Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 7, 2026, 2:09 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 227221 | 7.5 | 危険 | phpdmca | - | phpDMCA における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2008-2986 | 2012-12-20 18:52 | 2008-07-2 | Show | GitHub Exploit DB Packet Storm |
| 227222 | 6.8 | 警告 | tinx cms | - | TinX/cms におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-2976 | 2012-12-20 18:52 | 2008-07-2 | Show | GitHub Exploit DB Packet Storm |
| 227223 | 4.3 | 警告 | tinx cms | - | TinX/cms の admin/objects/obj_image.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-2975 | 2012-12-20 18:52 | 2008-07-2 | Show | GitHub Exploit DB Packet Storm |
| 227224 | 7.5 | 危険 | yektaweb | - | AWT YEKTA におけるセッションをハイジャックされる脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2008-2970 | 2012-12-20 18:52 | 2008-07-2 | Show | GitHub Exploit DB Packet Storm |
| 227225 | 5 | 警告 | yektaweb | - | AWT YEKTA の download.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-2969 | 2012-12-20 18:52 | 2008-07-2 | Show | GitHub Exploit DB Packet Storm |
| 227226 | 7.5 | 危険 | yektaweb | - | AWT YEKTA の rating.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-2968 | 2012-12-20 18:52 | 2008-07-2 | Show | GitHub Exploit DB Packet Storm |
| 227227 | 4.3 | 警告 | yektaweb | - | AWT YEKTA におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-2967 | 2012-12-20 18:52 | 2008-07-2 | Show | GitHub Exploit DB Packet Storm |
| 227228 | 7.5 | 危険 | researchguide | - | ResearchGuide の guide.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-2964 | 2012-12-20 18:52 | 2008-07-2 | Show | GitHub Exploit DB Packet Storm |
| 227229 | 2.6 | 注意 | The phpMyAdmin Project | - | phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-2960 | 2012-12-20 18:52 | 2008-06-23 | Show | GitHub Exploit DB Packet Storm |
| 227230 | 5.8 | 警告 | Edgewall Software | - | Trac の検索スクリプトにおけるオープンリダイレクトの脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2008-2951 | 2012-12-20 18:52 | 2008-07-27 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 7, 2026, 4:22 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 223561 | 7.1 |
HIGH
Local |
qualcomm |
kamorta_firmware mdm9205_firmware nicobar_firmware qcs404_firmware qcs405_firmware qcs605_firmware rennell_firmware sa415m_firmware sa6155p_firmware sc7180_firmware sc81… |
Out of bound read in in fingerprint application due to requested data assigned to a local buffer without length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu… |
CWE-125
Out-of-bounds Read |
CVE-2019-14042 | 2024-11-21 13:25 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 223562 | 7.1 |
HIGH
Local |
qualcomm |
apq8053_firmware apq8098_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8905_firmware msm8909w_firmware msm8917_firmware<… |
Out of bound read in adm call back function due to incorrect boundary check for payload in command response in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… |
CWE-125
Out-of-bounds Read |
CVE-2019-14039 | 2024-11-21 13:25 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 223563 | 7.1 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8053_firmware apq8098_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8905_firmware msm8909w_firmware<… |
Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in command response in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, … |
CWE-20 CWE-125 Improper Input Validation Out-of-bounds Read |
CVE-2019-14038 | 2024-11-21 13:25 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 223564 | 9.1 |
CRITICAL
Network |
qualcomm |
apq8053_firmware apq8096_firmware apq8096au_firmware apq8098_firmware mdm9150_firmware mdm9205_firmware mdm9206_firmware mdm9607_firmware mdm9615_firmware mdm9625_firmware<… |
Multiple Read overflows issue due to improper length check while decoding tau reject/tau accept/detach request/attach reject/attach accept in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer … |
CWE-125
Out-of-bounds Read |
CVE-2019-14033 | 2024-11-21 13:25 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |
| 223565 | 7.5 |
HIGH
Network |
qualcomm |
apq8096au_firmware mdm9205_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8905_firmware msm8909_firmware msm8917_firmware msm8920_firmware<… |
Error occurs While extracting the ipv6_header having an invalid length due to lack of length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrag… |
CWE-617
Reachable Assertion |
CVE-2019-14022 | 2024-11-21 13:25 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |
| 223566 | 7.8 |
HIGH
Local |
qualcomm |
apq8096au_firmware apq8098_firmware mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8905_firmware msm8909_firmware msm8909w_firmware… |
Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filename length and payload size received in Snapdragon Auto, Snapdragon Compute, Sn… |
CWE-120
Classic Buffer Overflow |
CVE-2019-14021 | 2024-11-21 13:25 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |
| 223567 | 9.1 |
CRITICAL
Network |
qualcomm |
apq8053_firmware apq8076_firmware apq8096_firmware apq8096au_firmware apq8098_firmware mdm9150_firmware mdm9205_firmware mdm9206_firmware mdm9607_firmware mdm9615_firmware<… |
Multiple Read overflows issue due to improper length check while decoding dedicated_eps_bearer_req/ act_def_context_req/ cs_serv_notification/ emm_info/ guti_realloc_cmd in Snapdragon Auto, Snapdrago… |
CWE-125
Out-of-bounds Read |
CVE-2019-14020 | 2024-11-21 13:25 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |
| 223568 | 9.1 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8053_firmware apq8076_firmware apq8096_firmware apq8096au_firmware apq8098_firmware mdm9150_firmware mdm9205_firmware mdm9206_firmware mdm9207c_firmware… |
Multiple Read overflows issue due to improper length check while decoding RAU accept/PDN disconnect Rej/Modify EPS ctxt req/bearer resource alloc Rej/Deact EPs bearer REq in Snapdragon Auto, Snapdrag… |
CWE-125
Out-of-bounds Read |
CVE-2019-14019 | 2024-11-21 13:25 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |
| 223569 | 7.8 |
HIGH
Local |
qualcomm |
apq8053_firmware apq8096_firmware apq8096au_firmware apq8098_firmware mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9625_firmware mdm9635m_firmware mdm9640_firmware… |
Possible out of bound array access as there is no check on carrier index passed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdrag… |
CWE-129
Improper Validation of Array Index |
CVE-2019-14018 | 2024-11-21 13:25 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |
| 223570 | 7.5 |
HIGH
Network |
qualcomm |
msm8905_firmware msm8909_firmware msm8917_firmware msm8920_firmware msm8937_firmware msm8940_firmware msm8953_firmware nicobar_firmware qcm2150_firmware qm215_firmware r… |
Possibility of null pointer deference as the array of video codecs from media info is referenced without null checking while processing SDP messages in Snapdragon Auto, Snapdragon Compute, Snapdragon… |
CWE-476
NULL Pointer Dereference |
CVE-2019-14012 | 2024-11-21 13:25 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |