Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 11, 2026, 6:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 226061 | 6.8 | 警告 | simplog | - | Simplog の user.php におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2009-4092 | 2012-12-20 19:28 | 2009-11-29 | Show | GitHub Exploit DB Packet Storm |
| 226062 | 5 | 警告 | simplog | - | Simplog の comments.php におけるコメントを編集される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-4091 | 2012-12-20 19:28 | 2009-11-29 | Show | GitHub Exploit DB Packet Storm |
| 226063 | 7.5 | 危険 | telepark | - | telepark.wiki の ajax/addComment.php における任意のコードを実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2009-4090 | 2012-12-20 19:28 | 2009-11-29 | Show | GitHub Exploit DB Packet Storm |
| 226064 | 5 | 警告 | telepark | - | telepark.wiki における認可を回避される脆弱性 |
CWE-287
不適切な認証 |
CVE-2009-4089 | 2012-12-20 19:28 | 2009-11-29 | Show | GitHub Exploit DB Packet Storm |
| 226065 | 6.8 | 警告 | telepark | - | telepark.wiki におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2009-4088 | 2012-12-20 19:28 | 2009-11-29 | Show | GitHub Exploit DB Packet Storm |
| 226066 | 4.3 | 警告 | telepark | - | telepark.wiki の index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4087 | 2012-12-20 19:28 | 2009-11-29 | Show | GitHub Exploit DB Packet Storm |
| 226067 | 4.3 | 警告 | puntolatinoclub | - | Drupal 用の Gallery Assist モジュールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4064 | 2012-12-20 19:28 | 2009-11-18 | Show | GitHub Exploit DB Packet Storm |
| 226068 | 4.3 | 警告 | yuriy babenko | - | Drupal 用の Agreement モジュールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4061 | 2012-12-20 19:28 | 2009-11-18 | Show | GitHub Exploit DB Packet Storm |
| 226069 | 7.5 | 危険 | telebidauctionscript | - | Telebid Auction Script の allauctions.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4058 | 2012-12-20 19:28 | 2009-11-23 | Show | GitHub Exploit DB Packet Storm |
| 226070 | 7.5 | 危険 | PowerDNS | - | PowerDNS Recursor における DNS データを偽装される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-4010 | 2012-12-20 19:28 | 2010-01-6 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 12, 2026, 5:06 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 211371 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8053_firmware apq8064au_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware ar8035_firmware ar8151_firmware<… |
When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting in a Use After Free condition in Snapdragon Auto, Snapdragon… |
CWE-416
Use After Free |
CVE-2020-11234 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 211372 | 6.7 |
MEDIUM
Local |
qualcomm |
apq8017_firmware apq8053_firmware aqt1000_firmware msm8917_firmware msm8953_firmware pm215_firmware pm3003a_firmware pm439_firmware pm6125_firmware pm6150_firmware pm615… |
Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in turn can lead to heap corruption in Snapdragon Compute, Snapdragon Connectivity, … |
CWE-415
Double Free |
CVE-2020-11231 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 211373 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar8035_firmware ar8151_firmware
Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons…
|
CWE-787 |
CWE-129 Out-of-bounds Write Improper Validation of Array Index
CVE-2020-11227
|
2024-11-21 13:57 |
2021-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 211374 | 5.5 |
MEDIUM
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar8035_firmware ar8151_firmware
Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insufficient checks in the syscall handler and leads to information disclosu…
|
CWE-200
|
Information Exposure
CVE-2020-11221
|
2024-11-21 13:57 |
2021-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 211375 | 5.5 |
MEDIUM
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar8035_firmware ar8151_firmware
HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr…
|
CWE-200
|
Information Exposure
CVE-2020-11199
|
2024-11-21 13:57 |
2021-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 211376 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8053_firmware apq8064au_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware ar8035_firmware ar8151_firmware<… |
Use after free in GPU driver while mapping the user memory to GPU memory due to improper check of referenced memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consume… |
CWE-416
Use After Free |
CVE-2020-11309 | 2024-11-21 13:57 | 2021-03-17 | Show | GitHub Exploit DB Packet Storm |
| 211377 | 6.8 |
MEDIUM
Physics |
qualcomm |
apq8009_firmware aqt1000_firmware ar8031_firmware ar8035_firmware ar8151_firmware csra6620_firmware csra6640_firmware csrb31024_firmware fsm10055_firmware fsm10056_firmware… |
Buffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size is more than required in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu… |
CWE-129
Improper Validation of Array Index |
CVE-2020-11308 | 2024-11-21 13:57 | 2021-03-17 | Show | GitHub Exploit DB Packet Storm |
| 211378 | 9.1 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar6003_firmware ar8151_firmware
Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr…
|
CWE-125
|
Out-of-bounds Read
CVE-2020-11166
|
2024-11-21 13:57 |
2021-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 211379 | 6.8 |
MEDIUM
Physics |
qualcomm |
apq8009_firmware apq8053_firmware mdm9206_firmware pm8909_firmware pm8916_firmware pm8953_firmware pmd9607_firmware pmi8952_firmware qca9367_firmware qca9377_firmware sm… |
Integer overflow in boot due to improper length check on arguments received in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2020-11305 | 2024-11-21 13:57 | 2021-03-17 | Show | GitHub Exploit DB Packet Storm |
| 211380 | 6.4 |
MEDIUM
Local |
qualcomm |
aqt1000_firmware fsm10055_firmware pm3003a_firmware pm7150a_firmware pm7150l_firmware pm7250_firmware pm7250b_firmware pm7350c_firmware pm8004_firmware pm8008_firmware p… |
Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it exposes a physical address to user land in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition |
CVE-2020-11230 | 2024-11-21 13:57 | 2021-03-17 | Show | GitHub Exploit DB Packet Storm |