Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 18, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 226651 | 7.5 | 危険 | rifat kurban | - | tekno.Portal の makale.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-1925 | 2012-12-20 19:29 | 2010-05-12 | Show | GitHub Exploit DB Packet Storm |
| 226652 | 7.5 | 危険 | phpscripte24 | - | Hi Web Wiesbaden Live Shopping Multi Portal System の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-1924 | 2012-12-20 19:29 | 2010-05-12 | Show | GitHub Exploit DB Packet Storm |
| 226653 | 7.5 | 危険 | phpscripte24 | - | Hi Web Wiesbaden Web Social Network Freunde Community System の user.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-1923 | 2012-12-20 19:29 | 2010-05-12 | Show | GitHub Exploit DB Packet Storm |
| 226654 | 7.5 | 危険 | xinha s9y |
- | Serendipity で使用されている Xinha WYSIWYG エディタにおけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-1916 | 2012-12-20 19:29 | 2010-05-12 | Show | GitHub Exploit DB Packet Storm |
| 226655 | 4.3 | 警告 | tufat | - | FlashCard の cPlayer.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-1872 | 2012-12-20 19:29 | 2010-05-12 | Show | GitHub Exploit DB Packet Storm |
| 226656 | 6.8 | 警告 | レッドハット | - | Red Hat Linux 用の JBoss Enterprise Application Platform で使用されている jboss-seam2 における任意のコードを実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-1871 | 2012-12-20 19:29 | 2010-07-27 | Show | GitHub Exploit DB Packet Storm |
| 226657 | 6.8 | 警告 | realitymedias | - | RepairShop2 の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-1857 | 2012-12-20 19:29 | 2010-05-7 | Show | GitHub Exploit DB Packet Storm |
| 226658 | 2.6 | 注意 | realitymedias | - | RepairShop2 の index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-1856 | 2012-12-20 19:29 | 2010-05-7 | Show | GitHub Exploit DB Packet Storm |
| 226659 | 7.5 | 危険 | phpscripte24 | - | Pay Per Watch & Bid Auktions System の auktion.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-1855 | 2012-12-20 19:29 | 2010-05-7 | Show | GitHub Exploit DB Packet Storm |
| 226660 | 4.3 | 警告 | phpscripte24 | - | Pay Per Watch & Bid Auktions System の auktion.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-1854 | 2012-12-20 19:29 | 2010-05-7 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 19, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 201331 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8053_firmware apq8096au_firmware mdm9150_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware mdm9650_firmware msm8996au_firmware qca6174a_firmw… |
Valid deauth/disassoc frames is dropped in case if RMF is enabled and some rouge peer keep on sending rogue deauth/disassoc frames due to improper enum values used to check the frame subtype in Snapd… |
CWE-617
Reachable Assertion |
CVE-2020-3615 | 2024-11-21 14:31 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 201332 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8053_firmware apq8096au_firmware apq8098_firmware msm8909w_firmware msm8917_firmware msm8953_firmware msm8996au_firmware nicobar_firmware qcs405_firmwar… |
Possibility of double free of the drawobj that is added to the drawqueue array of the context during IOCTL commands as there is no refcount taken for this object in Snapdragon Auto, Snapdragon Comput… |
CWE-415
Double Free |
CVE-2020-3610 | 2024-11-21 14:31 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 201333 | 5.5 |
MEDIUM
Local |
netqmail debian canonical |
netqmail debian_linux ubuntu_linux |
qmail-verify as used in netqmail 1.06 is prone to an information disclosure vulnerability. A local attacker can test for the existence of files and directories anywhere in the filesystem because qmai… |
CWE-269
Improper Privilege Management |
CVE-2020-3812 | 2024-11-21 14:31 | 2020-05-26 | Show | GitHub Exploit DB Packet Storm |
| 201334 | 7.5 |
HIGH
Network |
netqmail debian canonical |
netqmail debian_linux ubuntu_linux |
qmail-verify as used in netqmail 1.06 is prone to a mail-address verification bypass vulnerability. |
CWE-665 CWE-863 Improper Initialization Incorrect Authorization |
CVE-2020-3811 | 2024-11-21 14:31 | 2020-05-26 | Show | GitHub Exploit DB Packet Storm |
| 201335 | 5.5 |
MEDIUM
Local |
debian fedoraproject canonical |
debian_linux apt fedora ubuntu_linux |
Missing input validation in the ar/tar implementations of APT before version 2.1.2 could result in denial of service when processing specially crafted deb files. |
CWE-20 CWE-125 Improper Input Validation Out-of-bounds Read |
CVE-2020-3810 | 2024-11-21 14:31 | 2020-05-15 | Show | GitHub Exploit DB Packet Storm |
| 201336 | 9.1 |
CRITICAL
Network |
qualcomm |
msm8998_firmware qca6390_firmware sc7180_firmware sc8180x_firmware sdm850_firmware |
Possible buffer over-read in windows wlan driver function due to lack of check of length of variable received from userspace in Snapdragon Compute, Snapdragon Connectivity in MSM8998, QCA6390, SC7180… |
CWE-20 CWE-125 Improper Input Validation Out-of-bounds Read |
CVE-2020-3653 | 2024-11-21 14:31 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |
| 201337 | 9.1 |
CRITICAL
Network |
qualcomm |
msm8998_firmware qca6390_firmware sc7180_firmware sc8180x_firmware sdm850_firmware |
Possible buffer over-read issue in windows x86 wlan driver function while processing beacon or request frame due to lack of check of length of variable received. in Snapdragon Compute, Snapdragon Con… |
CWE-20 CWE-125 Improper Input Validation Out-of-bounds Read |
CVE-2020-3652 | 2024-11-21 14:31 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |
| 201338 | 7.5 |
HIGH
Network |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8905_firmware… |
Active command timeout since WM status change cmd is not removed from active queue if peer sends multiple deauth frames. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connec… |
CWE-617
Reachable Assertion |
CVE-2020-3651 | 2024-11-21 14:31 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |
| 201339 | 7.5 |
HIGH
Network |
draytek | vigorap_910c_firmware | A vulnerable SNMP in Draytek VigorAP910C cannot be disabled, which may cause information leakage. |
NVD-CWE-noinfo
|
CVE-2020-3932 | 2024-11-21 14:31 | 2020-04-15 | Show | GitHub Exploit DB Packet Storm |
| 201340 | 9.8 |
CRITICAL
Network |
apple | mac_os_x | A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected application termination or arb… |
CWE-20 CWE-787 Improper Input Validation Out-of-bounds Write |
CVE-2020-3850 | 2024-11-21 14:31 | 2020-04-2 | Show | GitHub Exploit DB Packet Storm |