CWE-665

Błąd w logice inicjalizacji usługi integracyjnej API w Apache CloudStack powoduje, że zamiast pozostać wyłączoną (port 0), usługa nasłuchuje na losowym porcie sieciowym bez uwierzytelnienia. Atakujący z dostępem do sieci zarządzania CloudStack może odnaleźć ten port i przejąć pełną kontrolę nad infrastrukturą.

When malicious images are pulled by isula pull, attackers can execute arbitrary code.

In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end.

OpenZeppelin Contracts is a library for smart contract development. In affected versions upgradeable contracts using `UUPSUpgradeable` may be vulnerable to an attack affecting uninitialized implementation contracts. A fix is included in version 4.3.2 of `@openzeppelin/contracts` and `@openzeppelin/contracts-upgradeable`. For users unable to upgrade; initialize implementation contracts using `UUPSUpgradeable` by invoking the initializer function (usually called `initialize`). An example is provided [in the forum](https://forum.openzeppelin.com/t/security-advisory-initialize-uups-implementation-contracts/15301).

A flaw was found in http-proxy-agent, prior to version 2.1.0. It was discovered http-proxy-agent passes an auth option to the Buffer constructor without proper sanitization. This could result in a Denial of Service through the usage of all available CPU resources and data exposure through an uninitialized memory leak in setups where an attacker could submit typed input to the auth parameter.

The phase_one_correct function in Libraw before 0.17.1 allows attackers to cause memory errors and possibly execute arbitrary code, related to memory object initialization.

In Docker 19.03.x before 19.03.1 linked against the GNU C Library (aka glibc), code injection can occur when the nsswitch facility dynamically loads a library inside a chroot that contains the contents of the container.

Failure to initialize the extra buffer can lead to an out of buffer access in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU, QCS605, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 636, SD 712 / SD 710 / SD 670, SD 820A, SD 835, SD 845 / SD 850, SD 855, SDA660, SDM630, SDM660, SDX20, SDX24

Insufficient sanitization of environment variables passed to rsync can bypass the restrictions imposed by rssh, a restricted shell that should restrict users to perform only rsync operations, resulting in the execution of arbitrary shell commands.

The __skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel before 4.3 does not ensure that n_proto, ip_proto, and thoff are initialized, which allows remote attackers to cause a denial of service (system crash) or possibly execute arbitrary code via a single crafted MPLS packet.

KDC in MIT Kerberos 5 (krb5kdc) does not set a global variable for some krb4 message types, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted messages that trigger a NULL pointer dereference or double-free.

Lack of proper validation in HCI Host stack initialization can cause a crash of the bluetooth stack

A malicious / defect bluetooth controller can cause a Denial of Service due to unchecked input in le_read_buffer_size_complete.

Podatność w systemie Broadcom PAM (Privileged Access Management) umożliwia nieuwierzytelnionemu atakującemu zdalne wykonanie poleceń systemowych poprzez wysłanie specjalnie spreparowanego żądania HTTP. Ze względu na brak wymogu uwierzytelnienia i krytyczny wynik CVSS 9.4, podatność stanowi poważne zagrożenie dla infrastruktury zarządzania dostępem uprzywilejowanym.

NodeBB is an open source Node.js based forum software. Due to a plain object with a prototype being used in socket.io message handling a specially crafted payload can be used to impersonate other users and takeover accounts. This vulnerability has been patched in version 2.6.1. Users are advised to upgrade. Users unable to upgrade may cherry-pick commit `48d143921753914da45926cca6370a92ed0c46b8` into their codebase to patch the exploit.

Nieprawidłowa inicjalizacja w sterowniku trybu jądra Linux dla wybranych kontrolerów i adapterów sieciowych Intel Ethernet (przed wersją 28.3) umożliwia uwierzytelnionemu użytkownikowi lokalnemu eskalację uprawnień. Podatność otrzymała ocenę CVSS 9.3, co klasyfikuje ją jako krytyczną.

W implementacji NASA Interplanetary Overlay Network (ION-DTN) w wersji 4.1.3 istnieje podatność klasy CWE-665 (nieprawidłowa inicjalizacja), która może spowodować całkowity brak responsywności oprogramowania. Zagrożenie jest szczególnie poważne ze względu na środowiska, w których ION-DTN pełni rolę krytycznej infrastruktury komunikacyjnej.

An issue with incorrect ownership model of "privateBrowsing" information exposed through developer tools. This can result in a non-exploitable crash when manually triggered during debugging. This vulnerability affects Firefox < 53.

A vulnerability in ABB ARG600 Wireless Gateway series that could allow an attacker to exploit the vulnerability by remotely connecting to the serial port gateway, and/or protocol converter, depending on the configuration.

Improper initialization in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable escalation of privilege via local access.