Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 12, 2026, 2:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 227581 | 5 | 警告 | php-daily | - | PHP-Daily の download_file.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-4758 | 2012-12-20 18:52 | 2008-10-27 | Show | GitHub Exploit DB Packet Storm |
| 227582 | 7.5 | 危険 | php-daily | - | PHP-Daily における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4757 | 2012-12-20 18:52 | 2008-10-27 | Show | GitHub Exploit DB Packet Storm |
| 227583 | 4.3 | 警告 | php-daily | - | PHP-Daily の add_prest_date.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-4756 | 2012-12-20 18:52 | 2008-10-27 | Show | GitHub Exploit DB Packet Storm |
| 227584 | 7.5 | 危険 | pozscripts | - | PozScripts Classified Auctions Script の gotourl.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4755 | 2012-12-20 18:52 | 2008-10-27 | Show | GitHub Exploit DB Packet Storm |
| 227585 | 5.8 | 警告 | scripts-for-sites | - | SFS Ez Forum の forum.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4754 | 2012-12-20 18:52 | 2008-10-27 | Show | GitHub Exploit DB Packet Storm |
| 227586 | 7.5 | 危険 | tech logic | - | TlNews における認証を回避される脆弱性 |
CWE-287
不適切な認証 |
CVE-2008-4752 | 2012-12-20 18:52 | 2008-10-27 | Show | GitHub Exploit DB Packet Storm |
| 227587 | 7.5 | 危険 | uniwin | - | Uniwin eCart Professional における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4746 | 2012-12-20 18:52 | 2008-10-27 | Show | GitHub Exploit DB Packet Storm |
| 227588 | 4.3 | 警告 | uniwin | - | Uniwin eCart Professional の emailFriend.asp におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-4745 | 2012-12-20 18:52 | 2008-10-27 | Show | GitHub Exploit DB Packet Storm |
| 227589 | 7.5 | 危険 | quidascript | - | QuidaScript FAQ Management Script の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4743 | 2012-12-20 18:52 | 2008-10-27 | Show | GitHub Exploit DB Packet Storm |
| 227590 | 4.3 | 警告 | timetrex | - | TimeTrex の interface/Login.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-4742 | 2012-12-20 18:52 | 2008-10-27 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 12, 2026, 5:06 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 224391 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8098_firmware ipq6018_firmware kamorta_firmware mdm9150_firmware mdm9205_firmware mdm9607_firmware mdm9650_firmware msm8909_firmware msm8998_firmware
Out of bound memory access while processing ese transmit command due to passing Response buffer received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
|
CWE-704
|
Incorrect Type Conversion or Cast
CVE-2019-14077
|
2024-11-21 13:26 |
2020-06-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 224392 | 5.5 |
MEDIUM
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8096_firmware apq8096au_firmware apq8098_firmware kamorta_firmware mdm9150_firmware mdm9205_firmware mdm9206_firmware<… |
Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing side channel issue. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… |
CWE-203
Information Exposure Through Discrepancy |
CVE-2019-14067 | 2024-11-21 13:26 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 224393 | 7.8 |
HIGH
Local |
qualcomm |
kamorta_firmware mdm9205_firmware mdm9607_firmware nicobar_firmware qcs404_firmware qcs405_firmware rennell_firmware sa6155p_firmware sc7180_firmware sc8180x_firmware sd… |
Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbers or checking Feature ID status in Snapdragon Auto, Snapdragon Compute, Snapdra… |
CWE-190
Integer Overflow or Wraparound |
CVE-2019-14066 | 2024-11-21 13:26 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 224394 | 9.8 |
CRITICAL
Network |
qualcomm |
qcs605_firmware sa6155p_firmware sm8150_firmware |
Buffer over-write when this 0-byte buffer is typecasted to some other structure and hence memory corruption in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in QCS605, SA6155P, SM8150 |
CWE-787
Out-of-bounds Write |
CVE-2019-14132 | 2024-11-21 13:26 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |
| 224395 | 7.8 |
HIGH
Local |
qualcomm |
saipan_firmware sm8150_firmware sm8250_firmware sxr2130_firmware |
Memory failure in SKB if it fails to to add the requested padding to the skb in low memory targets or targets with major memory fragmentation in Snapdragon Auto, Snapdragon Mobile in Saipan, SM8150, … |
CWE-755
Improper Handling of Exceptional Conditions |
CVE-2019-14122 | 2024-11-21 13:26 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |
| 224396 | 7.8 |
HIGH
Local |
qualcomm | ipq6018_firmware | Privilege escalation by using an altered debug policy image can occur as the XPU protecting the debug policy regions are disabled during the crash dump boot flow in Snapdragon Auto, Snapdragon Comput… |
CWE-862
Missing Authorization |
CVE-2019-14116 | 2024-11-21 13:26 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |
| 224397 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware ipq8074_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware… |
Possible integer overflow to buffer overflow in WLAN while parsing nonstandard NAN IE messages. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connec… |
CWE-190 CWE-120 Integer Overflow or Wraparound Classic Buffer Overflow |
CVE-2019-14135 | 2024-11-21 13:26 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |
| 224398 | 9.8 |
CRITICAL
Network |
qualcomm |
ipq8074_firmware qca8081_firmware qcs605_firmware sda845_firmware sdm670_firmware sdm710_firmware sdm845_firmware sdm850_firmware sm6150_firmware sm7150_firmware sm8150_… |
Possible out of bound access in WLAN handler when the received value of length in rx path is shorter than the expected value of country IE in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon I… |
CWE-125
Out-of-bounds Read |
CVE-2019-14134 | 2024-11-21 13:26 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |
| 224399 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8053_firmware apq8096au_firmware msm8998_firmware nicobar_firmware qca6574au_firmware qcs605_firmware rennell_firmware sa6155p_firmware saipan_firmware sc8180x_firmware<… |
Out of bound write can occur in radio measurement request if STA receives multiple invalid rrm measurement request from AP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon … |
CWE-787
Out-of-bounds Write |
CVE-2019-14131 | 2024-11-21 13:26 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |
| 224400 | 7.8 |
HIGH
Local |
qualcomm |
sda845_firmware sdm845_firmware sm8150_firmware |
Kernel was reading the CSL defined reserved field as uint16 instead of uint32 which could lead to memory overflow in Snapdragon Industrial IOT, Snapdragon Mobile in SDA845, SDM845, SM8150 |
CWE-787
Out-of-bounds Write |
CVE-2019-14105 | 2024-11-21 13:26 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |