Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 1, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 227241 | 4.3 | 警告 | Tiki Software Community Association | - | TikiWiki の tiki-edit_article.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-1047 | 2012-12-20 18:34 | 2008-02-23 | Show | GitHub Exploit DB Packet Storm |
| 227242 | 6.8 | 警告 | quinsonnas | - | Quinsonnas Mail Checker の footer.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2008-1046 | 2012-12-20 18:34 | 2008-02-27 | Show | GitHub Exploit DB Packet Storm |
| 227243 | 7.5 | 危険 | porar | - | PORAR WEBBOARD の question.asp における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-1039 | 2012-12-20 18:34 | 2008-02-27 | Show | GitHub Exploit DB Packet Storm |
| 227244 | 5.8 | 警告 | spyce | - | Spyce - PSP における重要な情報を取得される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2008-0982 | 2012-12-20 18:34 | 2008-02-25 | Show | GitHub Exploit DB Packet Storm |
| 227245 | 6.4 | 警告 | spyce | - | Spyce - PSP の spyce/examples/redirect.spy におけるオープンリダイレクトの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-0981 | 2012-12-20 18:34 | 2008-02-25 | Show | GitHub Exploit DB Packet Storm |
| 227246 | 4.3 | 警告 | spyce | - | Spyce - PSP におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-0980 | 2012-12-20 18:34 | 2008-02-25 | Show | GitHub Exploit DB Packet Storm |
| 227247 | 4.3 | 警告 | webgui | - | Plain Black WebGUI におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-0940 | 2012-12-20 18:34 | 2008-02-25 | Show | GitHub Exploit DB Packet Storm |
| 227248 | 7.5 | 危険 | WordPress.org | - | WordPress 用の WPPA プラグインにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-0939 | 2012-12-20 18:34 | 2008-02-25 | Show | GitHub Exploit DB Packet Storm |
| 227249 | 7.5 | 危険 | the sword project | - | The SWORD Project Diatheke の diatheke.pl における任意のコマンドを実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2008-0932 | 2012-12-20 18:34 | 2008-02-25 | Show | GitHub Exploit DB Packet Storm |
| 227250 | 6.3 | 警告 | xwine | - | Debian GNU/Linux 上で稼動する XWine の w_export.c における任意のコマンドを実行される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2008-0931 | 2012-12-20 18:34 | 2008-03-3 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 2, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 197451 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware apq8098_firmware kamorta_firmware mdm9150_firmware mdm9205_firmware mdm9206_firmware mdm9207c_firmware… |
u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage in operation' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, S… |
CWE-190
Integer Overflow or Wraparound |
CVE-2020-3624 | 2024-11-21 14:31 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 197452 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206 mdm9607 mdm9650 mdm9655 mdm9640 mdm9645 sdx20 sdm630 sdm636 sdm660 msm8937 sdm845 apq8096au msm8996au msm8996 msm8917 msm8998 sdm632 sdm7… |
u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not validated for NULL termination can results into memory corruption' in Snapdragon … |
CWE-787
Out-of-bounds Write |
CVE-2020-3622 | 2024-11-21 14:31 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 197453 | 5.5 |
MEDIUM
Local |
qualcomm |
apq8009_firmware apq8053_firmware apq8096au_firmware apq8098_firmware bitra_firmware kamorta_firmware mdm9206_firmware mdm9150_firmware mdm9607_firmware mdm9640_firmware
u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption and potential information leakage' in Sna…
|
CWE-20 |
CWE-787 Improper Input Validation Out-of-bounds Write
CVE-2020-3621
|
2024-11-21 14:31 |
2020-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 197454 | 5.5 |
MEDIUM
Local |
qualcomm |
apq8009_firmware apq8053_firmware apq8096au_firmware apq8098_firmware bitra_firmware kamorta_firmware mdm9206_firmware mdm9150_firmware mdm9607_firmware mdm9640_firmware
u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to corruption and potential information leak' in Snapdragon Au…
|
CWE-190
|
Integer Overflow or Wraparound
CVE-2020-3620
|
2024-11-21 14:31 |
2020-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 197455 | 7.0 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8098_firmware ipq8074_firmware kamorta_firmware mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9650_firmware
u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to privilege escalation or memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv…
|
CWE-787 |
CWE-367 Out-of-bounds Write Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2020-3619
|
2024-11-21 14:31 |
2020-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 197456 | 7.8 |
HIGH
Local |
qualcomm |
apq8098_firmware kamorta_firmware msm8998_firmware qcs404_firmware qcs605_firmware sda660_firmware sda845_firmware sdm630_firmware sdm636_firmware sdm660_firmware sdm670… |
u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access issue' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, … |
NVD-CWE-noinfo
|
CVE-2020-3611 | 2024-11-21 14:31 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 197457 | 6.5 |
MEDIUM
Network |
cisco | jabber | A vulnerability in Cisco Jabber software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of message contents. An… |
CWE-20
Improper Input Validation |
CVE-2020-3498 | 2024-11-21 14:31 | 2020-09-4 | Show | GitHub Exploit DB Packet Storm |
| 197458 | 6.8 |
MEDIUM
Adjacent |
cisco |
rv340w_firmware rv340_firmware rv345_firmware rv345p_firmware |
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute ar… |
CWE-20
Improper Input Validation |
CVE-2020-3453 | 2024-11-21 14:31 | 2020-09-4 | Show | GitHub Exploit DB Packet Storm |
| 197459 | 4.7 |
MEDIUM
Network |
cisco |
rv340w_firmware rv340_firmware rv345_firmware rv345p_firmware |
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute ar… |
CWE-20
Improper Input Validation |
CVE-2020-3451 | 2024-11-21 14:31 | 2020-09-4 | Show | GitHub Exploit DB Packet Storm |
| 197460 | 6.5 |
MEDIUM
Network |
cisco | asyncos | A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA), Cisco Content Security Management Appliance (SMA), and Cisco Web Security App… |
CWE-522
Insufficiently Protected Credentials |
CVE-2020-3547 | 2024-11-21 14:31 | 2020-09-4 | Show | GitHub Exploit DB Packet Storm |