Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 4, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 227501 | 7.5 | 危険 | websihirbazi | - | websihirbazi における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2007-6556 | 2012-12-20 18:34 | 2007-12-27 | Show | GitHub Exploit DB Packet Storm |
| 227502 | 7.5 | 危険 | pmos helpdesk | - | PMOS Help Desk の form.php における任意の PHP コードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2007-6550 | 2012-12-20 18:34 | 2007-12-27 | Show | GitHub Exploit DB Packet Storm |
| 227503 | 7.5 | 危険 | runcms | - | RunCMS における脆弱性 |
CWE-DesignError
|
CVE-2007-6549 | 2012-12-20 18:34 | 2007-12-27 | Show | GitHub Exploit DB Packet Storm |
| 227504 | 7.5 | 危険 | runcms | - | RunCMS における任意の PHP コード挿入される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2007-6548 | 2012-12-20 18:34 | 2007-12-27 | Show | GitHub Exploit DB Packet Storm |
| 227505 | 6.8 | 警告 | runcms | - | RunCMS におけるパスワードを変更される脆弱性 |
CWE-DesignError
|
CVE-2007-6547 | 2012-12-20 18:34 | 2007-12-27 | Show | GitHub Exploit DB Packet Storm |
| 227506 | 6.4 | 警告 | runcms | - | RunCMS におけるセッションをハイジャックされる脆弱性 |
CWE-DesignError
|
CVE-2007-6546 | 2012-12-20 18:34 | 2007-12-27 | Show | GitHub Exploit DB Packet Storm |
| 227507 | 4.3 | 警告 | runcms | - | RunCMS におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2007-6545 | 2012-12-20 18:34 | 2007-12-27 | Show | GitHub Exploit DB Packet Storm |
| 227508 | 7.5 | 危険 | runcms | - | RunCMS における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2007-6544 | 2012-12-20 18:34 | 2007-12-27 | Show | GitHub Exploit DB Packet Storm |
| 227509 | 6.8 | 警告 | winuae | - | WinUAE の zfile.c におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2007-6537 | 2012-12-20 18:34 | 2007-12-27 | Show | GitHub Exploit DB Packet Storm |
| 227510 | 6.8 | 警告 | ヤフー株式会社 | - | Yahoo! Toolbar の YShortcut.dll におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2007-6535 | 2012-12-20 18:34 | 2007-12-27 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 5, 2026, 4:51 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 223011 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware apq8098_firmware mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9615_firmware mdm9625_firmware<… |
u'Accessing an uninitialized data structure could result in partially copying of contents and thus incorrect processing' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon In… |
CWE-908
Use of Uninitialized Resource |
CVE-2019-14052 | 2024-11-21 13:25 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 223012 | 5.5 |
MEDIUM
Local |
qualcomm |
kamorta_firmware qcs404_firmware qcs610_firmware rennell_firmware sc7180_firmware sdx55_firmware sm6150_firmware sm7150_firmware sm8250_firmware sxr2130_firmware |
u'When a new session is created, Object is returned that contains TZ addresses and it get passed to HLOS as an handle to refer to a particular session and can cause TZ to jump to a invalid address' i… |
NVD-CWE-noinfo
|
CVE-2019-14025 | 2024-11-21 13:25 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 223013 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware apq8098_firmware ipq6018_firmware ipq8074_firmware kamorta_firmware mdm9150_firmware mdm9205_firmware<… |
u'Lack of check for integer overflow for round up and addition operations result into memory corruption and potential information leakage' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… |
CWE-787 CWE-190 Out-of-bounds Write Integer Overflow or Wraparound |
CVE-2019-13999 | 2024-11-21 13:25 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 223014 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware apq8098_firmware bitra_firmware ipq6018_firmware ipq8074_firmware kamorta_firmware mdm9150_firmware
u'Lack of check that the TX FIFO write and read indices that are read from shared RAM are less than the FIFO size results into memory corruption and potential information leakage' in Snapdragon Auto,…
|
CWE-787 |
CWE-190 Out-of-bounds Write Integer Overflow or Wraparound
CVE-2019-13998
|
2024-11-21 13:25 |
2020-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 223015 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware apq8098_firmware bitra_firmware ipq6018_firmware ipq8074_firmware kamorta_firmware mdm9150_firmware
u'Lack of integer overflow check for addition of fragment size and remaining size that are read from shared memory can lead to memory corruption and potential information leakage' in Snapdragon Auto,…
|
CWE-787 |
CWE-190 Out-of-bounds Write Integer Overflow or Wraparound
CVE-2019-13995
|
2024-11-21 13:25 |
2020-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 223016 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware apq8098_firmware bitra_firmware ipq6018_firmware ipq8074_firmware kamorta_firmware mdm9150_firmware
u'Lack of check that the current received data fragment size of a particular packet that are read from shared memory are less than the actual packet size can lead to memory corruption and potential i…
|
CWE-787 |
CWE-190 Out-of-bounds Write Integer Overflow or Wraparound
CVE-2019-13994
|
2024-11-21 13:25 |
2020-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 223017 | 7.8 |
HIGH
Local |
qualcomm |
bitra_firmware ipq6018_firmware ipq8074_firmware mdm9205_firmware nicobar_firmware qca8081_firmware qcn7605_firmware qcs404_firmware qcs405_firmware qcs605_firmware qcs6… |
u'Out of bound memory access if stack push and pop operation are performed without doing a bound check on stack top' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consum… |
CWE-120
Classic Buffer Overflow |
CVE-2019-13992 | 2024-11-21 13:25 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 223018 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8053_firmware apq8096au_firmware apq8098_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8905_firmware… |
Close and bind operations done on a socket can lead to a Use-After-Free condition. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapd… |
CWE-416
Use After Free |
CVE-2019-14037 | 2024-11-21 13:25 | 2020-07-30 | Show | GitHub Exploit DB Packet Storm |
| 223019 | 7.8 |
HIGH
Local |
qualcomm |
apq8053_firmware apq8096au_firmware mdm9607_firmware msm8909w_firmware msm8996_firmware msm8996au_firmware qcn7605_firmware qcs605_firmware sc8180x_firmware sda845_firmware… |
While IPA driver processes route add rule IOCTL, there is no input validation of the rule ID prior to adding the rule to the IPA HW commit list in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn… |
CWE-20
Improper Input Validation |
CVE-2019-14047 | 2024-11-21 13:25 | 2020-06-22 | Show | GitHub Exploit DB Packet Storm |
| 223020 | 7.8 |
HIGH
Local |
qualcomm |
kamorta_firmware msm8998_firmware qcs404_firmware qcs605_firmware sda660_firmware sda845_firmware sdm630_firmware sdm636_firmware sdm660_firmware sdm670_firmware sdm710_… |
Improper permissions in XBL_SEC region enable user to update XBL_SEC code and data and divert the RAM dump path to normal cold boot path in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Ind… |
NVD-CWE-Other
|
CVE-2019-14054 | 2024-11-21 13:25 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |