Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 6, 2026, noon
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 228451 | 7.5 | 危険 | turnkey web tools | - | TurnkeyWebTools SunShop Shopping Cart の index.php における SQL インジェクションの脆弱性 | - | CVE-2007-2549 | 2012-12-20 18:19 | 2007-05-9 | Show | GitHub Exploit DB Packet Storm |
| 228452 | 6.4 | 警告 | turnkey web tools | - | TurnkeyWebTools SunShop Shopping Cart の index.php における脆弱性 | - | CVE-2007-2548 | 2012-12-20 18:19 | 2007-05-9 | Show | GitHub Exploit DB Packet Storm |
| 228453 | 4.3 | 警告 | turnkey web tools | - | TurnkeyWebTools SunShop Shopping Cart の index.php におけるクロスサイトスクリプティングの脆弱性 | - | CVE-2007-2547 | 2012-12-20 18:19 | 2007-05-9 | Show | GitHub Exploit DB Packet Storm |
| 228454 | 6.8 | 警告 | Simple Machines | - | SMF におけるセッションをハイジャックされる脆弱性 |
CWE-287
不適切な認証 |
CVE-2007-2546 | 2012-12-20 18:19 | 2007-05-9 | Show | GitHub Exploit DB Packet Storm |
| 228455 | 7.5 | 危険 | XOOPS | - | XOOPS 用の Flashgames モジュールにおける SQL インジェクションの脆弱性 | - | CVE-2007-2543 | 2012-12-20 18:19 | 2007-05-8 | Show | GitHub Exploit DB Packet Storm |
| 228456 | 7.5 | 危険 | workbench survival guide | - | workbench survival guide の header.php における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2007-2542 | 2012-12-20 18:19 | 2007-05-8 | Show | GitHub Exploit DB Packet Storm |
| 228457 | 7.5 | 危険 | versado cms | - | Versado CMS の includes/ajax_listado.php における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2007-2541 | 2012-12-20 18:19 | 2007-05-8 | Show | GitHub Exploit DB Packet Storm |
| 228458 | 7.5 | 危険 | pmecms | - | PMECMS における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2007-2540 | 2012-12-20 18:19 | 2007-05-8 | Show | GitHub Exploit DB Packet Storm |
| 228459 | 7.8 | 危険 | runcms | - | RunCms の show_files 関数における重要な情報 (ファイルの存在およびファイルメタデータ) を取得される脆弱性 | - | CVE-2007-2539 | 2012-12-20 18:19 | 2007-05-8 | Show | GitHub Exploit DB Packet Storm |
| 228460 | 7.5 | 危険 | runcms | - | RunCms の class/debug/debug_show.php における SQL インジェクションの脆弱性 | - | CVE-2007-2538 | 2012-12-20 18:19 | 2007-05-8 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 6, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 209871 | 9.1 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8064au_firmware apq8076_firmware apq8084_firmware apq8092_firmware apq8094_firmware apq8096au_firmware aqt1000_firmwar… |
Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA attribute lengths in Snapdragon Auto, Snapdragon C… |
CWE-125
Out-of-bounds Read |
CVE-2020-11276 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 209872 | 9.1 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware ar8035_firmware ar8151_firmware ar9380_firmware csr6030_firmware c… |
Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon C… |
CWE-125
Out-of-bounds Read |
CVE-2020-11275 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 209873 | 7.5 |
HIGH
Network |
qualcomm |
apq8096au_firmware aqt1000_firmware ar8031_firmware ar8035_firmware csra6620_firmware csra6640_firmware csrb31024_firmware msm8996au_firmware pm3003a_firmware pm6125_firmwa… |
Denial of service in WLAN module due to improper check of subtypes in logic where excessive frames are dropped in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Ele… |
NVD-CWE-Other
|
CVE-2020-11297 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 209874 | 7.5 |
HIGH
Network |
qualcomm |
aqt1000_firmware ar7420_firmware ar8031_firmware ar8035_firmware ar9380_firmware csr8811_firmware csra6620_firmware csra6640_firmware csrb31024_firmware ipq4018_firmware
Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status in the FTM parameter IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne…
|
CWE-400
|
Uncontrolled Resource Consumption
CVE-2020-11270
|
2024-11-21 13:57 |
2021-02-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 209875 | 8.8 |
HIGH
Adjacent |
qualcomm |
apq8009_firmware apq8009w_firmware apq8016_firmware apq8017_firmware apq8037_firmware apq8039_firmware apq8052_firmware apq8053_firmware apq8056_firmware apq8064au_firmware… |
Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer E… |
CWE-190
Integer Overflow or Wraparound |
CVE-2020-11269 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 209876 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8016_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8064au_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware… |
Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters that are read from shared MSG RAM in Snapdragon Auto, Snapdra… |
CWE-20 CWE-787 Improper Input Validation Out-of-bounds Write |
CVE-2020-11204 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 209877 | 7.5 |
HIGH
Network |
qualcomm |
sdm630 qca6574au qca6584au qca6574 sd845 ipq8074 sd_636 sd_675 sd_8cx qca8081 qcs605 sd855 qcs405 qcn7605 sdx55 sa6155p qca6390 ipq6018 sa415m
Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
|
CWE-203
|
Information Exposure Through Discrepancy
CVE-2020-11287
|
2024-11-21 13:57 |
2021-02-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 209878 | 6.8 |
MEDIUM
Physics |
qualcomm |
mdm9206 mdm9607 mdm9650 msm8909w mdm9655 mdm9640 sdx20 sdm630 qca6174a qca6574au qca6584 qca6584au qca9377 msm8937 apq8096au msm8996au qca6574 sd210… |
An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories like device, interface & endpoint are made together. in Sna… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2020-11286 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 209879 | 8.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar6003_firmware ar8035_firmware
User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn…
|
NVD-CWE-Other
|
CVE-2020-11177
|
2024-11-21 13:57 |
2021-02-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 209880 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8030_firmware apq8037_firmware apq8052_firmware apq8053_firmware apq8056_firmware apq8060a_firmware apq8062_firmware<… |
Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd… |
CWE-120
Classic Buffer Overflow |
CVE-2020-11170 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |