Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 12, 2026, 4:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 225971 | 7.5 | 危険 | templateplaza | - | Joomla! 用の tpdugg コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4628 | 2012-12-20 19:28 | 2010-01-18 | Show | GitHub Exploit DB Packet Storm |
| 225972 | 7.5 | 危険 | phpnagios | - | phpNagios の menu.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2009-4626 | 2012-12-20 19:28 | 2010-01-18 | Show | GitHub Exploit DB Packet Storm |
| 225973 | 7.5 | 危険 | Tamlyn Creative Pty | - | Joomla! 用の bfsurvey コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4625 | 2012-12-20 19:28 | 2010-01-18 | Show | GitHub Exploit DB Packet Storm |
| 225974 | 7.5 | 危険 | Plohni | - | Advanced Comment System における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-4623 | 2012-12-20 19:28 | 2010-01-18 | Show | GitHub Exploit DB Packet Storm |
| 225975 | 7.5 | 危険 | tourismscripts | - | Tourism Script Bus Script における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4618 | 2012-12-20 19:28 | 2010-01-18 | Show | GitHub Exploit DB Packet Storm |
| 225976 | 7.5 | 危険 | tourismscripts | - | Tourism Script Accommodation Hotel Booking Portal Script における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4617 | 2012-12-20 19:28 | 2010-01-18 | Show | GitHub Exploit DB Packet Storm |
| 225977 | 7.2 | 危険 | south river technologies | - | South River Technologies WebDrive におけるサービスを停止される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-4606 | 2012-12-20 19:28 | 2010-01-13 | Show | GitHub Exploit DB Packet Storm |
| 225978 | 5 | 警告 | The phpMyAdmin Project | - | phpMyAdmin の scripts/setup.php におけるクロスサイトリクエストフォージェリ (CSRF) 攻撃を実行される脆弱性 |
CWE-DesignError
|
CVE-2009-4605 | 2012-12-20 19:28 | 2010-01-15 | Show | GitHub Exploit DB Packet Storm |
| 225979 | 5 | 警告 | SAP | - | SAP Kernel の sapstartsrv.exe におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-4603 | 2012-12-20 19:28 | 2010-01-12 | Show | GitHub Exploit DB Packet Storm |
| 225980 | 4.3 | 警告 | zeeways | - | Zeeways ZeeJobsite の basic_search_result.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4601 | 2012-12-20 19:28 | 2010-01-12 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 12, 2026, 5:06 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 211431 | 7.8 |
HIGH
Local |
qualcomm |
qca6574au qca6574 sd855 sdx55 sa6155p qca6390 sa6155 sa8155p sa6145p sa6150p sa8150p sa8155 sa8195p sdx50m sdx55m sm7250p qsm8250 aqt1000 pm3003a… |
Out of bound access in computer vision control due to improper validation of command length before processing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer I… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2020-11180 | 2024-11-21 13:57 | 2021-01-21 | Show | GitHub Exploit DB Packet Storm |
| 211432 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9206 mdm9650 msm8909w sdx20 sdm630 qca6174a qca6574au qca9377 qca9379 msm8937 apq8096au msm8996au msm8917 qca6574 qca6564 sd210 sd205 sd450 sd… |
Possible integer overflow can occur when stream info update is called when total number of streams detected are zero while parsing TS clip with invalid data in Snapdragon Auto, Snapdragon Compute, Sn… |
CWE-190
Integer Overflow or Wraparound |
CVE-2020-11197 | 2024-11-21 13:57 | 2021-01-21 | Show | GitHub Exploit DB Packet Storm |
| 211433 | 7.0 |
HIGH
Local |
qualcomm |
mdm9206 mdm9650 msm8909w sdx20 sdm630 qca6174a msm8937 apq8096au msm8996au msm8917 sd205 sd210 qca6564 qca6574 qca9379 qca9377 qca6584au qca6574au
Arbitrary read and write to kernel addresses by temporarily overwriting ring buffer pointer and creating a race condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon …
|
CWE-125 |
CWE-787 Out-of-bounds Read Out-of-bounds Write
CVE-2020-11179
|
2024-11-21 13:57 |
2021-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 211434 | 9.8 |
CRITICAL
Network |
qualcomm |
msm8909w qca6174a qca6574au qca9379 msm8937 apq8096au msm8996au msm8917 qca6574 sd210 sd205 sd450 sd835 sd845 sd820 qcs605 sd855 apq8017 apq8053<… |
Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu… |
CWE-787 CWE-190 Out-of-bounds Write Integer Overflow or Wraparound |
CVE-2020-11167 | 2024-11-21 13:57 | 2021-01-21 | Show | GitHub Exploit DB Packet Storm |
| 211435 | 5.5 |
MEDIUM
Local |
qualcomm |
sd820_firmware sd821_firmware qcs603_firmware qcs605_firmware sda855_firmware sa6155p_firmware sa6145p_firmware sa6155_firmware sd855_firmware sd_675_firmware sd660_firm… |
Improper authorization in DSP process could allow unauthorized users to downgrade the library versions in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, SA6155, SA6155P, SD855, SD 675… |
CWE-863
Incorrect Authorization |
CVE-2020-11209 | 2024-11-21 13:57 | 2020-11-12 | Show | GitHub Exploit DB Packet Storm |
| 211436 | 7.8 |
HIGH
Local |
qualcomm |
sd820_firmware sd821_firmware qcs603_firmware qcs605_firmware sda855_firmware sa6155p_firmware sa6145p_firmware sa6155_firmware sd855_firmware sd675_firmware sd660_firmw… |
Out of Bound issue in DSP services while processing received arguments due to improper validation of length received as an argument' in SD820, SD821, SD820, QCS603, QCS605, SDA855, SA6155P, SA6145P, … |
CWE-191
Integer Underflow (Wrap or Wraparound) |
CVE-2020-11208 | 2024-11-21 13:57 | 2020-11-12 | Show | GitHub Exploit DB Packet Storm |
| 211437 | 7.8 |
HIGH
Local |
qualcomm |
apq8052_firmware apq8056_firmware apq8076_firmware apq8096_firmware apq8098_firmware mdm9655_firmware msm8952_firmware msm8956_firmware msm8976_firmware msm8976sg_firmware<… |
Buffer overflow in LibFastCV library due to improper size checks with respect to buffer length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon … |
CWE-120
Classic Buffer Overflow |
CVE-2020-11207 | 2024-11-21 13:57 | 2020-11-12 | Show | GitHub Exploit DB Packet Storm |
| 211438 | 7.8 |
HIGH
Local |
qualcomm |
apq8098_firmware msm8998_firmware qcm4290_firmware qcm6125_firmware qcs410_firmware qcs4290_firmware qcs610_firmware qcs6125_firmware qsm8250_firmware qsm8350_firmware s… |
Possible buffer overflow in Fastrpc while handling received parameters due to lack of validation on input parameters' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indus… |
NVD-CWE-Other
|
CVE-2020-11206 | 2024-11-21 13:57 | 2020-11-12 | Show | GitHub Exploit DB Packet Storm |
| 211439 | 7.8 |
HIGH
Local |
qualcomm |
qsm8350_firmware sa6145p_firmware sa6150p_firmware sa6155_firmware sa6155p_firmware sa8150p_firmware sa8155p_firmware sa8195p_firmware sdx55m_firmware sm8250_firmware sm… |
u'Possible integer overflow to heap overflow while processing command due to lack of check of packet length received' in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile in QSM8350, SA6145P, SA… |
CWE-787 CWE-190 Out-of-bounds Write Integer Overflow or Wraparound |
CVE-2020-11205 | 2024-11-21 13:57 | 2020-11-12 | Show | GitHub Exploit DB Packet Storm |
| 211440 | 7.8 |
HIGH
Local |
qualcomm |
qcm6125_firmware qcs410_firmware qcs603_firmware qcs605_firmware qcs610_firmware qcs6125_firmware sa6145p_firmware sa6155_firmware sa6155p_firmware sa8155_firmware sa815… |
Buffer overflow/underflow occurs when typecasting the buffer passed by CPU internally in the library which is not aligned with the actual size of the structure' in Snapdragon Auto, Snapdragon Compute… |
CWE-787
Out-of-bounds Write |
CVE-2020-11202 | 2024-11-21 13:57 | 2020-11-12 | Show | GitHub Exploit DB Packet Storm |