Insecure Default Variable Initialization

The product, by default, initializes an internal variable with an insecure or less secure value than is possible.

CVEs (22)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-3262 1Redhat 1Openshift Jun 17, 2026 Dec 8, 2022 N/A· v4 8.1 HIGH· v3 N/A· v2 A flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve the hostname based on a service provided. This flaw allows an attacker to supply an incorrect name with the DNS search polic...Show more A flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve the hostname based on a service provided. This flaw allows an attacker to supply an incorrect name with the DNS search policy, affecting confidentiality and availability.Show less
CVE-2021-27426 1Ge 19Multilin B30 Firmware Multilin B90 FirmwareMultilin C30 Firmware+16 more Jun 17, 2026 Mar 23, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2022-3262

1Redhat

1Openshift

Jun 17, 2026

Dec 8, 2022

N/A· v4

8.1 HIGH· v3

N/A· v2

A flaw was found in Openshift. A pod with a DNSPolicy of "ClusterFirst" may incorrectly resolve the hostname based on a service provided. This flaw allows an attacker to supply an incorrect name with the DNS search polic...Show more

CVE-2021-27426

1Ge

19Multilin B30 Firmware

Multilin B90 FirmwareMultilin C30 Firmware+16 more

Jun 17, 2026

Mar 23, 2022

N/A· v4

9.8 CRITICAL· v3

7.5 HIGH· v2

GE UR IED firmware versions prior to version 8.1x with “Basic” security variant does not allow the disabling of the “Factory Mode,” which is used for servicing the IED by a “Factory” user.

Previous 12