Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 12, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 225961 | 4.3 | 警告 | phplemon | - | phplemon AdQuick の account.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4686 | 2012-12-20 19:28 | 2010-03-10 | Show | GitHub Exploit DB Packet Storm |
| 225962 | 4.3 | 警告 | phpscriptsnow | - | PHP Scripts Now Astrology の celebrities.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4685 | 2012-12-20 19:28 | 2010-03-10 | Show | GitHub Exploit DB Packet Storm |
| 225963 | 7.5 | 危険 | Scriptsez.net | - | Good/Bad Vote の vote.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2009-4683 | 2012-12-20 19:28 | 2010-03-10 | Show | GitHub Exploit DB Packet Storm |
| 225964 | 4.3 | 警告 | Scriptsez.net | - | Good/Bad Vote の vote.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4682 | 2012-12-20 19:28 | 2010-03-10 | Show | GitHub Exploit DB Packet Storm |
| 225965 | 4.3 | 警告 | php directory source | - | phpDirectorySource の search.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4681 | 2012-12-20 19:28 | 2010-03-10 | Show | GitHub Exploit DB Packet Storm |
| 225966 | 7.5 | 危険 | php directory source | - | phpDirectorySource の search.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4680 | 2012-12-20 19:28 | 2010-03-10 | Show | GitHub Exploit DB Packet Storm |
| 225967 | 4.3 | 警告 | Winn GuestBook | - | Winn Guestbook におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4678 | 2012-12-20 19:28 | 2010-03-8 | Show | GitHub Exploit DB Packet Storm |
| 225968 | 6.5 | 警告 | phpmember | - | WebMember の form.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4667 | 2012-12-20 19:28 | 2010-03-5 | Show | GitHub Exploit DB Packet Storm |
| 225969 | 7.5 | 危険 | qualityunit | - | Webradev Download Protect における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-4666 | 2012-12-20 19:28 | 2010-03-5 | Show | GitHub Exploit DB Packet Storm |
| 225970 | 9.3 | 危険 | quiksoft | - | Quiksoft EasyMail Objects ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2009-4663 | 2012-12-20 19:28 | 2010-03-3 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 12, 2026, 5:06 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 211441 | 7.8 |
HIGH
Local |
qualcomm |
qcm6125_firmware qcs410_firmware qcs603_firmware qcs605_firmware qcs610_firmware qcs6125_firmware sa6145p_firmware sa6155_firmware sa6155p_firmware sa8155_firmware sa815… |
Arbitrary access to DSP memory due to improper check in loaded library for data received from CPU side' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sna… |
CWE-20
Improper Input Validation |
CVE-2020-11201 | 2024-11-21 13:57 | 2020-11-12 | Show | GitHub Exploit DB Packet Storm |
| 211442 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8064au_firmware apq8096_firmware apq8096au_firmware apq8096sg_firmware apq8098_firm… |
u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industri… |
CWE-119 CWE-190 Incorrect Access of Indexable Resource ('Range Error') Integer Overflow or Wraparound |
CVE-2020-11196 | 2024-11-21 13:57 | 2020-11-12 | Show | GitHub Exploit DB Packet Storm |
| 211443 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8064au_firmware apq8096_firmware apq8096au_firmware apq8096sg_firmware apq8098_firm… |
u'Buffer over read can happen while parsing mkv clip due to improper typecasting of data returned from atomsize' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial… |
CWE-125
Out-of-bounds Read |
CVE-2020-11193 | 2024-11-21 13:57 | 2020-11-12 | Show | GitHub Exploit DB Packet Storm |
| 211444 | 9.8 |
CRITICAL
Network |
qualcomm |
qcm4290_firmware qcs4290_firmware qm215_firmware qsm8350_firmware sa6145p_firmware sa6155_firmware sa6155p_firmware sa8155_firmware sa8155p_firmware sdx55_firmware sdx55… |
u'Possible buffer overflow will occur in video while parsing mp4 clip with crafted esds atom size.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile in QCM4290, QC… |
CWE-190
Integer Overflow or Wraparound |
CVE-2020-11184 | 2024-11-21 13:57 | 2020-11-12 | Show | GitHub Exploit DB Packet Storm |
| 211445 | 7.8 |
HIGH
Local |
qualcomm |
apq8009w_firmware msm8909w_firmware qcs605_firmware qm215_firmware sa6155_firmware sa6155p_firmware sa8155_firmware sa8155p_firmware sda640_firmware sda670_firmware sda8… |
u'Use after free issue in Bluetooth transport driver when a method in the object is accessed after the object has been deleted due to improper timer handling.' in Snapdragon Auto, Snapdragon Compute,… |
CWE-416
Use After Free |
CVE-2020-11175 | 2024-11-21 13:57 | 2020-11-12 | Show | GitHub Exploit DB Packet Storm |
| 211446 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009w_firmware apq8017_firmware apq8053_firmware apq8064au_firmware apq8096au_firmware apq8098_firmware mdm9206_firmware mdm9650_firmware msm8909w_firmware msm8953_firmw… |
u'Null-pointer dereference can occur while accessing data buffer beyond its size that leads to access the buffer beyond its range' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Sna… |
CWE-476
NULL Pointer Dereference |
CVE-2020-11168 | 2024-11-21 13:57 | 2020-11-12 | Show | GitHub Exploit DB Packet Storm |
| 211447 | 9.8 |
CRITICAL
Network |
qualcomm |
ipq4019_firmware ipq6018_firmware ipq8064_firmware ipq8074_firmware qca9531_firmware qca9980_firmware |
u'fscanf reads a string from a file and stores its contents on a statically allocated stack memory which leads to stack overflow' in Snapdragon Wired Infrastructure and Networking in IPQ4019, IPQ6018… |
CWE-120
Classic Buffer Overflow |
CVE-2020-11172 | 2024-11-21 13:57 | 2020-11-2 | Show | GitHub Exploit DB Packet Storm |
| 211448 | 7.8 |
HIGH
Local |
qualcomm |
agatti_firmware apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware apq8098_firmware bitra_firmware ipq4019_firmware ipq5018_firmware ipq6018_firmware … |
u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,… |
CWE-129
Improper Validation of Array Index |
CVE-2020-11174 | 2024-11-21 13:57 | 2020-11-2 | Show | GitHub Exploit DB Packet Storm |
| 211449 | 7.0 |
HIGH
Local |
qualcomm |
agatti_firmware apq8053_firmware bitra_firmware ipq4019_firmware ipq5018_firmware ipq6018_firmware ipq8064_firmware ipq8074_firmware kamorta_firmware mdm9607_firmware ms… |
u'Two threads running simultaneously from user space can lead to race condition in fastRPC driver' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… |
CWE-362 CWE-416 Race Condition Use After Free |
CVE-2020-11173 | 2024-11-21 13:57 | 2020-11-2 | Show | GitHub Exploit DB Packet Storm |
| 211450 | 9.1 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8053_firmware qca6390_firmware qcn7605_firmware qcn7606_firmware sa415m_firmware sa515m_firmware sa6155p_firmware sa8155p_firmware sc8180x_firmware s… |
u'Buffer over-read while processing received L2CAP packet due to lack of integer overflow check' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Conne… |
CWE-125 CWE-190 Out-of-bounds Read Integer Overflow or Wraparound |
CVE-2020-11169 | 2024-11-21 13:57 | 2020-11-2 | Show | GitHub Exploit DB Packet Storm |