Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 28, 2026, 10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 228131 | 3.5 | 注意 | Open-Xchange | - | Open-Xchange App Suite および Server におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2013-5698 | 2013-09-6 16:11 | 2013-06-3 | Show | GitHub Exploit DB Packet Storm |
| 228132 | 3.5 | 注意 | Open-Xchange | - | Open-Xchange App Suite における他のユーザの電子メールの認証情報を取得される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2013-4790 | 2013-09-6 16:03 | 2013-07-31 | Show | GitHub Exploit DB Packet Storm |
| 228133 | 4.3 | 警告 | Open-Xchange | - | Open-Xchange App Suite および Server におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2013-3106 | 2013-09-6 15:03 | 2013-06-3 | Show | GitHub Exploit DB Packet Storm |
| 228134 | 4.3 | 警告 | Open-Xchange | - | Open-Xchange App Suite および Server におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2013-2583 | 2013-09-6 14:54 | 2013-04-17 | Show | GitHub Exploit DB Packet Storm |
| 228135 | 5 | 警告 | Open-Xchange | - | Open-Xchange App Suite および Server のリダイレクトサーブレットにおける CRLF インジェクションの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2013-2582 | 2013-09-6 14:47 | 2013-04-17 | Show | GitHub Exploit DB Packet Storm |
| 228136 | 5.8 | 警告 | DELL EMC (旧 EMC Corporation) | - | EMC RSA Archer GRC におけるオープンリダイレクトの脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2013-3277 | 2013-09-6 12:06 | 2013-09-3 | Show | GitHub Exploit DB Packet Storm |
| 228137 | 6.8 | 警告 | シスコシステムズ | - | Cisco Global Site Selector の Web フレームワークにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2013-5471 | 2013-09-6 11:49 | 2013-09-4 | Show | GitHub Exploit DB Packet Storm |
| 228138 | 6.8 | 警告 | ShareThis | - | WordPress 用 ShareThis プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2013-3479 | 2013-09-6 11:44 | 2013-08-27 | Show | GitHub Exploit DB Packet Storm |
| 228139 | 4.3 | 警告 | シスコシステムズ | - | Cisco Prime NCS および Cisco WCS にクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-5990 | 2013-09-5 19:40 | 2013-09-3 | Show | GitHub Exploit DB Packet Storm |
| 228140 | 5 | 警告 | シスコシステムズ | - | Cisco Secure Access Control System におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2013-5470 | 2013-09-5 12:09 | 2013-09-4 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 28, 2026, 4:01 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 203701 | 7.5 |
HIGH
Network |
sonicwall |
sma_200_firmware sma_210_firmware sma_410_firmware sma_400_firmware sma_500v_firmware |
A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload crafted web pages or files as a 'nobody' user. This vulnerability affected SMA … |
CWE-22
Path Traversal |
CVE-2021-20040 | 2024-11-21 14:45 | 2021-12-8 | Show | GitHub Exploit DB Packet Storm |
| 203702 | 8.8 |
HIGH
Network |
sonicwall |
sma_200_firmware sma_210_firmware sma_410_firmware sma_400_firmware sma_500v_firmware |
Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' u… |
CWE-78
OS Command |
CVE-2021-20039 | 2024-11-21 14:45 | 2021-12-8 | Show | GitHub Exploit DB Packet Storm |
| 203703 | 9.8 |
CRITICAL
Network |
sonicwall |
sma_200_firmware sma_210_firmware sma_410_firmware sma_400_firmware sma_500v_firmware |
A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' use… |
CWE-787
Out-of-bounds Write |
CVE-2021-20038 | 2024-11-21 14:45 | 2021-12-8 | Show | GitHub Exploit DB Packet Storm |
| 203704 | 7.5 |
HIGH
Network |
qualcomm |
ar8035_firmware qca6390_firmware qca6391_firmware qca6421_firmware qca6426_firmware qca6431_firmware qca6436_firmware qca6574a_firmware qca6574au_firmware qca6595au_firmwar… |
Possible denial of service scenario due to improper input validation of received NAS OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon I… |
CWE-617
Reachable Assertion |
CVE-2021-1982 | 2024-11-21 14:45 | 2021-11-12 | Show | GitHub Exploit DB Packet Storm |
| 203705 | 9.1 |
CRITICAL
Network |
qualcomm |
apq8017_firmware ar8035_firmware msm8917_firmware qca6390_firmware qca6391_firmware qca6421_firmware qca6426_firmware qca6431_firmware qca6436_firmware qca6574a_firmware
Possible buffer over read due to improper IE size check of Bearer capability IE in MT setup request from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer I…
|
CWE-125
|
Out-of-bounds Read
CVE-2021-1981
|
2024-11-21 14:45 |
2021-11-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 203706 | 7.8 |
HIGH
Local |
qualcomm |
aqt1000_firmware ar8035_firmware csrb31024_firmware fsm10055_firmware fsm10056_firmware mdm9150_firmware mdm9250_firmware mdm9650_firmware qca6174a_firmware qca6310_firmwar… |
Possible buffer overflow due to improper validation of FTM command payload in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdra… |
CWE-787
Out-of-bounds Write |
CVE-2021-1979 | 2024-11-21 14:45 | 2021-11-12 | Show | GitHub Exploit DB Packet Storm |
| 203707 | 7.0 |
HIGH
Local |
qualcomm |
aqt1000_firmware qca6390_firmware qca6391_firmware qca6420_firmware qca6421_firmware qca6426_firmware qca6430_firmware qca6431_firmware qca6436_firmware qca6574au_firmware<… |
Possible memory corruption due to Improper handling of hypervisor unmap operations for concurrent memory operations in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consume… |
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition |
CVE-2021-1921 | 2024-11-21 14:45 | 2021-11-12 | Show | GitHub Exploit DB Packet Storm |
| 203708 | 7.8 |
HIGH
Local |
qualcomm |
aqt1000_firmware ar8035_firmware csrb31024_firmware qca6174a_firmware qca6390_firmware qca6391_firmware qca6420_firmware qca6421_firmware qca6426_firmware qca6430_firmware<… |
Possible integer overflow can occur due to improper length check while calculating count and grace period in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, S… |
CWE-190
Integer Overflow or Wraparound |
CVE-2021-1912 | 2024-11-21 14:45 | 2021-11-12 | Show | GitHub Exploit DB Packet Storm |
| 203709 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8096au_firmware ar6003_firmware ar8035_firmware csr6030_firmware csrb31024_firmware fsm10055_firmwar… |
Possible heap overflow due to improper length check of domain while parsing the DNS response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indus… |
CWE-787
Out-of-bounds Write |
CVE-2021-1975 | 2024-11-21 14:45 | 2021-11-12 | Show | GitHub Exploit DB Packet Storm |
| 203710 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8064au_firmware apq8096au_firmware aqt1000_firmware ar6003_firmware ar8035_firmware… |
A FTM Diag command can allow an arbitrary write into modem OS space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2021-1973 | 2024-11-21 14:45 | 2021-11-12 | Show | GitHub Exploit DB Packet Storm |