Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 23, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 228891 | 7.5 | 危険 | scripts-for-sites | - | SFS EZ Top Sites の topsite.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-6247 | 2012-12-20 19:10 | 2009-02-23 | Show | GitHub Exploit DB Packet Storm |
| 228892 | 7.5 | 危険 | scripts-for-sites | - | SFS EZ Webring の category.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-6246 | 2012-12-20 19:10 | 2009-02-23 | Show | GitHub Exploit DB Packet Storm |
| 228893 | 7.5 | 危険 | scripts-for-sites | - | SFS EZ BIZ PRO の track.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-6245 | 2012-12-20 19:10 | 2009-02-23 | Show | GitHub Exploit DB Packet Storm |
| 228894 | 7.5 | 危険 | scripts-for-sites | - | SFS EZ Gaming Cheats の view_reviews.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-6244 | 2012-12-20 19:10 | 2009-02-23 | Show | GitHub Exploit DB Packet Storm |
| 228895 | 7.5 | 危険 | scripts-for-sites | - | SFS Hotscripts-like Site の showcategory.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-6243 | 2012-12-20 19:10 | 2009-02-23 | Show | GitHub Exploit DB Packet Storm |
| 228896 | 7.5 | 危険 | scripts-for-sites | - | SFS EZ e-store の SearchResults.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-6242 | 2012-12-20 19:10 | 2009-02-23 | Show | GitHub Exploit DB Packet Storm |
| 228897 | 7.5 | 危険 | scripts-for-sites | - | SFS Hotscripts-like Site の software-description.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-6237 | 2012-12-20 19:10 | 2009-02-23 | Show | GitHub Exploit DB Packet Storm |
| 228898 | 7.5 | 危険 | PreProject.com | - | Pre Shopping Mall における認証を回避される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2008-6232 | 2012-12-20 19:10 | 2009-02-20 | Show | GitHub Exploit DB Packet Storm |
| 228899 | 7.5 | 危険 | PreProject.com | - | Pre Classified Listing PHP における認証を回避される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2008-6231 | 2012-12-20 19:10 | 2009-02-20 | Show | GitHub Exploit DB Packet Storm |
| 228900 | 7.5 | 危険 | PreProject.com | - | Pre Projects Pre Podcast Portal の Tour.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-6230 | 2012-12-20 19:10 | 2009-02-20 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 23, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 221341 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8996au_firmware qca6174a_firmware qca6574au_firmware qca9377_firmware qca9379_firmwa… |
Possible integer underflow due to lack of validation before calculation of data length in 802.11 Rx management configuration in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdrag… |
CWE-125 CWE-191 Out-of-bounds Read Integer Underflow (Wrap or Wraparound) |
CVE-2019-2307 | 2024-11-21 13:40 | 2019-07-26 | Show | GitHub Exploit DB Packet Storm |
| 221342 | 7.8 |
HIGH
Local |
qualcomm |
mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware qcs405_firmware qcs605_firmware qualcomm_215_firmware sd_210_firmwa… |
Improper casting of structure while handling the buffer leads to out of bound read in display in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrag… |
CWE-125 CWE-704 Out-of-bounds Read Incorrect Type Conversion or Cast |
CVE-2019-2306 | 2024-11-21 13:40 | 2019-07-26 | Show | GitHub Exploit DB Packet Storm |
| 221343 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8996au_firmware qca6174a_firmware qca6574au_firmware qca9377_firmware qca9379_firmwa… |
Out of bound access when reason code is extracted from frame data without validating the frame length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdr… |
CWE-125
Out-of-bounds Read |
CVE-2019-2305 | 2024-11-21 13:40 | 2019-07-26 | Show | GitHub Exploit DB Packet Storm |
| 221344 | 7.8 |
HIGH
Local |
qualcomm |
ipq4019_firmware ipq8064_firmware msm8909w_firmware msm8996au_firmware qca9980_firmware qcs605_firmware qualcomm_215_firmware sd_425_firmware sd_439_firmware sd_429_firmwar… |
Possibility of out-of-bound read if id received from SPI is not in range of FIFO in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdra… |
CWE-125
Out-of-bounds Read |
CVE-2019-2301 | 2024-11-21 13:40 | 2019-07-26 | Show | GitHub Exploit DB Packet Storm |
| 221345 | 7.8 |
HIGH
Local |
qualcomm |
ipq4019_firmware ipq8064_firmware ipq8074_firmware mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8996au_firmware qca6174a_firmware… |
An out-of-bound write can be triggered by a specially-crafted command supplied by a userspace application. in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, S… |
CWE-787
Out-of-bounds Write |
CVE-2019-2299 | 2024-11-21 13:40 | 2019-07-26 | Show | GitHub Exploit DB Packet Storm |
| 221346 | 7.8 |
HIGH
Local |
qualcomm |
mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8909w_firmware qcs405_firmware qcs605_firmware sd_210_firmware sd_212_firmware sd… |
Protection is missing while accessing md sessions info via macro which can lead to use-after-free in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrago… |
CWE-416
Use After Free |
CVE-2019-2298 | 2024-11-21 13:40 | 2019-07-26 | Show | GitHub Exploit DB Packet Storm |
| 221347 | 7.8 |
HIGH
Local |
qualcomm |
msm8909w_firmware qcs405_firmware qcs605_firmware sd_425_firmware sd_427_firmware sd_430_firmware sd_435_firmware sd_450_firmware sd_625_firmware sd_636_firmware sd_675_… |
Pointer dereference while freeing IFE resources due to lack of length check of in port resource. in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Sn… |
CWE-416
Use After Free |
CVE-2019-2293 | 2024-11-21 13:40 | 2019-07-26 | Show | GitHub Exploit DB Packet Storm |
| 221348 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware qcs605_firmware sd_425_firmware sd_427_firmware sd_430_firmware … |
Multiple open and close from multiple threads will lead camera driver to access destroyed session data pointer in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industr… |
CWE-416
Use After Free |
CVE-2019-2290 | 2024-11-21 13:40 | 2019-07-26 | Show | GitHub Exploit DB Packet Storm |
| 221349 | 7.8 |
HIGH
Local |
qualcomm |
qcs405_firmware qcs605_firmware sd_636_firmware sd_665_firmware sd_675_firmware sd_712_firmware sd_710_firmware sd_670_firmware sd_730_firmware sd_820_firmware sd_835_fi… |
An unauthenticated bitmap image can be loaded in to memory and subsequently cause execution of unverified code. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Ind… |
NVD-CWE-noinfo
|
CVE-2019-2281 | 2024-11-21 13:40 | 2019-07-26 | Show | GitHub Exploit DB Packet Storm |
| 221350 | 7.8 |
HIGH
Local |
qualcomm |
mdm9607_firmware mdm9640_firmware sd_425_firmware sd_427_firmware sd_430_firmware sd_435_firmware sd_450_firmware sd_625_firmware sd_636_firmware sd_712_firmware sd_710_… |
User keystore signature is ignored in boot and can lead to bypass boot image signature verification in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in MDM9607, MDM9640, SD 425, SD 427,… |
CWE-347
Improper Verification of Cryptographic Signature |
CVE-2019-2278 | 2024-11-21 13:40 | 2019-07-26 | Show | GitHub Exploit DB Packet Storm |