Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 6, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 228471 | 7.5 | 危険 | postnuke software foundation | - | PostNuke 用の v4bJournal モジュールにおける SQL インジェクションの脆弱性 | - | CVE-2007-2492 | 2012-12-20 18:19 | 2007-05-3 | Show | GitHub Exploit DB Packet Storm |
| 228472 | 7.2 | 危険 | VMware | - | EMC VMware Workstation などの PIIX4 電源管理サブシステムにおける任意のメモリ領域に書き込まれる脆弱性 | - | CVE-2007-2491 | 2012-12-20 18:19 | 2007-05-3 | Show | GitHub Exploit DB Packet Storm |
| 228473 | 7.5 | 危険 | ruben boelinger | - | WordPress 用の myflash プラグインにおける PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2007-2485 | 2012-12-20 18:19 | 2007-05-3 | Show | GitHub Exploit DB Packet Storm |
| 228474 | 6.8 | 警告 | ruben boelinger | - | WordPress 用の wp-Table プラグインにおける PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2007-2484 | 2012-12-20 18:19 | 2007-05-3 | Show | GitHub Exploit DB Packet Storm |
| 228475 | 6.8 | 警告 | ruben boelinger | - | WordPress 用の wp-Table プラグインにおけるディレクトリトラバーサルの脆弱性 | - | CVE-2007-2483 | 2012-12-20 18:19 | 2007-05-3 | Show | GitHub Exploit DB Packet Storm |
| 228476 | 6.8 | 警告 | ruben boelinger | - | WordPress 用の wordTube プラグインにおけるディレクトリトラバーサルの脆弱性 | - | CVE-2007-2482 | 2012-12-20 18:19 | 2007-05-3 | Show | GitHub Exploit DB Packet Storm |
| 228477 | 6.8 | 警告 | ruben boelinger | - | WordPress 用の wordTube プラグインの wordtube-button.php における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2007-2481 | 2012-12-20 18:19 | 2007-05-3 | Show | GitHub Exploit DB Packet Storm |
| 228478 | 7.5 | 危険 | turnkey web tools | - | Turnkey Web Tools SunShop Shopping Cart における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2007-2474 | 2012-12-20 18:19 | 2007-05-2 | Show | GitHub Exploit DB Packet Storm |
| 228479 | 4.3 | 警告 | sendcard | - | Sendcard の sendcard.php におけるクロスサイトスクリプティングの脆弱性 | - | CVE-2007-2472 | 2012-12-20 18:19 | 2007-05-2 | Show | GitHub Exploit DB Packet Storm |
| 228480 | 5 | 警告 | sendcard | - | Sendcard の sendcard.php におけるディレクトリトラバーサルの脆弱性 | - | CVE-2007-2471 | 2012-12-20 18:19 | 2007-05-2 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 6, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 209831 | 7.5 |
HIGH
Network |
qualcomm |
csrb31024_firmware pm3003a_firmware pm6150a_firmware pm6150l_firmware pm6350_firmware pm7150a_firmware pm7150l_firmware pm7250_firmware pm7250b_firmware pm8005_firmware … |
Histogram type KPI was teardown with the assumption of the existence of histogram binning info and will lead to null pointer access when histogram binning info is missing due to lack of null check in… |
CWE-476
NULL Pointer Dereference |
CVE-2020-11273 | 2024-11-21 13:57 | 2021-05-7 | Show | GitHub Exploit DB Packet Storm |
| 209832 | 7.5 |
HIGH
Network |
qualcomm |
mdm9635m mdm9615 mdm9640 mdm9645 qca6174a qca6584 msm8974 msm8939 sd210 apq8009 apq8016 qca6174 msm8108 msm8208 msm8209 msm8608 wcd9330 mdm8215 m… |
Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can lead to denial of service in Snapdragon Auto, Snapdragon Mobile |
CWE-20
Improper Input Validation |
CVE-2020-11268 | 2024-11-21 13:57 | 2021-05-7 | Show | GitHub Exploit DB Packet Storm |
| 209833 | 5.5 |
MEDIUM
Local |
qualcomm |
qca6574au sa6155p sa8155p sa6145p sa6150p sa8150p sa8195p pm6150a pm6150l pm6350 pm660 pm660l pm7250b pm8008 pm8009 pm8350 pm8350b pm8350bh pm835… |
Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mo… |
CWE-476
NULL Pointer Dereference |
CVE-2020-11254 | 2024-11-21 13:57 | 2021-05-7 | Show | GitHub Exploit DB Packet Storm |
| 209834 | 7.5 |
HIGH
Network |
qualcomm |
aqt1000_firmware ar8035_firmware fsm10055_firmware fsm10056_firmware pm3003a_firmware pm7150a_firmware pm7150l_firmware pm7250_firmware pm7250b_firmware pm8004_firmware … |
RRC sends a connection establishment success to NAS even though connection setup validation returns failure and leads to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… |
CWE-755
Improper Handling of Exceptional Conditions |
CVE-2020-11243 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 209835 | 9.1 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar6003_firmware ar8035_firmware
Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity…
|
CWE-125
|
Out-of-bounds Read
CVE-2020-11191
|
2024-11-21 13:57 |
2021-04-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 209836 | 7.5 |
HIGH
Network |
qualcomm |
apq8009_firmware apq8017_firmware apq8037_firmware apq8053_firmware aqt1000_firmware csrb31024_firmware mdm8207_firmware mdm9205_firmware mdm9206_firmware mdm9207_firmware<… |
Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is freed and rest of the memory is leaked in Snapdragon Auto, Snapdragon Compute, S… |
CWE-401
Missing Release of Memory after Effective Lifetime |
CVE-2020-11255 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 209837 | 5.5 |
MEDIUM
Local |
qualcomm |
aqt1000_firmware ar8031_firmware ar8035_firmware csr8811_firmware csra6620_firmware csra6640_firmware csrb31024_firmware fsm10055_firmware fsm10056_firmware ipq6000_firmwar… |
Trustzone initialization code will disable xPU`s when memory dumps are enabled and lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer … |
CWE-125
Out-of-bounds Read |
CVE-2020-11252 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 209838 | 9.1 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8096au_firmware aqt1000_firmware ar6003_firmware ar8151_firmware csr6030_firmware
Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
|
CWE-125
|
Out-of-bounds Read
CVE-2020-11251
|
2024-11-21 13:57 |
2021-04-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 209839 | 9.1 |
CRITICAL
Network |
qualcomm |
apq8017_firmware apq8037_firmware apq8053_firmware aqt1000_firmware msm8917_firmware msm8920_firmware msm8937_firmware msm8940_firmware msm8953_firmware pm215_firmware p… |
Out of bound memory read while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, S… |
CWE-125
Out-of-bounds Read |
CVE-2020-11247 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 209840 | 7.8 |
HIGH
Local |
qualcomm |
apq8017_firmware apq8037_firmware apq8053_firmware aqt1000_firmware msm8917_firmware msm8920_firmware msm8937_firmware msm8940_firmware msm8953_firmware pm215_firmware p… |
A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Ind… |
CWE-415
Double Free |
CVE-2020-11246 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |