medium
Improper sanitization of MXCSR and RFLAGS in OpenEnclave
- openenclave
- CWE-665
- CVSS 4.0 Medium
Intel(R) NUC BIOS firmware: Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user…
- Intel(R) NUC BIOS firmware
- CWE-665
- CVSS 7.8 High
A malicious actor may convince a victim to open a malicious USD file that may trigger an uninitialized variable which may result in code execution.
- Autodesk Maya USD Plugin
- CWE-665
- CVSS 7.5 High
Some smartphones have data initialization issues.
- Huawei HarmonyOS
- Huawei EMUI
- CWE-665
- CVSS 3.3 Low
A flaw was found in KVM.
- Linux kernel (KVM)
- CWE-665
- CVSS 3.7 Low
The armv8_dec_aes_gcm_full() API of Arm AArch64cryptolib before 86065c6 fails to the verify the authentication tag of AES-GCM protected data, leading to a man-in-the-middle attack.
- CWE-665
- CVSS 5.5 Medium
WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::cat_compute_size.
- CWE-665
<=1.0.29 · no fixed version yet
PYSEC-2023-316 · CVE-2023-27115 - CVSS 6.2 Medium
MMS File Transfer Vulnerability impact on Distribution Automation products
- ABB Relion protection relays - 611 series
- ABB Relion protection relays - 615 series IEC 4.0 FP1
- CWE-665
- CVSS 5.3 Medium
TechPowerUp Ryzen DRAM Calculator WinRing0x64.sys initialization
- TechPowerUp Ryzen DRAM Calculator
- CWE-665
- CVSS 5.3 Medium
TechPowerUp RealTemp WinRing0x64.sys initialization
- TechPowerUp RealTemp
- CWE-665
- CVSS 7.5 High
BIG-IP Virtual Edition vulnerability
- F5 BIG-IP
- F5 BIG-IP SPK
- CWE-665
- CVSS 7.5 High
An issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret data.
- CWE-665
- CVSS 5.4 Medium
reject_remote_clients Configuration corruption
- CWE-665
>=1.7.0, <1.18.4 || >=1.19.0, <1.20.3 || >=1.21.0, <1.23.1 · fixed in 1.18.4, 1.20.3, 1.23.1
GHSA-7rrj-xr53-82p7 · CVE-2023-22466 - CVSS 7.4 High
OpenShift: Openshift 4.9 does not use HTTP Strict Transport Security (HSTS) which may allow…
- OpenShift
- CWE-665
- CVSS 7.5 High
Hector Cabrera WordPress Popular Posts: External initialization of trusted variables or data stores vulnerability exists in…
- Hector Cabrera WordPress Popular Posts
- CWE-665
- CVSS 9.4 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
NodeBB vulnerable to account takeover via prototype vulnerability
- CWE-665
<2.6.1 · fixed in 2.6.1
GHSA-rf3g-v8p5-p675 · CVE-2022-46164 - CVSS 7.0 High
Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards: Improper initialization in BIOS firmware for some Intel(R) NUC 11 Pro Kits and Intel(R)…
- Intel(R) NUC 11 Pro Kits and Intel(R) NUC 11 Pro Boards
- CWE-665
- CVSS 2.6 Low
Codeigniter4's Secure or HttpOnly flag set in Config\Cookie is not reflected in Cookies issued
- Broken access control
- CWE-665
<4.2.7 · fixed in 4.2.7
GHSA-745p-r637-7vvp · CVE-2022-39284 - CVSS 5.5 Medium
A memory initialization issue was addressed with improved memory handling.
- Apple macOS
- Apple tvOS
- CWE-665
- CVSS 7.6 High
Improper Initialization vulnerability in local server authentication logic
- EZVIZ CS-C6N-A0-1C2WFR
- CWE-665
-
A flaw was found in the Linux kernel’s implementation of reading the SVC RDMA counters.
- kernel
- CWE-665
- CVSS 6.9 Medium
Intel(R) NUC Laptop Kits: Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version…
- Intel(R) NUC Laptop Kits
- CWE-665
- CVSS 7.8 High
Intel(R) NUC Laptop Kits: Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version…
- Intel(R) NUC Laptop Kits
- CWE-665
- CVSS 5.5 Medium
Intel(R) Data Center Manager software: Improper initialization in the Intel(R) Data Center Manager software before version 4.1…
- Intel(R) Data Center Manager software
- CWE-665
- CVSS 7.8 High
Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products: Improper initialization for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi…
- Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products
- CWE-665
- CVSS 8.8 High
Apache Calcite Avatica JDBC driver arbitrary code execution
- CWE-665
<1.22.0 · fixed in 1.22.0
GHSA-w7f5-jrpr-5c2m · CVE-2022-36364 - CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
Moby Docker cp broken with debian containers
- Code injection
- CWE-665
>=19.03.0, <19.03.1 · fixed in 19.03.1
GHSA-v2cv-wwxq-qq97 · CVE-2019-14271