Vulnerabilities > Improper Initialization

DATE CVE VULNERABILITY TITLE RISK
2020-10-21 CVE-2020-10139 Improper Initialization vulnerability in Acronis True Image 2021
Acronis True Image 2021 includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\.
local
low complexity
acronis CWE-665
7.8
2020-10-21 CVE-2020-10138 Improper Initialization vulnerability in Acronis Cyber Backup and Cyber Protect
Acronis Cyber Backup 12.5 and Cyber Protect 15 include an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory within C:\jenkins_agent\.
local
low complexity
acronis CWE-665
7.8
2020-10-16 CVE-2020-16901 Improper Initialization vulnerability in Microsoft Windows 10 and Windows Server 2016
<p>An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.</p> <p>To exploit this vulnerability, an authenticated attacker could run a specially crafted application.
local
low complexity
microsoft CWE-665
5.0
2020-10-16 CVE-2020-9964 Improper Initialization vulnerability in Apple Iphone OS
A memory initialization issue was addressed with improved memory handling.
local
low complexity
apple CWE-665
5.5
2020-10-14 CVE-2020-0414 Improper Initialization vulnerability in Google Android 10.0/11.0
In AudioFlinger::RecordThread::threadLoop of audioflinger/Threads.cpp, there is a possible non-silenced audio buffer due to a permissions bypass.
network
low complexity
google CWE-665
6.5
2020-10-05 CVE-2019-14556 Improper Initialization vulnerability in Intel Bios
Improper initialization in BIOS firmware for 8th, 9th, 10th Generation Intel(R) Core(TM), Intel(R) Celeron(R) Processor 4000 & 5000 Series Processors may allow a privileged user to potentially enable denial of service via local access.
local
low complexity
intel CWE-665
4.4
2020-09-11 CVE-2020-1592 Improper Initialization vulnerability in Microsoft products
<p>An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.</p> <p>To exploit this vulnerability, an authenticated attacker could run a specially crafted application.
local
low complexity
microsoft CWE-665
4.4
2020-09-03 CVE-2020-24996 Improper Initialization vulnerability in Xpdfreader Xpdf 4.0.2
There is an invalid memory access in the function TextString::~TextString() located in Catalog.cc in Xpdf 4.0.2.
local
low complexity
xpdfreader CWE-665
7.8
2020-08-13 CVE-2020-12301 Improper Initialization vulnerability in Intel products
Improper initialization in BIOS firmware for Intel(R) Server Board Families S2600ST, S2600BP and S2600WF may allow a privileged user to potentially enable escalation of privilege via local access.
local
low complexity
intel CWE-665
8.2
2020-08-11 CVE-2020-8918 Improper Initialization vulnerability in Google Go-Tpm
An improperly initialized 'migrationAuth' value in Google's go-tpm TPM1.2 library versions prior to 0.3.0 can lead an eavesdropping attacker to discover the auth value for a key created with CreateWrapKey.
local
low complexity
google CWE-665
7.1