Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 14, 2026, 6:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 228081 | 6.8 | 警告 | phpCollab | - | phpCollab における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4303 | 2012-12-20 18:52 | 2008-12-23 | Show | GitHub Exploit DB Packet Storm |
| 228082 | 6.5 | 警告 | rianxosencabos cms | - | Rianxosencabos CMS の Admin Control Panel におけるユーザの権限を変更される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2008-4245 | 2012-12-20 18:52 | 2008-09-25 | Show | GitHub Exploit DB Packet Storm |
| 228083 | 7.5 | 危険 | webcms | - | webCMS Portal Edition の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4185 | 2012-12-20 18:52 | 2008-09-23 | Show | GitHub Exploit DB Packet Storm |
| 228084 | 4.3 | 警告 | webcms | - | webCMS Portal Edition の index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-4184 | 2012-12-20 18:52 | 2008-09-23 | Show | GitHub Exploit DB Packet Storm |
| 228085 | 7.5 | 危険 | PreProject.com | - | Pre Real Estate Listings の search.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4177 | 2012-12-20 18:52 | 2008-09-23 | Show | GitHub Exploit DB Packet Storm |
| 228086 | 7.5 | 危険 | proarcadescript | - | ProArcadeScript における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4173 | 2012-12-20 18:52 | 2008-09-22 | Show | GitHub Exploit DB Packet Storm |
| 228087 | 7.5 | 危険 | rfaah | - | Cars & Vehicle の page.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4172 | 2012-12-20 18:52 | 2008-09-22 | Show | GitHub Exploit DB Packet Storm |
| 228088 | 4.3 | 警告 | pro2col | - | Pro2col Stingray FTS の verify_login.jsp におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-4168 | 2012-12-20 18:52 | 2008-09-22 | Show | GitHub Exploit DB Packet Storm |
| 228089 | 7.5 | 危険 | zanfi solutions | - | Zanfi CMS lite および Jaw Portal の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4159 | 2012-12-20 18:52 | 2008-09-22 | Show | GitHub Exploit DB Packet Storm |
| 228090 | 6.8 | 警告 | zanfi solutions | - | Zanfi CMS lite の index.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-4158 | 2012-12-20 18:52 | 2008-09-22 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 14, 2026, 4 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 224991 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8053_firmware mdm9607_firmware mdm9640_firmware msm8909w_firmware msm8953_firmware qca6574au_firmware qcs605_firmware sda845_firmware sdm429_firmware
Access to the uninitialized variable when the driver tries to unmap the dma buffer of a request which was never mapped in the first place leading to kernel failure in Snapdragon Auto, Snapdragon Comp…
|
CWE-908
|
Use of Uninitialized Resource
CVE-2019-14079
|
2024-11-21 13:26 |
2020-03-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 224992 | 7.0 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8096au_firmware apq8098_firmware mdm9607_firmware msm8909w_firmware msm8939_firmware msm8953_firmware msm8996au_firmware nicobar_firmware qcs405_firmwar… |
Unhandled paging request is observed due to dereferencing an already freed object because of race condition between sparse free and sparse bind ioctls which access the same physical entry in Snapdrag… |
CWE-362 CWE-416 Race Condition Use After Free |
CVE-2019-14072 | 2024-11-21 13:26 | 2020-03-5 | Show | GitHub Exploit DB Packet Storm |
| 224993 | 7.8 |
HIGH
Local |
qualcomm |
apq8017_firmware apq8053_firmware apq8096_firmware apq8096au_firmware ipq6018_firmware mdm9205_firmware msm8917_firmware msm8920_firmware msm8937_firmware msm8940_firmware<… |
Compromised reset handler may bypass access control due to AC config is being reset if debug path is enabled to collect secure or non-secure ram dumps in Snapdragon Auto, Snapdragon Compute, Snapdrag… |
NVD-CWE-noinfo
|
CVE-2019-14071 | 2024-11-21 13:26 | 2020-03-5 | Show | GitHub Exploit DB Packet Storm |
| 224994 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8053_firmware apq8096au_firmware mdm9607_firmware msm8905_firmware msm8909w_firmware nicobar_firmware qcs405_firmware qcs605_firmware rennell_firmware
Out of bound access in msm routing due to lack of check of size before accessing in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdra…
|
CWE-120
|
Classic Buffer Overflow
CVE-2019-14068
|
2024-11-21 13:26 |
2020-03-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 224995 | 7.5 |
HIGH
Network |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8064_firmware apq8096au_firmware apq8098_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware msm8905_firmware… |
Null-pointer dereference can occur while accessing the segment element info when it is not allocated and assigned in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer … |
CWE-476
NULL Pointer Dereference |
CVE-2019-14061 | 2024-11-21 13:26 | 2020-03-5 | Show | GitHub Exploit DB Packet Storm |
| 224996 | 9.8 |
CRITICAL
Network |
microvirt | memu | An issue was discovered in Microvirt MEmu all versions prior to 7.0.2. A guest Android operating system inside the MEmu emulator contains a /system/bin/systemd binary that is run with root privileges… |
CWE-78
OS Command |
CVE-2019-14514 | 2024-11-21 13:26 | 2020-02-11 | Show | GitHub Exploit DB Packet Storm |
| 224997 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware qcs605_firmware sdm429w_firmware sdx24_firmware sm8150_firmware sxr1130_firmware |
Possible use after free issue while CRM is accessing the link pointer from device private data due to lack of resource protection in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snap… |
CWE-416
Use After Free |
CVE-2019-14088 | 2024-11-21 13:26 | 2020-02-7 | Show | GitHub Exploit DB Packet Storm |
| 224998 | 9.1 |
CRITICAL
Network |
qualcomm |
ipq4019_firmware ipq6018_firmware ipq8064_firmware ipq8074_firmware mdm9607_firmware nicobar_firmware qcs405_firmware rennell_firmware sa6155p_firmware saipan_firmware s… |
Out of bound access due to Invalid inputs to dapm mux settings which results into kernel failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… |
CWE-125
Out-of-bounds Read |
CVE-2019-14063 | 2024-11-21 13:26 | 2020-02-7 | Show | GitHub Exploit DB Packet Storm |
| 224999 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8098_firmware ipq4019_firmware ipq6018_firmware ipq8064_firmware ipq8074_firmware mdm9150_firmware mdm9206_firmware
Uninitialized stack data gets used If memory is not allocated for blob or if the allocated blob is less than the struct size required due to lack of check of return value for read or write blob in Sn…
|
CWE-824
|
Access of Uninitialized Pointer
CVE-2019-14060
|
2024-11-21 13:26 |
2020-02-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 225000 | 9.1 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8064_firmware apq8096au_firmware apq8098_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware msm8905_firmware… |
Buffer Over read of codec private data while parsing an mkv file due to lack of check of buffer size before read in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer I… |
CWE-125
Out-of-bounds Read |
CVE-2019-14057 | 2024-11-21 13:26 | 2020-02-7 | Show | GitHub Exploit DB Packet Storm |