Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 11, 2026, 6:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 229021 | 7.5 | 危険 | simpcms | - | SimpCMS の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2007-4953 | 2012-12-20 18:33 | 2007-09-18 | Show | GitHub Exploit DB Packet Storm |
| 229022 | 5.1 | 警告 | webmedia explorer | - | webmex における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2007-4948 | 2012-12-20 18:33 | 2007-09-18 | Show | GitHub Exploit DB Packet Storm |
| 229023 | 6.8 | 警告 | phpffl | - | phpFFL における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2007-4935 | 2012-12-20 18:33 | 2007-09-18 | Show | GitHub Exploit DB Packet Storm |
| 229024 | 4.6 | 警告 | phpffl | - | phpFFL における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2007-4934 | 2012-12-20 18:33 | 2007-09-18 | Show | GitHub Exploit DB Packet Storm |
| 229025 | 7.5 | 危険 | shop-script | - | Shop-Script の includes/admin/sub/conf_appearence.php における任意の PHP コードを挿入される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2007-4933 | 2012-12-20 18:33 | 2007-09-18 | Show | GitHub Exploit DB Packet Storm |
| 229026 | 7.5 | 危険 | shop-script | - | Shop-Script の admin.php における admin パネルへアクセスされる脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2007-4932 | 2012-12-20 18:33 | 2007-09-18 | Show | GitHub Exploit DB Packet Storm |
| 229027 | 4.3 | 警告 | php-stats | - | PHP-Stats の tracking.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2007-4917 | 2012-12-20 18:33 | 2007-09-17 | Show | GitHub Exploit DB Packet Storm |
| 229028 | 9.3 | 危険 | WinSCP | - | WinSCP におけるリモートサーバで任意のファイル転送を実行される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2007-4909 | 2012-12-20 18:33 | 2007-09-17 | Show | GitHub Exploit DB Packet Storm |
| 229029 | 7.5 | 危険 | Qualiteam Software Limited | - | X-Cart における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2007-4907 | 2012-12-20 18:33 | 2007-09-17 | Show | GitHub Exploit DB Packet Storm |
| 229030 | 4.3 | 警告 | リアルネットワークス | - | RealNetworks RealPlayer および Helix Player におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-189
数値処理の問題 |
CVE-2007-4904 | 2012-12-20 18:33 | 2007-09-17 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 11, 2026, 4:09 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 224191 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8076_firmware apq8096_firmware apq8096au_firmware apq8098_firmware kamorta_firmware mdm9150_firmware mdm9205_firmware<… |
Buffer overflows while decoding setup message from Network due to lack of check of IE message length received from network in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon … |
CWE-120
Classic Buffer Overflow |
CVE-2019-14062 | 2024-11-21 13:26 | 2020-06-22 | Show | GitHub Exploit DB Packet Storm |
| 224192 | 7.8 |
HIGH
Local |
qualcomm |
msm8909w_firmware qcs605_firmware |
Failure in buffer management while accessing handle for HDR blit when color modes not supported by display in Snapdragon Consumer IOT, Snapdragon Mobile, Snapdragon Wearables in MSM8909W, QCS605 |
CWE-416
Use After Free |
CVE-2019-14087 | 2024-11-21 13:26 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 224193 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8098_firmware msm8909_firmware msm8998_firmware sda660_firmware sda845_firmware sdm630_firmware sdm636_firmware sdm660_firmware sdm845_firmware |
Out of bound memory access while processing qpay due to not validating length of the response buffer provided by User. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indu… |
CWE-131
Incorrect Calculation of Buffer Size |
CVE-2019-14078 | 2024-11-21 13:26 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 224194 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8098_firmware ipq6018_firmware kamorta_firmware mdm9150_firmware mdm9205_firmware mdm9607_firmware mdm9650_firmware msm8909_firmware msm8998_firmware
Out of bound memory access while processing ese transmit command due to passing Response buffer received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer…
|
CWE-704
|
Incorrect Type Conversion or Cast
CVE-2019-14077
|
2024-11-21 13:26 |
2020-06-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 224195 | 5.5 |
MEDIUM
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8096_firmware apq8096au_firmware apq8098_firmware kamorta_firmware mdm9150_firmware mdm9205_firmware mdm9206_firmware<… |
Using non-time-constant functions like memcmp to compare sensitive data can lead to information leakage through timing side channel issue. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv… |
CWE-203
Information Exposure Through Discrepancy |
CVE-2019-14067 | 2024-11-21 13:26 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 224196 | 7.8 |
HIGH
Local |
qualcomm |
kamorta_firmware mdm9205_firmware mdm9607_firmware nicobar_firmware qcs404_firmware qcs405_firmware rennell_firmware sa6155p_firmware sc7180_firmware sc8180x_firmware sd… |
Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbers or checking Feature ID status in Snapdragon Auto, Snapdragon Compute, Snapdra… |
CWE-190
Integer Overflow or Wraparound |
CVE-2019-14066 | 2024-11-21 13:26 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 224197 | 9.8 |
CRITICAL
Network |
qualcomm |
qcs605_firmware sa6155p_firmware sm8150_firmware |
Buffer over-write when this 0-byte buffer is typecasted to some other structure and hence memory corruption in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in QCS605, SA6155P, SM8150 |
CWE-787
Out-of-bounds Write |
CVE-2019-14132 | 2024-11-21 13:26 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |
| 224198 | 7.8 |
HIGH
Local |
qualcomm |
saipan_firmware sm8150_firmware sm8250_firmware sxr2130_firmware |
Memory failure in SKB if it fails to to add the requested padding to the skb in low memory targets or targets with major memory fragmentation in Snapdragon Auto, Snapdragon Mobile in Saipan, SM8150, … |
CWE-755
Improper Handling of Exceptional Conditions |
CVE-2019-14122 | 2024-11-21 13:26 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |
| 224199 | 7.8 |
HIGH
Local |
qualcomm | ipq6018_firmware | Privilege escalation by using an altered debug policy image can occur as the XPU protecting the debug policy regions are disabled during the crash dump boot flow in Snapdragon Auto, Snapdragon Comput… |
CWE-862
Missing Authorization |
CVE-2019-14116 | 2024-11-21 13:26 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |
| 224200 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware ipq8074_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware… |
Possible integer overflow to buffer overflow in WLAN while parsing nonstandard NAN IE messages. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connec… |
CWE-190 CWE-120 Integer Overflow or Wraparound Classic Buffer Overflow |
CVE-2019-14135 | 2024-11-21 13:26 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |