Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 7, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 227561 | 7.5 | 危険 | sstreamtv | - | Joomla! 用の SSTREAMTV custompages コンポーネントにおける PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2008-1505 | 2012-12-20 18:52 | 2008-03-25 | Show | GitHub Exploit DB Packet Storm |
| 227562 | 4.3 | 警告 | php heaven | - | phpHeaven phpMyChat の setup.php3 におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-1504 | 2012-12-20 18:52 | 2008-03-25 | Show | GitHub Exploit DB Packet Storm |
| 227563 | 4.3 | 警告 | tinyportal | - | TinyPortal の index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-1500 | 2012-12-20 18:52 | 2008-03-25 | Show | GitHub Exploit DB Packet Storm |
| 227564 | 6.8 | 警告 | VideoLAN | - | VLC 用の libmp4.c における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2008-1489 | 2012-12-20 18:52 | 2008-03-24 | Show | GitHub Exploit DB Packet Storm |
| 227565 | 4.3 | 警告 | PunBB | - | PunBB におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-1485 | 2012-12-20 18:52 | 2008-03-24 | Show | GitHub Exploit DB Packet Storm |
| 227566 | 3.5 | 注意 | PunBB | - | PunBB のパスワードリセット機能における新規パスワードを特定される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2008-1484 | 2012-12-20 18:52 | 2008-02-20 | Show | GitHub Exploit DB Packet Storm |
| 227567 | 6.8 | 警告 | Xine | - | xine-lib における整数オーバーフローの脆弱性 |
CWE-119 CWE-189 |
CVE-2008-1482 | 2012-12-20 18:52 | 2008-03-24 | Show | GitHub Exploit DB Packet Storm |
| 227568 | 4.3 | 警告 | webSPELL | - | webSPELL の index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-1481 | 2012-12-20 18:52 | 2008-03-24 | Show | GitHub Exploit DB Packet Storm |
| 227569 | 4.3 | 警告 | s9y | - | S9Y におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-1476 | 2012-12-20 18:52 | 2008-03-18 | Show | GitHub Exploit DB Packet Storm |
| 227570 | 6.4 | 警告 | Roundup | - | Roundup の xml-rpc サーバにおける制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2008-1475 | 2012-12-20 18:52 | 2008-03-24 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 7, 2026, 4:22 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 210241 | 7.4 |
HIGH
Local |
qualcomm |
pm3003a_firmware pm4250_firmware pm6125_firmware pm6150a_firmware pm6150l_firmware pm6350_firmware pm7150a_firmware pm7150l_firmware pm7250_firmware pm7250b_firmware pm7… |
Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during async session in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile |
CWE-362 CWE-416 Race Condition Use After Free |
CVE-2020-11277 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 210242 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8053_firmware apq8076_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware ar8035_firmware csra6620_firmware<… |
Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later can lead to use after free condition in Snapdragon Auto, Snapd… |
CWE-416
Use After Free |
CVE-2020-11272 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 210243 | 7.8 |
HIGH
Local |
qualcomm |
aqt1000_firmware ar8031_firmware ar8035_firmware ar9380_firmware csr8811_firmware csra6620_firmware csra6640_firmware fsm10055_firmware fsm10056_firmware ipq4018_firmware
Possible out of bounds while accessing global control elements due to race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IO…
|
CWE-129
|
Improper Validation of Array Index
CVE-2020-11271
|
2024-11-21 13:57 |
2021-02-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 210244 | 7.8 |
HIGH
Local |
qualcomm |
aqt1000_firmware pm3003a_firmware pm6150_firmware pm6150a_firmware pm6150l_firmware pm6350_firmware pm7150a_firmware pm7150l_firmware pm7250_firmware pm7250b_firmware pm… |
Arbitrary memory write issue in video driver while setting the internal buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Sn… |
CWE-20 CWE-787 Improper Input Validation Out-of-bounds Write |
CVE-2020-11253 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 210245 | 7.8 |
HIGH
Local |
qualcomm |
aqt1000_firmware pm3003a_firmware pm456_firmware pm6150_firmware pm6150a_firmware pm6150l_firmware pm6250_firmware pm6350_firmware pm660_firmware pm660a_firmware pm660l_… |
Out of bound in camera driver due to lack of check of validation of array index before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, S… |
CWE-120
Classic Buffer Overflow |
CVE-2020-11223 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 210246 | 6.7 |
MEDIUM
Local |
qualcomm |
aqt1000_firmware ar8031_firmware ar8035_firmware csr8811_firmware csra6620_firmware csra6640_firmware csrb31024_firmware fsm10055_firmware fsm10056_firmware ipq6000_firmwar… |
Key material used for TZ diag buffer encryption and other data related to log buffer is not wiped securely due to improper usage of memset in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… |
CWE-212
Improper Removal of Sensitive Information Before Storage or Transfer |
CVE-2020-11198 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 210247 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8016_firmware apq8064au_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware ar8035_firmware csra6620_firmware csra6640_firmware csrb31024_firmw… |
Out of bound write and read in TA while processing command from NS side due to improper length check on command and response buffers in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, S… |
CWE-20 CWE-125 CWE-787 Improper Input Validation Out-of-bounds Read Out-of-bounds Write |
CVE-2020-11195 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 210248 | 7.8 |
HIGH
Local |
qualcomm |
aqt1000_firmware ar8035_firmware pm3003a_firmware pm4125_firmware pm4250_firmware pm456_firmware pm6125_firmware pm6150_firmware pm6150a_firmware pm6150l_firmware pm6250… |
Possible out of bound access in TA while processing a command from NS side due to improper length check of response buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon … |
CWE-119 CWE-20 Incorrect Access of Indexable Resource ('Range Error') Improper Input Validation |
CVE-2020-11194 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 210249 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9650 sdm630 ipq4019 qca6574au qca6584au apq8096au msm8996au ipq8064 qca9980 qca9558 qca9880 qca9886 qca6574 qca6564 sd835 sd845 ipq8074 qcn5502
Out of bound access in WLAN driver due to lack of validation of array length before copying into array in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics…
|
CWE-787 |
CWE-120 Out-of-bounds Write Classic Buffer Overflow
CVE-2020-11225
|
2024-11-21 13:57 |
2021-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 210250 | 7.8 |
HIGH
Local |
qualcomm |
qca6390 qcm4290 qcs4290 sdx55m sm4125 sm7250p sd660 pm3003a pm4125 pm6125 pm6150a pm6150l pm6350 pm660 pm660a pm660l pm7150a pm7150l pm7250 pm… |
A possible double free or invalid memory access in audio driver while reading Speaker Protection parameters in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile |
CWE-415
Double Free |
CVE-2020-11217 | 2024-11-21 13:57 | 2021-01-21 | Show | GitHub Exploit DB Packet Storm |