CWE-456 · 8 records
Missing Initialization of a Variable
CVEs in this class
8 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2025-10547No exploit | An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the adraytek corporation · vigor1000b · CWE-456 | Critical9.8 | — | 0.5% | Oct 3, 2025 |
35Monitor | CVE-2024-32878No exploit | Use of Uninitialized Variable Vulnerability in llama.cppggml · llama.cpp · CWE-456 | High8.8 | — | 0.6% | Apr 26, 2024 |
31Monitor | CVE-2019-3836No exploit | It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later whgnu · gnutls · CWE-456 | High7.5 | — | 3.4% | Apr 1, 2019 |
30Monitor | CVE-2023-20226No exploit | A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unautcisco · ios xe · CWE-456 | High7.5 | — | 0.9% | Sep 27, 2023 |
26Monitor | CVE-2021-34703No exploit | Cisco IOS and IOS XE Software Link Layer Discovery Protocol Denial of Service Vulnerabilitycisco · ios · CWE-456 | Medium6.5 | — | 1.1% | Sep 22, 2021 |
25Monitor | CVE-2021-40403No exploit | An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev (commit b5f1eacd)gerbv project · gerbv · CWE-456 | Medium6.3 | — | 1.0% | Feb 4, 2022 |
24Monitor | CVE-2018-14641No exploit | A security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux kernel from 4.19-rc1 to 4.19-rc3 inclusive,linux · linux kernel · CWE-456 | Medium5.9 | — | 2.8% | Sep 18, 2018 |
22Monitor | CVE-2024-9780No exploit | Missing Initialization of a Variable in Wiresharkwireshark · wireshark · CWE-456 | Medium5.5 | — | 0.2% | Oct 10, 2024 |
- CVE-2025-1054739Monitor
An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the a
CriticalCVSS 9.8No exploitEPSS 0%draytek corporation · vigor1000bOct 3, 2025
- CVE-2024-3287835Monitor
Use of Uninitialized Variable Vulnerability in llama.cpp
HighCVSS 8.8No exploitEPSS 0%ggml · llama.cppApr 26, 2024
- CVE-2019-383631Monitor
It was discovered in gnutls before version 3.6.7 upstream that there is an uninitialized pointer access in gnutls versions 3.6.3 or later wh
HighCVSS 7.5No exploitEPSS 3%gnu · gnutlsApr 1, 2019
- CVE-2023-2022630Monitor
A vulnerability in Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) on Cisco IOS XE Software could allow an unaut
HighCVSS 7.5No exploitEPSS 0%cisco · ios xeSep 27, 2023
- CVE-2021-3470326Monitor
Cisco IOS and IOS XE Software Link Layer Discovery Protocol Denial of Service Vulnerability
MediumCVSS 6.5No exploitEPSS 1%cisco · iosSep 22, 2021
- CVE-2021-4040325Monitor
An information disclosure vulnerability exists in the pick-and-place rotation parsing functionality of Gerbv 2.7.0 and dev (commit b5f1eacd)
MediumCVSS 6.3No exploitEPSS 1%gerbv project · gerbvFeb 4, 2022
- CVE-2018-1464124Monitor
A security flaw was found in the ip_frag_reasm() function in net/ipv4/ip_fragment.c in the Linux kernel from 4.19-rc1 to 4.19-rc3 inclusive,
MediumCVSS 5.9No exploitEPSS 2%linux · linux kernelSep 18, 2018
- CVE-2024-978022Monitor
Missing Initialization of a Variable in Wireshark
MediumCVSS 5.5No exploitEPSS 0%wireshark · wiresharkOct 10, 2024