Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 24, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 227641 | 4.3 | 警告 | php directory source | - | phpDirectorySource の search.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4681 | 2012-12-20 19:28 | 2010-03-10 | Show | GitHub Exploit DB Packet Storm |
| 227642 | 7.5 | 危険 | php directory source | - | phpDirectorySource の search.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4680 | 2012-12-20 19:28 | 2010-03-10 | Show | GitHub Exploit DB Packet Storm |
| 227643 | 4.3 | 警告 | Winn GuestBook | - | Winn Guestbook におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4678 | 2012-12-20 19:28 | 2010-03-8 | Show | GitHub Exploit DB Packet Storm |
| 227644 | 6.5 | 警告 | phpmember | - | WebMember の form.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4667 | 2012-12-20 19:28 | 2010-03-5 | Show | GitHub Exploit DB Packet Storm |
| 227645 | 7.5 | 危険 | qualityunit | - | Webradev Download Protect における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-4666 | 2012-12-20 19:28 | 2010-03-5 | Show | GitHub Exploit DB Packet Storm |
| 227646 | 9.3 | 危険 | quiksoft | - | Quiksoft EasyMail Objects ActiveX コントロールにおけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2009-4663 | 2012-12-20 19:28 | 2010-03-3 | Show | GitHub Exploit DB Packet Storm |
| 227647 | 7.5 | 危険 | templateplaza | - | Joomla! 用の tpdugg コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4628 | 2012-12-20 19:28 | 2010-01-18 | Show | GitHub Exploit DB Packet Storm |
| 227648 | 7.5 | 危険 | phpnagios | - | phpNagios の menu.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2009-4626 | 2012-12-20 19:28 | 2010-01-18 | Show | GitHub Exploit DB Packet Storm |
| 227649 | 7.5 | 危険 | Tamlyn Creative Pty | - | Joomla! 用の bfsurvey コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4625 | 2012-12-20 19:28 | 2010-01-18 | Show | GitHub Exploit DB Packet Storm |
| 227650 | 7.5 | 危険 | Plohni | - | Advanced Comment System における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-4623 | 2012-12-20 19:28 | 2010-01-18 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 24, 2026, 4:05 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 221371 | 5.5 |
MEDIUM
Local |
qualcomm |
mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9635m_firmware mdm9640_firmware mdm9650_firmware mdm9655_firmware msm8996au_firmware qcs404_firmware qcs605_firmware
Sanity checks are missing in layout which can lead to SUI Corruption or can lead to Denial of Service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics …
|
CWE-129
|
Improper Validation of Array Index
CVE-2019-2239
|
2024-11-21 13:40 |
2019-07-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 221372 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9650_firmware mdm9655_firmware qcs605_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_410_firmware sd_412_firmware sd_67… |
Lack of check of data type can lead to subsequent loop-expression potentially go negative and the condition will still evaluate to true leading to buffer underflow. in Snapdragon Auto, Snapdragon Com… |
CWE-787
Out-of-bounds Write |
CVE-2019-2238 | 2024-11-21 13:40 | 2019-07-26 | Show | GitHub Exploit DB Packet Storm |
| 221373 | 5.5 |
MEDIUM
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9650_firmware mdm9655_firmware qcs605_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_410_firmware sd_412_firmware sd_67… |
Failure in taking appropriate action to handle the error case If keypad gpio deactivation fails leads to silent failure scenario and subsequent logic gets executed everytime in Snapdragon Auto, Snapd… |
CWE-388
7PK - Errors |
CVE-2019-2237 | 2024-11-21 13:40 | 2019-07-26 | Show | GitHub Exploit DB Packet Storm |
| 221374 | 5.5 |
MEDIUM
Local |
qualcomm |
ipq8074_firmware mdm9206_firmware mdm9607_firmware mdm9650_firmware mdm9655_firmware msm8996au_firmware qca8081_firmware qcs605_firmware qualcomm_215_firmware sd_410_firmwa… |
Null pointer dereference during secure application termination using specific application ids. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connect… |
CWE-476
NULL Pointer Dereference |
CVE-2019-2236 | 2024-11-21 13:40 | 2019-07-26 | Show | GitHub Exploit DB Packet Storm |
| 221375 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9650_firmware mdm9655_firmware msm8996au_firmware qcs404_firmware qcs605_firmware qualcomm_215_firmware sd_410_firmware sd_412_firmware… |
Buffer overflow occurs when emulated RPMB is used due to sector size assumptions in the TA rollback protection logic. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2019-2235 | 2024-11-21 13:40 | 2019-07-26 | Show | GitHub Exploit DB Packet Storm |
| 221376 | 5.4 |
MEDIUM
Network |
oracle | database_server | Vulnerability in the Application Express component of Oracle Database Server. Supported versions that are affected are 5.1 and 18.2. Easily exploitable vulnerability allows low privileged attacker ha… |
NVD-CWE-noinfo
|
CVE-2019-2484 | 2024-11-21 13:40 | 2019-07-24 | Show | GitHub Exploit DB Packet Storm |
| 221377 | 7.8 |
HIGH
Local |
qualcomm |
mdm9150_firmware mdm9650_firmware msm8996au_firmware qca6574au_firmware qcs405_firmware qcs605_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_425_firmware s… |
Out of bound access can occur due to buffer copy without checking size of input received from WLAN firmware in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, … |
CWE-787
Out-of-bounds Write |
CVE-2019-2292 | 2024-11-21 13:40 | 2019-07-22 | Show | GitHub Exploit DB Packet Storm |
| 221378 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware qca6574au_firmware qcs405_firmware qcs605_firmware… |
Improper validation for inputs received from firmware can lead to an out of bound write issue in video driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial I… |
CWE-787
Out-of-bounds Write |
CVE-2019-2287 | 2024-11-21 13:40 | 2019-07-22 | Show | GitHub Exploit DB Packet Storm |
| 221379 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9150_firmware mdm9607_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware qca6574au_firmware qcs405_firmware qcs605_firmware qualcomm_215_firmware sd_210_firm… |
Shared memory gets updated with invalid data and may lead to access beyond the allocated memory. in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd… |
CWE-787
Out-of-bounds Write |
CVE-2019-2279 | 2024-11-21 13:40 | 2019-07-22 | Show | GitHub Exploit DB Packet Storm |
| 221380 | 7.8 |
HIGH
Local |
qualcomm |
msm8996au_firmware qcs405_firmware qcs605_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_425_firmware sd_427_firmware sd_430_firmware sd_435_firmware sd_450… |
Out of bound read can happen due to lack of NULL termination on user controlled data in WLAN in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mob… |
CWE-125
Out-of-bounds Read |
CVE-2019-2277 | 2024-11-21 13:40 | 2019-07-22 | Show | GitHub Exploit DB Packet Storm |