Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 6, 2026, noon
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 227471 | 4.3 | 警告 | phpcredo | - | PHCDownload の search.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2007-6669 | 2012-12-20 18:34 | 2008-01-7 | Show | GitHub Exploit DB Packet Storm |
| 227472 | 7.5 | 危険 | Zenphoto | - | Zenphoto の rss.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2007-6666 | 2012-12-20 18:34 | 2008-01-4 | Show | GitHub Exploit DB Packet Storm |
| 227473 | 7.5 | 危険 | webportal | - | WebPortal CMS の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2007-6664 | 2012-12-20 18:34 | 2008-01-4 | Show | GitHub Exploit DB Packet Storm |
| 227474 | 7.5 | 危険 | pragmaticutopia | - | Joomla! 用の Pragmatic Utopia PU Arcade コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2007-6663 | 2012-12-20 18:34 | 2008-01-4 | Show | GitHub Exploit DB Packet Storm |
| 227475 | 7.5 | 危険 | xcms | - | XCMS の cpie.php における静的コードを直接挿入する攻撃を実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2007-6652 | 2012-12-20 18:34 | 2008-01-4 | Show | GitHub Exploit DB Packet Storm |
| 227476 | 5 | 警告 | sanybee gallery | - | SanyBee Gallery の index.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2007-6648 | 2012-12-20 18:34 | 2008-01-4 | Show | GitHub Exploit DB Packet Storm |
| 227477 | 7.5 | 危険 | W-Agora | - | w-Agora の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2007-6647 | 2012-12-20 18:34 | 2008-01-4 | Show | GitHub Exploit DB Packet Storm |
| 227478 | 6.8 | 警告 | xml2owl | - | xml2owl の showCode.php における任意のコマンドを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2007-6632 | 2012-12-20 18:34 | 2008-01-3 | Show | GitHub Exploit DB Packet Storm |
| 227479 | 6.8 | 警告 | pnphpbb | - | PNphpBB2 の printview.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2007-6624 | 2012-12-20 18:34 | 2008-01-3 | Show | GitHub Exploit DB Packet Storm |
| 227480 | 5 | 警告 | zeuscms | - | ZeusCMS における絶対パストラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2007-6623 | 2012-12-20 18:34 | 2008-01-3 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 6, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 222851 | 7.8 |
HIGH
Local |
qualcomm |
kamorta_firmware qcs404_firmware rennell_firmware sc7180_firmware sdx55_firmware sm6150_firmware sm7150_firmware sm8250_firmware sxr2130_firmware |
Memory failure in content protection module due to not having pointer within the scope in Snapdragon Auto, Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in Kam… |
CWE-824
Access of Uninitialized Pointer |
CVE-2019-14124 | 2024-11-21 13:26 | 2020-07-30 | Show | GitHub Exploit DB Packet Storm |
| 222852 | 7.8 |
HIGH
Local |
qualcomm |
kamorta_firmware qcs404_firmware rennell_firmware sc7180_firmware sdx55_firmware sm6150_firmware sm7150_firmware sm8250_firmware sxr2130_firmware |
Possible buffer overflow and over read possible due to missing bounds checks for fixed limits if we consider widevine HLOS client as non-trustable in Snapdragon Auto, Snapdragon Compute, Snapdragon M… |
CWE-20 CWE-125 CWE-787 Improper Input Validation Out-of-bounds Read Out-of-bounds Write |
CVE-2019-14123 | 2024-11-21 13:26 | 2020-07-30 | Show | GitHub Exploit DB Packet Storm |
| 222853 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9207c_firmware mdm9607_firmware nicobar_firmware qcs405_firmware sa6155p_firmware sc8180x_firmware sdx55_firmware sm8150_firmware |
Register write via debugfs is disabled by default to prevent register writing via debugfs. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2019-14100 | 2024-11-21 13:26 | 2020-07-30 | Show | GitHub Exploit DB Packet Storm |
| 222854 | 7.1 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8096_firmware apq8096au_firmware apq8098_firmware kamorta_firmware mdm9150_firmware mdm9205_firmware mdm9206_firmware mdm9607_firmware mdm9625_firmware<… |
Out of bounds read can happen in diag event set mask command handler when user provided length in the command request is less than expected length in Snapdragon Auto, Snapdragon Compute, Snapdragon C… |
CWE-125
Out-of-bounds Read |
CVE-2019-14101 | 2024-11-21 13:26 | 2020-07-30 | Show | GitHub Exploit DB Packet Storm |
| 222855 | 7.8 |
HIGH
Local |
qualcomm |
apq8053_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware msm8909w_firmware msm8917_firmware msm8953_firmware nicobar_firmware qcm2150_firmware qcs405_firmware
Device misbehavior may be observed when incorrect offset, length or number of buffers is passed by user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IO…
|
CWE-120
|
Classic Buffer Overflow
CVE-2019-14099
|
2024-11-21 13:26 |
2020-07-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 222856 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware apq8098_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware mdm9650_firmware msm8909w_firmwar… |
Array out of bound access can occur in display module due to lack of bound check on input parcel received in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial I… |
CWE-129
Improper Validation of Array Index |
CVE-2019-14093 | 2024-11-21 13:26 | 2020-07-30 | Show | GitHub Exploit DB Packet Storm |
| 222857 | 5.5 |
MEDIUM
Local |
qualcomm |
mdm9206_firmware mdm9207c_firmware mdm9607_firmware rennell_firmware saipan_firmware sm8150_firmware sm8250_firmware sxr2130_firmware |
System Services exports services without permission protect and can lead to information exposure in Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9207C, MDM9607, Rennell, Saipan, SM8150… |
NVD-CWE-noinfo
|
CVE-2019-14092 | 2024-11-21 13:26 | 2020-06-22 | Show | GitHub Exploit DB Packet Storm |
| 222858 | 7.8 |
HIGH
Local |
qualcomm |
mdm9607_firmware qcs405_firmware rennell_firmware saipan_firmware sc8180x_firmware sdx55_firmware sm8150_firmware sm8250_firmware sxr2130_firmware |
Double free issue in NPU due to lack of resource locking mechanism to avoid race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobil… |
CWE-415 CWE-667 Double Free Improper Locking |
CVE-2019-14091 | 2024-11-21 13:26 | 2020-06-22 | Show | GitHub Exploit DB Packet Storm |
| 222859 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8053_firmware apq8096au_firmware apq8098_firmware ipq6018_firmware ipq8074_firmware kamorta_firmware mdm9150_firmware mdm9205_firmware mdm9206_firmware<… |
Integer overflow in diag command handler when user inputs a large value for number of tasks field in the request packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Con… |
CWE-190
Integer Overflow or Wraparound |
CVE-2019-14094 | 2024-11-21 13:26 | 2020-06-22 | Show | GitHub Exploit DB Packet Storm |
| 222860 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8053_firmware apq8096au_firmware kamorta_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8905_firmware msm8909_firmware msm8917_firmware msm8920_firmware<… |
Out of bound write can happen due to lack of check of array index value while parsing SDP attribute for SAR in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… |
CWE-787 CWE-129 Out-of-bounds Write Improper Validation of Array Index |
CVE-2019-14080 | 2024-11-21 13:26 | 2020-06-22 | Show | GitHub Exploit DB Packet Storm |