Advisories · Weakness
CWE-665.
Every Advisory and CVE whose sources give the weakness CWE-665, newest first.
- CVSS 9.0 CriticalCritical · CVSS 9+
Arctic Wireless Gateway Firewall vulnerability
- ABB ARG600 Wireless Gateway series
- CWE-665
- CVSS 7.2 High
Junos OS: EX4650 Series: Certain traffic received by the Junos OS device on the management interface may be forwarded to egress interfaces instead of discarded
- Juniper Networks Junos OS
- CWE-665
-
openjpeg2: A flaw was found in the opj2_decompress program in openjpeg2 2.4.0 in the way it handles…
- openjpeg2
- CWE-665
-
mod_lua Use of uninitialized value of in r:parsebody
- Apache Software Foundation Apache HTTP Server
- CWE-665
- CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV
kernel: A flaw was found in the way the "flags" member of the new pipe buffer structure was…
- kernel
- CWE-665
- CVSS 6.3 Medium
TPM 1.2 key authorization values vulnerable to TPM transport eavesdropper in go-tpm
- CWE-665
<0.3.0 · fixed in 0.3.0
GHSA-5x29-3hr9-6wpw · CVE-2020-8918 -
Interactive Graphical SCADA System Data Server…: A CWE-665: Improper Initialization vulnerability exists that could cause information…
- Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior)
- CWE-665
- CVSS 5.5 Medium
Intel(R) Processors: Improper initialization of shared resources in some Intel(R) Processors may allow an…
- Intel(R) Processors
- CWE-665
- CVSS 6.6 Medium
Intel(R) Processors: Improper initialization in the firmware for some Intel(R) Processors may allow a…
- Intel(R) Processors
- CWE-665
- CVSS 6.2 Medium
Intel(R) Processors: Improper initialization in the firmware for some Intel(R) Processors may allow a…
- Intel(R) Processors
- CWE-665
- CVSS 7.0 High
pgjdbc Does Not Check Class Instantiation when providing Plugin Classes
- Other injection
- Information disclosure
>=9.4.1208, <42.2.25 || >=42.3.0, <42.3.2 · fixed in 42.2.25, 42.3.2
GHSA-v7wg-cpwc-24m4 · CVE-2022-21724 - CVSS 5.9 Medium
Junos OS and Junos OS Evolved: OSPFv3 session might go into INIT state upon receipt of multiple crafted packets from a trusted neighbor device.
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-665
- CVSS 6.5 Medium
Junos OS Evolved: Telnet service may be enabled when it is expected to be disabled.
- Juniper Networks Junos OS Evolved
- CWE-665
- CVSS 6.5 Medium
Improper Initialization in Pillow
- CWE-665
<9.0.0 · fixed in 9.0.0
GHSA-pw3c-h7wp-cvhx · CVE-2022-22815 - CVSS 9.8 CriticalCritical · CVSS 9+
Resource Exhaustion Denial of Service in http-proxy-agent
- CWE-665
<2.1.0 · fixed in 2.1.0
GHSA-86wf-436m-h424 · CVE-2019-10196 - CVSS 5.6 Medium
OpenZeppelin Contracts initializer reentrancy may lead to double initialization
- CWE-665
>=3.2.0, <4.4.1 · fixed in 4.4.1
GHSA-88g8-f5mf-f5rj · CVE-2021-46320 - CVSS 3.3 Low
Dell Networking OS10: Dell Networking OS10 versions 10.4.3.x…
- Dell Networking OS10
- CWE-665
-
Failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU) may lead an IO device to write to memory it should not be able to access, resulting in a potential lo…
- AMD EPYC™ Processors
- AMD Ryzen™ Series
- CWE-665
-
Failure to validate VM_HSAVE_PA during SNP_INIT may result in a loss of memory integrity.
- 3rd Gen AMD EPYC™
- CWE-665
-
A flaw was found in the Linux kernel.
- kernel
- CWE-665
- CVSS 5.8 Medium
Cisco IOS XE Software Protection Against Distributed Denial of Service Attacks Feature Vulnerability
- Cisco IOS XE Software
- CWE-665
- CVSS 9.8 CriticalCritical · CVSS 9+
UUPSUpgradeable vulnerability in @openzeppelin/contracts
- CWE-665
>=4.1.0, <4.3.2 · fixed in 4.3.2
GHSA-5vp3-v4hc-gx76 · CVE-2021-41264 - CVSS 9.8 CriticalCritical · CVSS 9+
Use of Uninitialized Resource in alg_ds
- Memory corruption
- CWE-665
<=0.3.1 · no fixed version yet
GHSA-3vv3-frrq-6486 · CVE-2020-36432 - CVSS 7.5 High
Junos OS: PTX Series, QFX10K Series: Upon receipt of specific packets BFD sessions might flap due to DDoS policer implementation in Packet Forwarding Engine
- Juniper Networks Junos OS
- CWE-665
-
tpm2-tools: A flaw was found in tpm2-tools in versions before 5.1.1 and before 4.3.2. tpm2_import…
- tpm2-tools
- CWE-665
- CVSS 7.1 High
Interpreter crash from `tf.io.decode_raw`
- Memory corruption
- CWE-665
<2.1.4 || >=2.2.0, <2.2.3 || >=2.3.0, <2.3.3 || >=2.4.0, <2.4.2 · fixed in 2.1.4, 2.2.3, 2.3.3, 2.4.2
GHSA-8pmx-p244-g88h · CVE-2021-29614 - CVSS 6.3 Medium
Incomplete validation in `tf.raw_ops.CTCLoss`
- Memory corruption
- CWE-665
<2.1.4 || >=2.2.0, <2.2.3 || >=2.3.0, <2.3.3 || >=2.4.0, <2.4.2 · fixed in 2.1.4, 2.2.3, 2.3.3, 2.4.2
GHSA-vvg4-vgrv-xfr7 · CVE-2021-29613 - CVSS 3.6 Low
Incomplete validation in `SparseReshape`
- CWE-20
- CWE-665
>=2.3.0, <2.3.3 || >=2.4.0, <2.4.2 · fixed in 2.3.3, 2.4.2
GHSA-9rpc-5v9q-5r7f · CVE-2021-29611 - CVSS 3.6 Low
Invalid validation in `QuantizeAndDequantizeV2`
- Memory corruption
- CWE-665
<2.1.4 || >=2.2.0, <2.2.3 || >=2.3.0, <2.3.3 || >=2.4.0, <2.4.2 · fixed in 2.1.4, 2.2.3, 2.3.3, 2.4.2
GHSA-mq5c-prh3-3f3h · CVE-2021-29610 - CVSS 5.3 Medium
Incomplete validation in `SparseAdd`
- Memory corruption
- CWE-665
<2.1.4 || >=2.2.0, <2.2.3 || >=2.3.0, <2.3.3 || >=2.4.0, <2.4.2 · fixed in 2.1.4, 2.2.3, 2.3.3, 2.4.2
GHSA-cjc7-49v2-jp64 · CVE-2021-29609 - CVSS 5.8 Medium
Junos OS: QFX5100-96S: DDoS protection does not work as expected.
- Juniper Networks Junos OS
- CWE-665
- CVSS 7.1 High
Junos OS Evolved: The IPv6 BGP session will flap due to receipt of a specific IPv6 packet
- Juniper Networks Junos OS Evolved
- CWE-665
-
kernel: A flaw possibility of race condition and incorrect initialization of the process id was…
- kernel
- CWE-665
- CVSS 5.5 MediumCritical · KEVKEV
A memory initialization issue was addressed.
- Apple watchOS
- Apple iOS and iPadOS
- CWE-665
- CVSS 5.3 Medium
Improper access control in Red Hat kernel
- Red Hat kernel
- Broken access control
- CWE-665
- CVSS 5.5 Medium
A flaw was found in the way xserver memory was not properly initialized.
- The Xorg Project xorg-x11-server
- CWE-665
- CVSS 7.0 High
Improper Initialization in coturn
- coturn
- CWE-665
- CVSS 8.1 High
Code execution vulnerability in HtmlUnit
- Code injection
- CWE-665
<2.37.0 · fixed in 2.37.0
GHSA-5mh9-r3rr-9597 · CVE-2020-5529 - CVSS 7.7 High
[UNKNOWN] dpdk: A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a…
- [UNKNOWN] dpdk
- CWE-665
- CVSS 7.5 High
Junos OS: PTX1000 and PTX10000 Series, QFX10000 Series using non-AFT architectures: A specific genuine packet inspected by sFlow will cause a reboot.
- Juniper Networks Junos OS
- CWE-665
-
Kaspersky LibVNC: LibVNC commit before d01e1bb4246323ba6fcee3b82ef1faa9b1dac82a contains a memory leak…
- Kaspersky LibVNC
- CWE-665
- CVSS 8.6 High
Cisco Prime Network Registrar Denial of Service Vulnerability
- Cisco Prime Network Registrar
- CWE-665
- CVSS 4.3 Medium
Cisco IOS and IOS XE Software Hot Standby Router Protocol Information Leak Vulnerability
- Cisco IOS and IOS XE Software
- CWE-665
-
Kaspersky Lab UltraVNC: UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code…
- Kaspersky Lab UltraVNC
- CWE-665
-
UltraVNC: UltraVNC revision 1198 contains multiple memory leaks (CWE-655) in VNC client code…
- UltraVNC
- CWE-665
- CVSS 5.3 Medium
Python's elementtree C accelerator failed to initialise Expat's hash salt during initialization.
- Python
- CWE-335
- CWE-665
- CVSS 8.5 High
Information disclosure in postgresql
- postgresql
- SQL injection
- Information disclosure
-
Foxit Reader: This vulnerability allows remote attackers to execute arbitrary code on vulnerable…
- Foxit Reader
- CWE-665
- CVSS 7.8 High
A flaw was found in Linux kernel's KVM virtualization subsystem.
- [UNKNOWN] kernel:
- CWE-665
-
Foxit Reader: This vulnerability allows remote attackers to disclose sensitive information on…
- Foxit Reader
- CWE-665
-
Foxit Reader: This vulnerability allows remote attackers to disclose sensitive information on…
- Foxit Reader
- CWE-665
-
Foxit Reader: This vulnerability allows remote attackers to execute arbitrary code on vulnerable…
- Foxit Reader
- CWE-665
- CVSS 2.3 Low
kernel vhost: Linux kernel vhost since version 4.8 does not properly initialize memory in messages…
- kernel vhost
- CWE-665
- CVSS 6.5 Medium
curl: curl before version 7.52.1 is vulnerable to an uninitialized random in libcurl's internal…
- curl
- CWE-665
- CVSS 6.5 MediumCritical · KEVKEV
Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mP…
- CWE-665