Lucene search
+L

3354 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 6:58 p.m.10 views

CVE-2021-0189

Use of out-of-range pointer offset in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...

7.8CVSS6.8AI score0.00268EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:20 p.m.11 views

CVE-2021-21814

Within the function HandleFileArg the argument filepattern is under control of the user who passes it in from the command line. filepattern is passed directly to strlen to determine the ending location of the char passed in by the user, no checks are done to see if the passed in char is longer th...

7.8CVSS7.3AI score0.00344EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:13 p.m.14 views

CVE-2021-1961

Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

6.7CVSS7.6AI score0.00385EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:59 p.m.12 views

CVE-2020-11226

Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

7.5CVSS7.1AI score0.0087EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 4:9 p.m.9 views

CVE-2020-11149

Out of bound access due to usage of an out-of-range pointer offset in the camera driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

7.2CVSS9.4AI score0.00208EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 1:26 p.m.11 views

CVE-2018-21076

An issue was discovered on Samsung mobile devices with N7.x Exynos8890/8895 chipsets software. There is information disclosure a KASLR offset in the Secure Driver via a modified trustlet. The Samsung ID is SVE-2017-10987 April 2018...

5.5CVSS6.6AI score0.00134EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:32 a.m.16 views

CVE-2019-14006

Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearabl...

10CVSS7.4AI score0.00953EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:15 a.m.10 views

CVE-2019-14082

Potential buffer over-read due to lack of bound check of memory offset passed in WLAN firmware in Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ8074,...

9.4CVSS7.5AI score0.00876EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/21 4:38 p.m.21 views

CVE-2025-22791

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in twh offset writing allows Reflected XSS.This issue affects offset writing: from n/a through 1.2...

7.1CVSS8.6AI score0.00192EPSS
SaveExploits0References1
OSV
OSV
added 2025/05/20 4:15 p.m.2 views

DEBIAN-CVE-2025-37947

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writes by validating pos ksmbdvfsstreamwrite did not validate whether the write offset pos was within the bounds of the existing stream data length vlen. If pos was greater than or equal to vle...

7.8CVSS5.7AI score0.00481EPSS
SaveExploits1References1
OSV
OSV
added 2025/05/20 4:15 p.m.7 views

UBUNTU-CVE-2025-37947

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writes by validating pos ksmbdvfsstreamwrite did not validate whether the write offset pos was within the bounds of the existing stream data length vlen. If pos was greater than or equal to vle...

8.8CVSS6.2AI score0.00481EPSS
SaveExploits1References27
NVD
NVD
added 2025/05/19 4:15 p.m.7 views

CVE-2025-22791

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in twh offset writing allows Reflected XSS.This issue affects offset writing: from n/a through 1.2...

7.1CVSS0.00192EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/05/19 4:0 p.m.6 views

CVE-2025-22791 WordPress offset writing theme <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in twh offset writing allows Reflected XSS.This issue affects offset writing: from n/a through 1.2...

7.1CVSS7AI score0.00192EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/19 4:0 p.m.16 views

CVE-2025-22791 WordPress offset writing theme <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in twh offset writing allows Reflected XSS.This issue affects offset writing: from n/a through 1.2...

7.1CVSS0.00192EPSS
SaveExploits0References1
CVE
CVE
added 2025/05/19 4:0 p.m.32 views

CVE-2025-22791

CVE-2025-22791 : Reflected XSS in twh offset writing (WordPress theme/plugin “offset writing”); affects versions n/a–1.2. Root cause: improper input handling during web page generation leading to reflected script execution. Public sources (NVD, Red Hat, CVE lists) confirm vulnerability exists; Pa...

7.1CVSS8.6AI score0.00192EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/05/19 12:0 a.m.4 views

WordPress plugin offset writing 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in...

7.1CVSS7.5AI score0.00192EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/19 12:0 a.m.6 views

PT-2025-22003 · Unknown · Twh Offset Writing

Name of the Vulnerable Software and Affected Versions: twh offset writing versions n/a through 1.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This occurs in the twh offset writing...

7.1CVSS8.9AI score0.00192EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2025/05/17 2:54 a.m.5 views

SUSE CVE-2025-48174

In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream-offset+size...

6.8CVSS7.5AI score0.0033EPSS
SaveExploits0References7
OSV
OSV
added 2025/05/16 5:15 a.m.3 views

UBUNTU-CVE-2025-48174

In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream-offset+size...

9.1CVSS6AI score0.0033EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2025/05/16 12:0 a.m.44 views

CVE-2025-48174

In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream-offset+size...

4.5CVSS0.0033EPSS
SaveExploits0References4
Rows per page
Query Builder