Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228271 7.5 危険 Ganeti project - Ganeti の iallocator フレームワークにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-4261 2012-12-20 19:28 2009-12-21 Show GitHub Exploit DB Packet Storm
228272 7.5 危険 truesolution - AlefMentor の cource.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4256 2012-12-20 19:28 2009-12-9 Show GitHub Exploit DB Packet Storm
228273 4.3 警告 youjoomla - Joomla! 用の You!Hostit! におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4255 2012-12-20 19:28 2009-12-9 Show GitHub Exploit DB Packet Storm
228274 5 警告 phpee - PowerPhlogger における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-4254 2012-12-20 19:28 2009-12-9 Show GitHub Exploit DB Packet Storm
228275 4.3 警告 phpee - PowerPhlogger の dspStats.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4253 2012-12-20 19:28 2009-12-9 Show GitHub Exploit DB Packet Storm
228276 6.5 警告 TestLink Development Team - TestLink における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4238 2012-12-20 19:28 2009-12-10 Show GitHub Exploit DB Packet Storm
228277 3.5 注意 TestLink Development Team - TestLink におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4237 2012-12-20 19:28 2009-12-10 Show GitHub Exploit DB Packet Storm
228278 4.3 警告 youjoomla - YJ Whois コンポーネントの modules/mod_yj_whois.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4233 2012-12-20 19:28 2009-12-4 Show GitHub Exploit DB Packet Storm
228279 7.5 危険 ruven pillay - IIPImage Server の FastCGI プログラムにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4230 2012-12-20 19:28 2009-12-8 Show GitHub Exploit DB Packet Storm
228280 4.3 警告 Xfig project - Xfig の u_bound.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-4228 2012-12-20 19:28 2009-12-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
216121 7.5 HIGH
Network 		qualcomm apq8009_firmware
apq8009w_firmware
apq8017_firmware
apq8037_firmware
apq8053_firmware
apq8084_firmware
apq8096au_firmware
aqt1000_firmware
ar8035_firmware
ar8151_firmware 		Out of bound memory read in Data modem while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Ind… CWE-125
CWE-129
Out-of-bounds Read
 Improper Validation of Array Index 		CVE-2020-11226 2024-11-21 13:57 2021-03-17 Show GitHub Exploit DB Packet Storm
216122 9.1 CRITICAL
Network 		qualcomm apq8017_firmware
apq8053_firmware
aqt1000_firmware
ar8035_firmware
csrb31024_firmware
fsm10055_firmware
msm8917_firmware
msm8920_firmware
msm8940_firmware
msm8953_firmware<… 		Buffer over read while processing MT SMS with maximum length due to improper length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industri… CWE-125
Out-of-bounds Read 		CVE-2020-11222 2024-11-21 13:57 2021-03-17 Show GitHub Exploit DB Packet Storm
216123 6.4 MEDIUM
Local 		qualcomm aqt1000_firmware
ar8035_firmware
pm4125_firmware
pm4250_firmware
pm6125_firmware
pm6150_firmware
pm6150a_firmware
pm6150l_firmware
pm6350_firmware
pm640a_firmware
pm640l… 		While processing storage SCM commands there is a time of check or time of use window where a pointer used could be invalid at a specific time while executing the storage SCM call in Snapdragon Auto, … CWE-367
 Time-of-check Time-of-use (TOCTOU) Race Condition 		CVE-2020-11220 2024-11-21 13:57 2021-03-17 Show GitHub Exploit DB Packet Storm
216124 5.5 MEDIUM
Local 		qualcomm csrb31024_firmware
pm3003a_firmware
pm7150a_firmware
pm7150l_firmware
pm7250_firmware
pm7250b_firmware
pm8008_firmware
pm8009_firmware
pm8150a_firmware
pm8150b_firmware
… 		Modem will enter into busy mode in an infinite loop while parsing histogram dimension due to improper validation of input received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sna… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2020-11186 2024-11-21 13:57 2021-03-17 Show GitHub Exploit DB Packet Storm
216125 7.5 HIGH
Network 		qualcomm apq8017_firmware
apq8053_firmware
aqt1000_firmware
ar8035_firmware
csrb31024_firmware
fsm10055_firmware
msm8917_firmware
msm8920_firmware
msm8940_firmware
msm8953_firmware<… 		Denial of service in baseband when NW configures LTE betaOffset-RI-Index due to lack of data validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapd… CWE-617
 Reachable Assertion 		CVE-2020-11218 2024-11-21 13:57 2021-03-17 Show GitHub Exploit DB Packet Storm
216126 9.8 CRITICAL
Network 		qualcomm apq8009_firmware
apq8009w_firmware
apq8017_firmware
apq8037_firmware
apq8053_firmware
apq8096au_firmware
aqt1000_firmware
ar8035_firmware
ar8151_firmware
csr6030_firmware 		Out of bound write while parsing SDP string due to missing check on null termination in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IO… CWE-787
 Out-of-bounds Write 		CVE-2020-11192 2024-11-21 13:57 2021-03-17 Show GitHub Exploit DB Packet Storm
216127 9.1 CRITICAL
Network 		qualcomm apq8009_firmware
apq8009w_firmware
apq8017_firmware
apq8037_firmware
apq8053_firmware
apq8084_firmware
apq8096au_firmware
aqt1000_firmware
ar8035_firmware
ar8151_firmware 		Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sn… CWE-125
Out-of-bounds Read 		CVE-2020-11190 2024-11-21 13:57 2021-03-17 Show GitHub Exploit DB Packet Storm
216128 9.1 CRITICAL
Network 		qualcomm apq8009_firmware
apq8009w_firmware
apq8017_firmware
apq8037_firmware
apq8053_firmware
apq8084_firmware
apq8096au_firmware
aqt1000_firmware
ar8035_firmware
ar8151_firmware 		Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sn… CWE-125
Out-of-bounds Read 		CVE-2020-11189 2024-11-21 13:57 2021-03-17 Show GitHub Exploit DB Packet Storm
216129 9.1 CRITICAL
Network 		qualcomm apq8009_firmware
apq8009w_firmware
apq8017_firmware
apq8037_firmware
apq8053_firmware
apq8084_firmware
apq8096au_firmware
aqt1000_firmware
ar8035_firmware
ar8151_firmware 		Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sn… CWE-125
Out-of-bounds Read 		CVE-2020-11188 2024-11-21 13:57 2021-03-17 Show GitHub Exploit DB Packet Storm
216130 9.1 CRITICAL
Network 		qualcomm apq8009_firmware
apq8009w_firmware
apq8017_firmware
apq8037_firmware
apq8053_firmware
apq8096au_firmware
aqt1000_firmware
ar6003_firmware
ar8035_firmware
ar8151_firmware 		Buffer over-read can happen while parsing received SDP values due to lack of NULL termination check on SDP in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sn… CWE-125
Out-of-bounds Read 		CVE-2020-11171 2024-11-21 13:57 2021-03-17 Show GitHub Exploit DB Packet Storm