Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 3, 2026, noon
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 229111 | 7.5 | 危険 | PHPKIT | - | PHPKit における SQL インジェクションの脆弱性 | - | CVE-2006-7115 | 2012-12-20 18:18 | 2007-03-5 | Show | GitHub Exploit DB Packet Storm |
| 229112 | 5 | 警告 | planerd.net | - | P-News における重要な情報を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2006-7114 | 2012-12-20 18:18 | 2007-03-5 | Show | GitHub Exploit DB Packet Storm |
| 229113 | 7.5 | 危険 | planerd.net | - | P-News における任意のコードをアップロードおよび実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2006-7113 | 2012-12-20 18:18 | 2007-03-5 | Show | GitHub Exploit DB Packet Storm |
| 229114 | 7.5 | 危険 | powerphlogger | - | Power Phlogger の config.inc.php3 における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2006-7106 | 2012-12-20 18:18 | 2007-03-3 | Show | GitHub Exploit DB Packet Storm |
| 229115 | 7.5 | 危険 | phpwind | - | PHPWind の admin.php における SQL インジェクションの脆弱性 | - | CVE-2006-7101 | 2012-12-20 18:18 | 2007-03-3 | Show | GitHub Exploit DB Packet Storm |
| 229116 | 6.8 | 警告 | phpBB | - | phpBB Insert User の includes/functions_mod_user.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2006-7100 | 2012-12-20 18:18 | 2007-03-3 | Show | GitHub Exploit DB Packet Storm |
| 229117 | 5 | 警告 | solarpay | - | SolarPay の index.php におけるディレクトリトラバーサルの脆弱性 | - | CVE-2006-7099 | 2012-12-20 18:18 | 2007-03-3 | Show | GitHub Exploit DB Packet Storm |
| 229118 | 10 | 危険 | taskfreak | - | TaskFreak! における脆弱性 | - | CVE-2006-7097 | 2012-12-20 18:18 | 2007-03-2 | Show | GitHub Exploit DB Packet Storm |
| 229119 | 6.8 | 警告 | phpbb security | - | phpBB Security の phpbb_security.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2006-7090 | 2012-12-20 18:18 | 2007-03-2 | Show | GitHub Exploit DB Packet Storm |
| 229120 | 7.5 | 危険 | simple php forum | - | Simple PHP Forum における SQL インジェクションの脆弱性 | - | CVE-2006-7088 | 2012-12-20 18:18 | 2007-03-2 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 3, 2026, 4:06 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 197541 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware apq8098_firmware kamorta_firmware mdm9150_firmware mdm9205_firmware mdm9206_firmware mdm9207c_firmware… |
u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage in operation' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, S… |
CWE-190
Integer Overflow or Wraparound |
CVE-2020-3624 | 2024-11-21 14:31 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 197542 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206 mdm9607 mdm9650 mdm9655 mdm9640 mdm9645 sdx20 sdm630 sdm636 sdm660 msm8937 sdm845 apq8096au msm8996au msm8996 msm8917 msm8998 sdm632 sdm7… |
u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not validated for NULL termination can results into memory corruption' in Snapdragon … |
CWE-787
Out-of-bounds Write |
CVE-2020-3622 | 2024-11-21 14:31 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 197543 | 5.5 |
MEDIUM
Local |
qualcomm |
apq8009_firmware apq8053_firmware apq8096au_firmware apq8098_firmware bitra_firmware kamorta_firmware mdm9206_firmware mdm9150_firmware mdm9607_firmware mdm9640_firmware
u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption and potential information leakage' in Sna…
|
CWE-20 |
CWE-787 Improper Input Validation Out-of-bounds Write
CVE-2020-3621
|
2024-11-21 14:31 |
2020-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 197544 | 5.5 |
MEDIUM
Local |
qualcomm |
apq8009_firmware apq8053_firmware apq8096au_firmware apq8098_firmware bitra_firmware kamorta_firmware mdm9206_firmware mdm9150_firmware mdm9607_firmware mdm9640_firmware
u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to corruption and potential information leak' in Snapdragon Au…
|
CWE-190
|
Integer Overflow or Wraparound
CVE-2020-3620
|
2024-11-21 14:31 |
2020-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 197545 | 7.0 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8098_firmware ipq8074_firmware kamorta_firmware mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9650_firmware
u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to privilege escalation or memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv…
|
CWE-787 |
CWE-367 Out-of-bounds Write Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2020-3619
|
2024-11-21 14:31 |
2020-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 197546 | 7.8 |
HIGH
Local |
qualcomm |
apq8098_firmware kamorta_firmware msm8998_firmware qcs404_firmware qcs605_firmware sda660_firmware sda845_firmware sdm630_firmware sdm636_firmware sdm660_firmware sdm670… |
u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access issue' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, … |
NVD-CWE-noinfo
|
CVE-2020-3611 | 2024-11-21 14:31 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 197547 | 6.5 |
MEDIUM
Network |
cisco | jabber | A vulnerability in Cisco Jabber software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of message contents. An… |
CWE-20
Improper Input Validation |
CVE-2020-3498 | 2024-11-21 14:31 | 2020-09-4 | Show | GitHub Exploit DB Packet Storm |
| 197548 | 6.8 |
MEDIUM
Adjacent |
cisco |
rv340w_firmware rv340_firmware rv345_firmware rv345p_firmware |
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute ar… |
CWE-20
Improper Input Validation |
CVE-2020-3453 | 2024-11-21 14:31 | 2020-09-4 | Show | GitHub Exploit DB Packet Storm |
| 197549 | 4.7 |
MEDIUM
Network |
cisco |
rv340w_firmware rv340_firmware rv345_firmware rv345p_firmware |
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute ar… |
CWE-20
Improper Input Validation |
CVE-2020-3451 | 2024-11-21 14:31 | 2020-09-4 | Show | GitHub Exploit DB Packet Storm |
| 197550 | 6.5 |
MEDIUM
Network |
cisco | asyncos | A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA), Cisco Content Security Management Appliance (SMA), and Cisco Web Security App… |
CWE-522
Insufficiently Protected Credentials |
CVE-2020-3547 | 2024-11-21 14:31 | 2020-09-4 | Show | GitHub Exploit DB Packet Storm |