TYPE DE FAIBLESSE

CWE-665

33 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-665 (en anglais) →

CVE-2026-103394Le logiciel Juniper Networks Session Smart Router (SSR) est affecté par un défaut d'initialisation incorrecte. Ce logiciel gère le trafic réseau et le routage basé sur les sessions… 3.7 FAIBLE

CVE-2026-116115Les caméras Yoosee GM8135S utilisant la version 21.00.01.36 sont affectées par une faille dans le composant de configuration WiFi. Le problème se situe au sein du fichier `wpa_supp… 1.3 FAIBLE

CVE-2026-54279Les applications Python utilisant le framework aiohttp (versions antérieures à 3.14.1) peuvent ne pas respecter la restriction « host-only » des cookies lors de leur enregistrement… 1.3 FAIBLE

CVE-2026-26958Les applications utilisant la bibliothèque Go `filippo.io/edwards25519` pour des opérations cryptographiques peuvent produire des résultats incorrects ou un comportement indétermin… 1.7 FAIBLE

CVE-2025-48509Les systèmes utilisant l'initialisation RMP (Reverse Map Table) sont affectés par une faille pouvant entraîner une mauvaise identification de la mémoire d'E/S. Un attaquant local d… 1.8 FAIBLE

CVE-2025-25058Les hôtes VMware ESXi utilisant des pilotes Ethernet Intel de la série 800 sont susceptibles de subir une fuite d'informations au niveau du noyau. Un attaquant disposant déjà d'un … 2.0 FAIBLE

CVE-2026-23553Les machines virtuelles s'exécutant sur l'hyperviseur Xen sont affectées par une faille dans la manière dont le système gère les changements de contexte du processeur. Un attaquant… 2.9 FAIBLE

CVE-2025-14955A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ogs_pfcp_handle_create_pdr in the library lib/pfcp/handler.c of the component PFCP.… 2.9 FAIBLE

CVE-2024-36331Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity. 3.2 FAIBLE

CVE-2025-24511Improper initialization in the Linux kernel-mode driver for some Intel(R) I350 Series Ethernet before version 5.19.2 may allow an authenticated user to potentially enable Informati… 2.0 FAIBLE

CVE-2025-46553@misskey-dev/summaly is a tool for getting a summary of a web page. Starting in version 3.0.1 and prior to version 5.2.1, a logic error in the main `summaly` function causes the `a… 2.1 FAIBLE

CVE-2025-2149A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnq_Sigmoid of the component Quantized Sigmoid Module. Th… 2.0 FAIBLE

CVE-2023-35061Improper initialization for the Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable inform… 2.3 FAIBLE

CVE-2023-45085An issue exists in SoftIron HyperCloud where compute nodes may come online immediately without following the correct initialization process. In this instance, workloads may be sch… 3.2 FAIBLE

CVE-2022-46301Improper Initialization for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access. 1.9 FAIBLE

CVE-2022-45109Improper initialization for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access. 3.3 FAIBLE

CVE-2023-1513A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvm_debugregs structure that could be copied… 3.3 FAIBLE

CVE-2023-26084The armv8_dec_aes_gcm_full() API of Arm AArch64cryptolib before 86065c6 fails to the verify the authentication tag of AES-GCM protected data, leading to a man-in-the-middle attack.… 3.7 FAIBLE

CVE-2022-39284CodeIgniter is a PHP full-stack web framework. In versions prior to 4.2.7 setting `$secure` or `$httponly` value to `true` in `Config\Cookie` is not reflected in `set_cookie()` or … 2.6 FAIBLE

CVE-2021-36319Dell Networking OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x contain an information exposure vulnerability. A low privileged authenticated malicious user can gain access to SNMP a… 3.3 FAIBLE

CVE-2021-35995Adobe After Effects version 18.2.1 (and earlier) is affected by an Improper input validation vulnerability when parsing a specially crafted file. An unauthenticated attacker could … 3.3 FAIBLE

CVE-2021-36006Adobe Photoshop versions 21.2.9 (and earlier) and 22.4.2 (and earlier) are affected by an Improper input validation vulnerability when parsing a specially crafted file. An unauthen… 3.3 FAIBLE

CVE-2021-29611TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in `SparseReshape` results in a denial of service based on a `CHECK`-failure. The imple… 3.6 FAIBLE

CVE-2021-29610TensorFlow is an end-to-end open source platform for machine learning. The validation in `tf.raw_ops.QuantizeAndDequantizeV2` allows invalid values for `axis` argument:. The valida… 3.6 FAIBLE

CVE-2020-0506Improper initialization in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077, and 26.20.100.7000 may allow a privileged user to potentially enable a denial of … 2.3 FAIBLE

CVE-2019-15875In FreeBSD 12.1-STABLE before r354734, 12.1-RELEASE before 12.1-RELEASE-p2, 12.0-RELEASE before 12.0-RELEASE-p13, 11.3-STABLE before r354735, and 11.3-RELEASE before 11.3-RELEASE-p… 3.3 FAIBLE

CVE-2019-19411USG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 have an information leakage vulnerability.… 3.7 FAIBLE

CVE-2019-19126On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security tr… 3.3 FAIBLE

CVE-2018-1118Linux kernel vhost since version 4.8 does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhost_new_msg(… 2.3 FAIBLE

CVE-2018-0853Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow an information disclosure vulnerability, … 3.3 FAIBLE

CVE-2017-15897Node.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the encoding for the fill value did not match the encoding specified. For example, 'Buffer… 3.1 FAIBLE

CVE-2014-4371The network-statistics interface in the kernel in Apple iOS before 8 and Apple TV before 7 does not properly initialize memory, which allows attackers to obtain sensitive memory-co… 1.9 FAIBLE

CVE-2014-0178Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRV_SNAPSHOT_ARRA… 3.5 FAIBLE