Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 6, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 227141 | 4.3 | 警告 | php heaven | - | phpHeaven phpMyChat の setup.php3 におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-1504 | 2012-12-20 18:52 | 2008-03-25 | Show | GitHub Exploit DB Packet Storm |
| 227142 | 4.3 | 警告 | tinyportal | - | TinyPortal の index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-1500 | 2012-12-20 18:52 | 2008-03-25 | Show | GitHub Exploit DB Packet Storm |
| 227143 | 6.8 | 警告 | VideoLAN | - | VLC 用の libmp4.c における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2008-1489 | 2012-12-20 18:52 | 2008-03-24 | Show | GitHub Exploit DB Packet Storm |
| 227144 | 4.3 | 警告 | PunBB | - | PunBB におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-1485 | 2012-12-20 18:52 | 2008-03-24 | Show | GitHub Exploit DB Packet Storm |
| 227145 | 3.5 | 注意 | PunBB | - | PunBB のパスワードリセット機能における新規パスワードを特定される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2008-1484 | 2012-12-20 18:52 | 2008-02-20 | Show | GitHub Exploit DB Packet Storm |
| 227146 | 6.8 | 警告 | Xine | - | xine-lib における整数オーバーフローの脆弱性 |
CWE-119 CWE-189 |
CVE-2008-1482 | 2012-12-20 18:52 | 2008-03-24 | Show | GitHub Exploit DB Packet Storm |
| 227147 | 4.3 | 警告 | webSPELL | - | webSPELL の index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-1481 | 2012-12-20 18:52 | 2008-03-24 | Show | GitHub Exploit DB Packet Storm |
| 227148 | 4.3 | 警告 | s9y | - | S9Y におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-1476 | 2012-12-20 18:52 | 2008-03-18 | Show | GitHub Exploit DB Packet Storm |
| 227149 | 6.4 | 警告 | Roundup | - | Roundup の xml-rpc サーバにおける制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2008-1475 | 2012-12-20 18:52 | 2008-03-24 | Show | GitHub Exploit DB Packet Storm |
| 227150 | 4.3 | 警告 | Roundup | - | Roundup における脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-1474 | 2012-12-20 18:52 | 2008-03-24 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 7, 2026, 4:22 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 223211 | 5.5 |
MEDIUM
Local |
qualcomm |
mdm9206_firmware mdm9207c_firmware mdm9607_firmware rennell_firmware saipan_firmware sm8150_firmware sm8250_firmware sxr2130_firmware |
System Services exports services without permission protect and can lead to information exposure in Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9207C, MDM9607, Rennell, Saipan, SM8150… |
NVD-CWE-noinfo
|
CVE-2019-14092 | 2024-11-21 13:26 | 2020-06-22 | Show | GitHub Exploit DB Packet Storm |
| 223212 | 7.8 |
HIGH
Local |
qualcomm |
mdm9607_firmware qcs405_firmware rennell_firmware saipan_firmware sc8180x_firmware sdx55_firmware sm8150_firmware sm8250_firmware sxr2130_firmware |
Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil… |
CWE-415 CWE-667 Double Free Improper Locking |
CVE-2019-14091 | 2024-11-21 13:26 | 2020-06-22 | Show | GitHub Exploit DB Packet Storm |
| 223213 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8053_firmware apq8096au_firmware apq8098_firmware ipq6018_firmware ipq8074_firmware kamorta_firmware mdm9150_firmware mdm9205_firmware mdm9206_firmware<… |
Integer overflow in diag command handler when user inputs a large value for number of tasks field in the request packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Con… |
CWE-190
Integer Overflow or Wraparound |
CVE-2019-14094 | 2024-11-21 13:26 | 2020-06-22 | Show | GitHub Exploit DB Packet Storm |
| 223214 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8053_firmware apq8096au_firmware kamorta_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8905_firmware msm8909_firmware msm8917_firmware msm8920_firmware<… |
Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… |
CWE-787 CWE-129 Out-of-bounds Write Improper Validation of Array Index |
CVE-2019-14080 | 2024-11-21 13:26 | 2020-06-22 | Show | GitHub Exploit DB Packet Storm |
| 223215 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8098_firmware kamorta_firmware mdm9150_firmware mdm9205_firmware mdm9206_firmware mdm9607_firmware mdm9650_firmware msm8905_firmware msm8909_firmware
Buffer overflow occurs while processing an subsample data length out of range due to lack of user input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
|
CWE-120
|
Classic Buffer Overflow
CVE-2019-14076
|
2024-11-21 13:26 |
2020-06-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 223216 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8076_firmware apq8096_firmware apq8096au_firmware apq8098_firmware kamorta_firmware mdm9150_firmware mdm9206_firmware<… |
Copying RTCP messages into the output buffer without checking the destination buffer size which could lead to a remote stack overflow when processing large data or non-standard feedback messages in S… |
CWE-787
Out-of-bounds Write |
CVE-2019-14073 | 2024-11-21 13:26 | 2020-06-22 | Show | GitHub Exploit DB Packet Storm |
| 223217 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8076_firmware apq8096_firmware apq8096au_firmware apq8098_firmware kamorta_firmware mdm9150_firmware mdm9205_firmware<… |
Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon … |
CWE-120
Classic Buffer Overflow |
CVE-2019-14062 | 2024-11-21 13:26 | 2020-06-22 | Show | GitHub Exploit DB Packet Storm |
| 223218 | 7.8 |
HIGH
Local |
qualcomm |
msm8909w_firmware qcs605_firmware |
Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8909W, QCS605 |
CWE-416
Use After Free |
CVE-2019-14087 | 2024-11-21 13:26 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 223219 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8098_firmware msm8909_firmware msm8998_firmware sda660_firmware sda845_firmware sdm630_firmware sdm636_firmware sdm660_firmware sdm845_firmware |
Out of bound memory access while processing qpay due to not validating length of the response buffer provided by User. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indu… |
CWE-131
Incorrect Calculation of Buffer Size |
CVE-2019-14078 | 2024-11-21 13:26 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 223220 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8098_firmware ipq6018_firmware kamorta_firmware mdm9150_firmware mdm9205_firmware mdm9607_firmware mdm9650_firmware msm8909_firmware msm8998_firmware
Out of bound memory access while processing ese transmit command due to passing Response buffer received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
|
CWE-704
|
Incorrect Type Conversion or Cast
CVE-2019-14077
|
2024-11-21 13:26 |
2020-06-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|