Lucene search
+L

4263 matches found

RedhatCVE
RedhatCVE
•added 2025/05/21 4:38 p.m.•27 views

CVE-2025-22791

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in twh offset writing allows Reflected XSS.This issue affects offset writing: from n/a through 1.2...

7.1CVSS8.6AI score0.00233EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2025/05/20 4:15 p.m.•5 views

DEBIAN-CVE-2025-37947

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writes by validating pos ksmbdvfsstreamwrite did not validate whether the write offset pos was within the bounds of the existing stream data length vlen. If pos was greater than or equal to vle...

7.8CVSS5.7AI score0.00652EPSS
SaveExploits1References1
osv_ubuntu
osv_ubuntu
•added 2025/05/20 4:15 p.m.•20 views

UBUNTU-CVE-2025-37947

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writes by validating pos ksmbdvfsstreamwrite did not validate whether the write offset pos was within the bounds of the existing stream data length vlen. If pos was greater than or equal to vle...

8.8CVSS6.2AI score0.00652EPSS
SaveExploits1References27
NVD
NVD
•added 2025/05/19 4:15 p.m.•12 views

CVE-2025-22791

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in twh offset writing allows Reflected XSS.This issue affects offset writing: from n/a through 1.2...

7.1CVSS0.00233EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/19 4:00 p.m.•41 views

CVE-2025-22791

CVE-2025-22791 : Reflected XSS in twh offset writing (WordPress theme/plugin “offset writing”); affects versions n/a–1.2. Root cause: improper input handling during web page generation leading to reflected script execution. Public sources (NVD, Red Hat, CVE lists) confirm vulnerability exists; Pa...

7.1CVSS8.6AI score0.00233EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/05/19 4:00 p.m.•22 views

CVE-2025-22791 WordPress offset writing theme <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in twh offset writing allows Reflected XSS.This issue affects offset writing: from n/a through 1.2...

7.1CVSS0.00233EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/19 4:00 p.m.•8 views

CVE-2025-22791 WordPress offset writing theme <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in twh offset writing allows Reflected XSS.This issue affects offset writing: from n/a through 1.2...

7.1CVSS7AI score0.00233EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/19 12:00 a.m.•12 views

PT-2025-22003 · Unknown · Twh Offset Writing

Name of the Vulnerable Software and Affected Versions: twh offset writing versions n/a through 1.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This occurs in the twh offset writing...

7.1CVSS8.9AI score0.00233EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/05/19 12:00 a.m.•13 views

WordPress plugin offset writing 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

7.1CVSS7.5AI score0.00233EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/19 12:00 a.m.•6 views

CVE-2025-22791: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in twh offset writing allows Reflected XSS.This issue affects offset writing: from n/a through 1.2...

7.1CVSS5.8AI score0.00233EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/05/17 2:54 a.m.•12 views

SUSE CVE-2025-48174

In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream-offset+size...

6.8CVSS7.5AI score0.00375EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/17 12:00 a.m.•5 views

CVE-2024-47893: Use of Out-of-range Pointer Offset

Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to read and/or write data outside the Guest's virtualised GPU memory...

6.5CVSS5.8AI score0.00275EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/05/16 5:15 a.m.•12 views

UBUNTU-CVE-2025-48174

In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream-offset+size...

9.1CVSS6AI score0.00375EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2025/05/16 12:00 a.m.•70 views

CVE-2025-48174

In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream-offset+size...

4.5CVSS0.00375EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2025/05/13 8:28 a.m.•21 views

kernel: gpio: prevent potential speculation leaks in gpio_device_get_desc()

A flaw was found in the Linux kernel's General Purpose Input/Output GPIO subsystem. A local user can exploit this vulnerability by providing an out-of-range offset to the gpioioctl function. This can lead to a speculative read of memory outside the intended GPIO descriptor array, potentially...

5.5CVSS6.7AI score0.00248EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2025/05/13 8:28 a.m.•17 views

kernel: erofs/zmap.c: Fix incorrect offset calculation

In the Linux kernel, the following vulnerability has been resolved: erofs/zmap.c: Fix incorrect offset calculation Effective offset to add to length was being incorrectly calculated, which resulted in iomap-length being set to 0, triggering a WARNON in iomapiterdone. Fix that, and describe it in...

5.5CVSS6.8AI score0.00188EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2025/05/06 8:32 a.m.•38 views

CVE-2024-45570 Use of Out-of-range Pointer Offset in Camera Driver

Memory corruption may occur during IO configuration processing when the IO port count is invalid...

6.6CVSS0.00112EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/05/06 3:07 a.m.•12 views

SUSE CVE-2022-49785

In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Add overflow check in sgxvalidateoffsetlength sgxvalidateoffsetlength function verifies "offset" and "length" arguments provided by userspace, but was missing an overflow check on their addition. Add it...

5.5CVSS6.7AI score0.00199EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/06 12:00 a.m.•9 views

CVE-2024-45570: Use of Out-of-range Pointer Offset

Memory corruption may occur during IO configuration processing when the IO port count is invalid...

7.8CVSS6AI score0.00112EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/06 12:00 a.m.•2 views

PT-2025-62918

mod3d base::BufferData::as ptr lack of sufficient checks to its public self field byte offset and used unsafely to do the pointer calculation...

5.8AI score
SaveExploits0References3
Rows per page
Query Builder