Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 1, 2026, 2:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 228401 | 8.5 | 危険 | Fabrice Bellard | - | QEMU の VNC server におけるホストの OS 上で任意のコードを実行される脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2009-3616 | 2012-12-20 19:28 | 2009-10-23 | Show | GitHub Exploit DB Packet Storm |
| 228402 | 9.3 | 危険 | freedesktop.org | - | Poppler の glib/poppler-page.cc における整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2009-3607 | 2012-12-20 19:28 | 2009-10-21 | Show | GitHub Exploit DB Packet Storm |
| 228403 | 4.3 | 警告 | Scriptsez.net | - | Scriptsez Ultimate Poll の demo_page.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-3601 | 2012-12-20 19:28 | 2009-10-8 | Show | GitHub Exploit DB Packet Storm |
| 228404 | 7.5 | 危険 | vspanel | - | VS PANEL の results.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-3595 | 2012-12-20 19:28 | 2009-10-8 | Show | GitHub Exploit DB Packet Storm |
| 228405 | 4.3 | 警告 | qtmsoft | - | Qualiteam X-Cart の customer/home.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-3592 | 2012-12-20 19:28 | 2009-10-8 | Show | GitHub Exploit DB Packet Storm |
| 228406 | 7.5 | 危険 | vspanel | - | VS PANEL の showcat.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-3590 | 2012-12-20 19:28 | 2009-10-8 | Show | GitHub Exploit DB Packet Storm |
| 228407 | 5 | 警告 | sql-ledger | - | SQL-Ledger におけるクッキーをキャプチャされる脆弱性 |
CWE-16
環境設定 |
CVE-2009-3584 | 2012-12-20 19:28 | 2009-12-23 | Show | GitHub Exploit DB Packet Storm |
| 228408 | 5.1 | 警告 | sql-ledger | - | SQL-Ledger の Preferences メニュー項目におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2009-3583 | 2012-12-20 19:28 | 2009-12-23 | Show | GitHub Exploit DB Packet Storm |
| 228409 | 6.5 | 警告 | sql-ledger | - | SQL-Ledger の delete サブルーチンにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-3582 | 2012-12-20 19:28 | 2009-12-23 | Show | GitHub Exploit DB Packet Storm |
| 228410 | 3.5 | 注意 | sql-ledger | - | SQL-Ledger におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-3581 | 2012-12-20 19:28 | 2009-12-23 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 1, 2026, 4:12 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 216101 | 9.1 |
CRITICAL
Network |
qualcomm |
apq8017_firmware apq8037_firmware apq8053_firmware aqt1000_firmware msm8917_firmware msm8920_firmware msm8937_firmware msm8940_firmware msm8953_firmware pm215_firmware p… |
Out of bound memory read while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, S… |
CWE-125
Out-of-bounds Read |
CVE-2020-11247 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 216102 | 7.8 |
HIGH
Local |
qualcomm |
apq8017_firmware apq8037_firmware apq8053_firmware aqt1000_firmware msm8917_firmware msm8920_firmware msm8937_firmware msm8940_firmware msm8953_firmware pm215_firmware p… |
A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Ind… |
CWE-415
Double Free |
CVE-2020-11246 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 216103 | 7.8 |
HIGH
Local |
qualcomm |
aqt1000_firmware ar8035_firmware pm3003a_firmware pm4125_firmware pm4250_firmware pm6125_firmware pm6150_firmware pm6150a_firmware pm6150l_firmware pm6350_firmware pm640… |
Unintended reads and writes by NS EL2 in access control driver due to lack of check of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapd… |
CWE-190
Integer Overflow or Wraparound |
CVE-2020-11245 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 216104 | 7.8 |
HIGH
Local |
qualcomm |
pm660_firmware pm660a_firmware pm660l_firmware pm855a_firmware pmm855au_firmware qat3514_firmware qat3522_firmware qat3550_firmware qca6564a_firmware qca6564au_firmware … |
User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile |
NVD-CWE-Other
|
CVE-2020-11242 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 216105 | 7.8 |
HIGH
Local |
qualcomm |
csrb31024_firmware pm3003a_firmware pm456_firmware pm6150_firmware pm6150a_firmware pm6150l_firmware pm6250_firmware pm6350_firmware pm7150a_firmware pm7150l_firmware pm… |
Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before accessing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra… |
CWE-20
Improper Input Validation |
CVE-2020-11237 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 216106 | 8.8 |
HIGH
Local |
qualcomm |
ar8035_firmware pm4125_firmware pm4250_firmware pm6125_firmware pm6150a_firmware pm6150l_firmware pm6350_firmware pm7250b_firmware pm8008_firmware pmd9655_firmware pmi63… |
Possible memory corruption in RPM region due to improper XPU configuration in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking |
CWE-787
Out-of-bounds Write |
CVE-2020-11210 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 216107 | 5.5 |
MEDIUM
Local |
qualcomm |
csrb31024_firmware pm3003a_firmware pm6150a_firmware pm6150l_firmware pm6350_firmware pm7150a_firmware pm7150l_firmware pm7250_firmware pm7250b_firmware pm8008_firmware … |
Memory corruption due to invalid value of total dimension in the non-histogram type KPI could lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon M… |
CWE-787
Out-of-bounds Write |
CVE-2020-11236 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 216108 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8053_firmware apq8064au_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware ar8035_firmware ar8151_firmware<… |
When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting in a Use After Free condition in Snapdragon Auto, Snapdragon… |
CWE-416
Use After Free |
CVE-2020-11234 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 216109 | 6.7 |
MEDIUM
Local |
qualcomm |
apq8017_firmware apq8053_firmware aqt1000_firmware msm8917_firmware msm8953_firmware pm215_firmware pm3003a_firmware pm439_firmware pm6125_firmware pm6150_firmware pm615… |
Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in turn can lead to heap corruption in Snapdragon Compute, Snapdragon Connectivity, … |
CWE-415
Double Free |
CVE-2020-11231 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 216110 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar8035_firmware ar8151_firmware
Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons…
|
CWE-787 |
CWE-129 Out-of-bounds Write Improper Validation of Array Index
CVE-2020-11227
|
2024-11-21 13:57 |
2021-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|