Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 8, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 225801 | 7.5 | 危険 | traza | - | Aurora CMS の add-ons/modules/sysmanager/plugins/install.plugin.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3365 | 2012-12-20 19:28 | 2009-09-24 | Show | GitHub Exploit DB Packet Storm |
| 225802 | 4.3 | 警告 | ufku bayburt | - | Drupal 用の BUEditor モジュールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-3363 | 2012-12-20 19:28 | 2009-09-9 | Show | GitHub Exploit DB Packet Storm |
| 225803 | 7.5 | 危険 | sznews | - | SZNews の printnews.php3 における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3362 | 2012-12-20 19:28 | 2009-09-24 | Show | GitHub Exploit DB Packet Storm |
| 225804 | 7.5 | 危険 | tourismscripts | - | Tourism Scripts Adult Portal エスコートリストの profile.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-3358 | 2012-12-20 19:28 | 2009-09-24 | Show | GitHub Exploit DB Packet Storm |
| 225805 | 7.5 | 危険 | Plohni | - | Image voting の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-3356 | 2012-12-20 19:28 | 2009-09-24 | Show | GitHub Exploit DB Packet Storm |
| 225806 | 10 | 危険 | Steve Lockwood | - | Drupal 用の Node2Node モジュールにおける脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-3353 | 2012-12-20 19:28 | 2009-09-9 | Show | GitHub Exploit DB Packet Storm |
| 225807 | 10 | 危険 | roshan shah | - | Drupal 用の Quota by role モジュールにおける脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-3352 | 2012-12-20 19:28 | 2009-09-9 | Show | GitHub Exploit DB Packet Storm |
| 225808 | 10 | 危険 | roshan shah | - | Drupal 用の Subdomain Manager モジュールにおける脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-3350 | 2012-12-20 19:28 | 2009-09-9 | Show | GitHub Exploit DB Packet Storm |
| 225809 | 10 | 危険 | SAP | - | SAP Crystal Reports Server における任意のコードを実行される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-3346 | 2012-12-20 19:28 | 2009-09-24 | Show | GitHub Exploit DB Packet Storm |
| 225810 | 10 | 危険 | SAP | - | SAP Crystal Reports Server におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2009-3345 | 2012-12-20 19:28 | 2009-09-24 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 8, 2026, 4:54 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 198591 | 7.8 |
HIGH
Local |
qualcomm |
bitra_firmware kamorta_firmware qcs404_firmware qcs610_firmware rennell_firmware saipan_firmware sc7180_firmware sdx55_firmware sm6150_firmware sm7150_firmware sm8250_fi… |
u'Resizing the usage table header before passing all the checks leads to the function exiting with a usage table in invalid state when a HLOS adversary calls the function with wrong input' in Snapdra… |
CWE-131
Incorrect Calculation of Buffer Size |
CVE-2020-3640 | 2024-11-21 14:31 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 198592 | 7.8 |
HIGH
Local |
qualcomm |
kamorta_firmware qcs404_firmware qcs610_firmware rennell_firmware sc7180_firmware sdx55_firmware sm6150_firmware sm7150_firmware sm8250_firmware sxr2130_firmware |
u'Out of bound writes happen when accessing usage_table header entry beyond the memory allocated for the header' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Mobile, Sn… |
NVD-CWE-Other
|
CVE-2020-3636 | 2024-11-21 14:31 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 198593 | 7.8 |
HIGH
Local |
qualcomm |
bitra_firmware kamorta_firmware rennell_firmware sc7180_firmware sdm845_firmware sm6150_firmware sm7150_firmware sm8150_firmware sm8250_firmware sxr2130_firmware |
u'Stack out of bound issue occurs when making query to DSP capabilities due to wrong assumption was made on determining the buffer size for the DSP attributes' in Snapdragon Auto, Snapdragon Compute,… |
CWE-120
Classic Buffer Overflow |
CVE-2020-3629 | 2024-11-21 14:31 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 198594 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware apq8098_firmware kamorta_firmware mdm9150_firmware mdm9205_firmware mdm9206_firmware mdm9207c_firmware… |
u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage in operation' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, S… |
CWE-190
Integer Overflow or Wraparound |
CVE-2020-3624 | 2024-11-21 14:31 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 198595 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206 mdm9607 mdm9650 mdm9655 mdm9640 mdm9645 sdx20 sdm630 sdm636 sdm660 msm8937 sdm845 apq8096au msm8996au msm8996 msm8917 msm8998 sdm632 sdm7… |
u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not validated for NULL termination can results into memory corruption' in Snapdragon … |
CWE-787
Out-of-bounds Write |
CVE-2020-3622 | 2024-11-21 14:31 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 198596 | 5.5 |
MEDIUM
Local |
qualcomm |
apq8009_firmware apq8053_firmware apq8096au_firmware apq8098_firmware bitra_firmware kamorta_firmware mdm9206_firmware mdm9150_firmware mdm9607_firmware mdm9640_firmware
u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption and potential information leakage' in Sna…
|
CWE-20 |
CWE-787 Improper Input Validation Out-of-bounds Write
CVE-2020-3621
|
2024-11-21 14:31 |
2020-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 198597 | 5.5 |
MEDIUM
Local |
qualcomm |
apq8009_firmware apq8053_firmware apq8096au_firmware apq8098_firmware bitra_firmware kamorta_firmware mdm9206_firmware mdm9150_firmware mdm9607_firmware mdm9640_firmware
u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to corruption and potential information leak' in Snapdragon Au…
|
CWE-190
|
Integer Overflow or Wraparound
CVE-2020-3620
|
2024-11-21 14:31 |
2020-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 198598 | 7.0 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8098_firmware ipq8074_firmware kamorta_firmware mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9650_firmware
u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to privilege escalation or memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv…
|
CWE-787 |
CWE-367 Out-of-bounds Write Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2020-3619
|
2024-11-21 14:31 |
2020-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 198599 | 7.8 |
HIGH
Local |
qualcomm |
apq8098_firmware kamorta_firmware msm8998_firmware qcs404_firmware qcs605_firmware sda660_firmware sda845_firmware sdm630_firmware sdm636_firmware sdm660_firmware sdm670… |
u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access issue' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, … |
NVD-CWE-noinfo
|
CVE-2020-3611 | 2024-11-21 14:31 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 198600 | 6.5 |
MEDIUM
Network |
cisco | jabber | A vulnerability in Cisco Jabber software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of message contents. An… |
CWE-20
Improper Input Validation |
CVE-2020-3498 | 2024-11-21 14:31 | 2020-09-4 | Show | GitHub Exploit DB Packet Storm |