Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 30, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 228571 | 7.5 | 危険 | phpscriptsnow | - | PHP Scripts Now Riddles の list.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-2891 | 2012-12-20 19:28 | 2009-08-20 | Show | GitHub Exploit DB Packet Storm |
| 228572 | 4.3 | 警告 | phpscriptsnow | - | PHP Scripts Now Riddles の results.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-2890 | 2012-12-20 19:28 | 2009-08-20 | Show | GitHub Exploit DB Packet Storm |
| 228573 | 4.3 | 警告 | phpscriptsnow | - | PHP Scripts Now Hangman の index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-2889 | 2012-12-20 19:28 | 2009-08-20 | Show | GitHub Exploit DB Packet Storm |
| 228574 | 7.5 | 危険 | phpscriptsnow | - | PHP Scripts Now Hangman の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-2888 | 2012-12-20 19:28 | 2009-08-20 | Show | GitHub Exploit DB Packet Storm |
| 228575 | 4.3 | 警告 | phpscriptsnow | - | PHP Scripts Now President Bios の bios.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-2887 | 2012-12-20 19:28 | 2009-08-20 | Show | GitHub Exploit DB Packet Storm |
| 228576 | 7.5 | 危険 | phpscriptsnow | - | PHP Scripts Now President Bios の bios.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-2886 | 2012-12-20 19:10 | 2009-08-20 | Show | GitHub Exploit DB Packet Storm |
| 228577 | 7.5 | 危険 | phpscriptsnow | - | PHP Scripts Now World's Tallest Buildings の bios.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-2885 | 2012-12-20 19:10 | 2009-08-20 | Show | GitHub Exploit DB Packet Storm |
| 228578 | 4.3 | 警告 | phpscriptsnow | - | PHP Scripts Now World's Tallest Buildings の bios.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-2884 | 2012-12-20 19:10 | 2009-08-20 | Show | GitHub Exploit DB Packet Storm |
| 228579 | 3.5 | 注意 | サン・マイクロシステムズ | - | Sun VDI における VDI 設定データを平文で読まれる脆弱性 |
CWE-200
情報漏えい |
CVE-2009-2856 | 2012-12-20 19:10 | 2009-08-14 | Show | GitHub Exploit DB Packet Storm |
| 228580 | 6.4 | 警告 | WordPress.org | - | Wordpress における許可されていない編集などをされる脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-2854 | 2012-12-20 19:10 | 2009-08-3 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 31, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 216041 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8064au_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware ar8035_firmware ar8151_firmware
Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industr…
|
CWE-119
|
Incorrect Access of Indexable Resource ('Range Error')
CVE-2020-11289
|
2024-11-21 13:57 |
2021-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 216042 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar6003_firmware ar8151_firmware
Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
|
CWE-190
|
Integer Overflow or Wraparound
CVE-2020-11279
|
2024-11-21 13:57 |
2021-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 216043 | 6.0 |
MEDIUM
Local |
qualcomm |
apq8017_firmware apq8037_firmware apq8053_firmware apq8064au_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware ar8035_firmware ar8151_firmware csra6620_firmware<… |
Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer length received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… |
CWE-125
Out-of-bounds Read |
CVE-2020-11293 | 2024-11-21 13:57 | 2021-05-7 | Show | GitHub Exploit DB Packet Storm |
| 216044 | 7.8 |
HIGH
Local |
qualcomm |
aqt1000_firmware ar8031_firmware ar8035_firmware csra6620_firmware csra6640_firmware csrb31024_firmware fsm10055_firmware fsm10056_firmware mdm9205_firmware pm3003a_firmwar… |
Out of bound write can occur in playready while processing command due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2020-11288 | 2024-11-21 13:57 | 2021-05-7 | Show | GitHub Exploit DB Packet Storm |
| 216045 | 9.1 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar8151_firmware csr6030_firmware<… |
Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consume… |
CWE-125
Out-of-bounds Read |
CVE-2020-11285 | 2024-11-21 13:57 | 2021-05-7 | Show | GitHub Exploit DB Packet Storm |
| 216046 | 7.5 |
HIGH
Network |
qualcomm |
aqt1000_firmware csrb31024_firmware fsm10055_firmware fsm10056_firmware pm3003a_firmware pm456_firmware pm6125_firmware pm6150_firmware pm6150a_firmware pm6150l_firmware
Denial of service in MODEM due to assert to the invalid configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon M…
|
CWE-617
|
Reachable Assertion
CVE-2020-11274
|
2024-11-21 13:57 |
2021-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 216047 | 7.5 |
HIGH
Network |
qualcomm |
csrb31024_firmware pm3003a_firmware pm6150a_firmware pm6150l_firmware pm6350_firmware pm7150a_firmware pm7150l_firmware pm7250_firmware pm7250b_firmware pm8005_firmware … |
Histogram type KPI was teardown with the assumption of the existence of histogram binning info and will lead to null pointer access when histogram binning info is missing due to lack of null check in… |
CWE-476
NULL Pointer Dereference |
CVE-2020-11273 | 2024-11-21 13:57 | 2021-05-7 | Show | GitHub Exploit DB Packet Storm |
| 216048 | 7.5 |
HIGH
Network |
qualcomm |
mdm9635m mdm9615 mdm9640 mdm9645 qca6174a qca6584 msm8974 msm8939 sd210 apq8009 apq8016 qca6174 msm8108 msm8208 msm8209 msm8608 wcd9330 mdm8215 m… |
Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can lead to denial of service in Snapdragon Auto, Snapdragon Mobile |
CWE-20
Improper Input Validation |
CVE-2020-11268 | 2024-11-21 13:57 | 2021-05-7 | Show | GitHub Exploit DB Packet Storm |
| 216049 | 5.5 |
MEDIUM
Local |
qualcomm |
qca6574au sa6155p sa8155p sa6145p sa6150p sa8150p sa8195p pm6150a pm6150l pm6350 pm660 pm660l pm7250b pm8008 pm8009 pm8350 pm8350b pm8350bh pm835… |
Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mo… |
CWE-476
NULL Pointer Dereference |
CVE-2020-11254 | 2024-11-21 13:57 | 2021-05-7 | Show | GitHub Exploit DB Packet Storm |
| 216050 | 7.5 |
HIGH
Network |
qualcomm |
aqt1000_firmware ar8035_firmware fsm10055_firmware fsm10056_firmware pm3003a_firmware pm7150a_firmware pm7150l_firmware pm7250_firmware pm7250b_firmware pm8004_firmware … |
RRC sends a connection establishment success to NAS even though connection setup validation returns failure and leads to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… |
CWE-755
Improper Handling of Exceptional Conditions |
CVE-2020-11243 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |