|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":May 8, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 226941 | 8.5 | 危険 | Adiscon | - | rsyslog の ACL ハンドリングにおけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2008-5617 | 2012-12-20 18:52 | 2008-12-4 | Show | GitHub Exploit DB Packet Storm |
| 226942 | 7.5 | 危険 | TYPO3 Association | - | TYPO3 用の Commerce エクステンションにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-5609 | 2012-12-20 18:52 | 2008-12-16 | Show | GitHub Exploit DB Packet Storm |
| 226943 | 5 | 警告 | robs-projects | - | User Engine Lite ASP におけるデータベースファイルをダウンロードされる脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2008-5601 | 2012-12-20 18:52 | 2008-12-16 | Show | GitHub Exploit DB Packet Storm |
| 226944 | 5 | 警告 | phpmygallery | - | PHPmyGallery の index.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-5598 | 2012-12-20 18:52 | 2008-12-16 | Show | GitHub Exploit DB Packet Storm |
| 226945 | 4.3 | 警告 | phpPgAdmin | - | phpPgAdmin の libraries/lib.inc.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-5587 | 2012-12-20 18:52 | 2008-12-16 | Show | GitHub Exploit DB Packet Storm |
| 226946 | 4.3 | 警告 | ProjectPier | - | ProjectPier におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2008-5584 | 2012-12-20 18:52 | 2008-12-15 | Show | GitHub Exploit DB Packet Storm |
| 226947 | 6.8 | 警告 | ProjectPier | - | ProjectPier の index.php におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2008-5583 | 2012-12-20 18:52 | 2008-12-15 | Show | GitHub Exploit DB Packet Storm |
| 226948 | 7.5 | 危険 | scssboard | - | sCssBoard の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-5578 | 2012-12-20 18:52 | 2008-12-15 | Show | GitHub Exploit DB Packet Storm |
| 226949 | 7.5 | 危険 | scssboard | - | sCssBoard の index.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2008-5577 | 2012-12-20 18:52 | 2008-12-15 | Show | GitHub Exploit DB Packet Storm |
| 226950 | 7.5 | 危険 | scssboard | - | sCssBoard の admin/forums.php における認証を回避される脆弱性 |
CWE-287
不適切な認証 |
CVE-2008-5576 | 2012-12-20 18:52 | 2008-12-15 | Show | GitHub Exploit DB Packet Storm |
Update Date:May 8, 2026, 4:54 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 210521 | 5.5 |
MEDIUM
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar8035_firmware ar8151_firmware | HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr… |
CWE-200
Information Exposure |
CVE-2020-11199 | 2024-11-21 13:57 | 2021-03-17 | Show | GitHub Exploit DB Packet Storm |
| 210522 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8053_firmware apq8064au_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware ar8035_firmware ar8151_firmware<… |
Use after free in GPU driver while mapping the user memory to GPU memory due to improper check of referenced memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consume… |
CWE-416
Use After Free |
CVE-2020-11309 | 2024-11-21 13:57 | 2021-03-17 | Show | GitHub Exploit DB Packet Storm |
| 210523 | 6.8 |
MEDIUM
Physics |
qualcomm |
apq8009_firmware aqt1000_firmware ar8031_firmware ar8035_firmware ar8151_firmware csra6620_firmware csra6640_firmware csrb31024_firmware fsm10055_firmware fsm10056_firmware… |
Buffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size is more than required in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu… |
CWE-129
Improper Validation of Array Index |
CVE-2020-11308 | 2024-11-21 13:57 | 2021-03-17 | Show | GitHub Exploit DB Packet Storm |
| 210524 | 9.1 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar6003_firmware ar8151_firmware | Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr… |
CWE-125
Out-of-bounds Read |
CVE-2020-11166 | 2024-11-21 13:57 | 2021-03-17 | Show | GitHub Exploit DB Packet Storm |
| 210525 | 6.8 |
MEDIUM
Physics |
qualcomm |
apq8009_firmware apq8053_firmware mdm9206_firmware pm8909_firmware pm8916_firmware pm8953_firmware pmd9607_firmware pmi8952_firmware qca9367_firmware qca9377_firmware sm… |
Integer overflow in boot due to improper length check on arguments received in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2020-11305 | 2024-11-21 13:57 | 2021-03-17 | Show | GitHub Exploit DB Packet Storm |
| 210526 | 6.4 |
MEDIUM
Local |
qualcomm |
aqt1000_firmware fsm10055_firmware pm3003a_firmware pm7150a_firmware pm7150l_firmware pm7250_firmware pm7250b_firmware pm7350c_firmware pm8004_firmware pm8008_firmware p… |
Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it exposes a physical address to user land in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition |
CVE-2020-11230 | 2024-11-21 13:57 | 2021-03-17 | Show | GitHub Exploit DB Packet Storm |
| 210527 | 7.8 |
HIGH
Local |
qualcomm |
aqt1000_firmware ar8035_firmware pm4125_firmware pm4250_firmware pm6125_firmware pm6150_firmware pm6150a_firmware pm6150l_firmware pm6350_firmware pm640a_firmware pm640l… |
Part of RPM region was not protected from xblSec itself due to improper policy and leads to unprivileged access in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IO… |
NVD-CWE-noinfo
|
CVE-2020-11228 | 2024-11-21 13:57 | 2021-03-17 | Show | GitHub Exploit DB Packet Storm |
| 210528 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8053_firmware apq8064au_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware ar8151_firmware csra6620_firmwar… |
Buffer overflow can occur in video while playing the non-standard clip in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon … |
CWE-120
Classic Buffer Overflow |
CVE-2020-11299 | 2024-11-21 13:57 | 2021-03-17 | Show | GitHub Exploit DB Packet Storm |
| 210529 | 7.0 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8053_firmware aqt1000_firmware ar8031_firmware csra6620_firmware csra6640_firmware csrb31024_firmware fsm10055_firmwa… |
Use after free condition in msm ioctl events due to race between the ioctl register and deregister events in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sna… |
CWE-416
Use After Free |
CVE-2020-11290 | 2024-11-21 13:57 | 2021-03-17 | Show | GitHub Exploit DB Packet Storm |
| 210530 | 7.5 |
HIGH
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar8035_firmware ar8151_firmware | Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Ind… |
CWE-125 CWE-129 Out-of-bounds Read Improper Validation of Array Index |
CVE-2020-11226 | 2024-11-21 13:57 | 2021-03-17 | Show | GitHub Exploit DB Packet Storm |