Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 3, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 229151 | 4.3 | 警告 | wheatblog | - | wB の add_comment.php におけるクロスサイトスクリプティングの脆弱性 | - | CVE-2006-7002 | 2012-12-20 18:18 | 2007-02-12 | Show | GitHub Exploit DB Packet Storm |
| 229152 | 7.1 | 危険 | phpmychat plus | - | PhpMyChat Plus の avatar.php におけるディレクトリトラバーサルの脆弱性 | - | CVE-2006-7001 | 2012-12-20 18:18 | 2007-02-12 | Show | GitHub Exploit DB Packet Storm |
| 229153 | 4.3 | 警告 | the war forge | - | warforge.NEWS におけるクロスサイトスクリプティングの脆弱性 | - | CVE-2006-6996 | 2012-12-20 18:18 | 2007-02-12 | Show | GitHub Exploit DB Packet Storm |
| 229154 | 6 | 警告 | v3chat | - | V3 Chat の mycontacts.php における他のユーザとして権限を取得される脆弱性 | - | CVE-2006-6995 | 2012-12-20 18:18 | 2007-02-12 | Show | GitHub Exploit DB Packet Storm |
| 229155 | 7.8 | 危険 | softinform | - | FineBrowser Freeware における他のドメインから制限された情報をアクセスされる脆弱性 | - | CVE-2006-6987 | 2012-12-20 18:18 | 2007-02-8 | Show | GitHub Exploit DB Packet Storm |
| 229156 | 7.5 | 危険 | phpgraphy | - | phpGraphy における任意の PHP コードを実行される脆弱性 | - | CVE-2006-6966 | 2012-12-20 18:18 | 2007-02-3 | Show | GitHub Exploit DB Packet Storm |
| 229157 | 6.8 | 警告 | ウェブルート株式会社 | - | WebRoot Spy Sweeper におけるマルウェアを回避される脆弱性 | - | CVE-2006-6961 | 2012-12-20 18:18 | 2007-01-29 | Show | GitHub Exploit DB Packet Storm |
| 229158 | 6.8 | 警告 | ウェブルート株式会社 | - | WebRoot Spy Sweeper の Compression Sweep 機能におけるマルウェアの検出を回避される脆弱性 | - | CVE-2006-6960 | 2012-12-20 18:18 | 2007-01-29 | Show | GitHub Exploit DB Packet Storm |
| 229159 | 4.6 | 警告 | ウェブルート株式会社 | - | WebRoot Spy Sweeper における "スタートアップシールド" セキュリティ制限を回避される脆弱性 | - | CVE-2006-6959 | 2012-12-20 18:18 | 2007-01-29 | Show | GitHub Exploit DB Packet Storm |
| 229160 | 7.5 | 危険 | php blue dragon | - | phpBlueDragon における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2006-6958 | 2012-12-20 18:18 | 2007-01-29 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 3, 2026, 4:06 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 197541 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware apq8098_firmware kamorta_firmware mdm9150_firmware mdm9205_firmware mdm9206_firmware mdm9207c_firmware… |
u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage in operation' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, S… |
CWE-190
Integer Overflow or Wraparound |
CVE-2020-3624 | 2024-11-21 14:31 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 197542 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206 mdm9607 mdm9650 mdm9655 mdm9640 mdm9645 sdx20 sdm630 sdm636 sdm660 msm8937 sdm845 apq8096au msm8996au msm8996 msm8917 msm8998 sdm632 sdm7… |
u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not validated for NULL termination can results into memory corruption' in Snapdragon … |
CWE-787
Out-of-bounds Write |
CVE-2020-3622 | 2024-11-21 14:31 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 197543 | 5.5 |
MEDIUM
Local |
qualcomm |
apq8009_firmware apq8053_firmware apq8096au_firmware apq8098_firmware bitra_firmware kamorta_firmware mdm9206_firmware mdm9150_firmware mdm9607_firmware mdm9640_firmware
u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption and potential information leakage' in Sna…
|
CWE-20 |
CWE-787 Improper Input Validation Out-of-bounds Write
CVE-2020-3621
|
2024-11-21 14:31 |
2020-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 197544 | 5.5 |
MEDIUM
Local |
qualcomm |
apq8009_firmware apq8053_firmware apq8096au_firmware apq8098_firmware bitra_firmware kamorta_firmware mdm9206_firmware mdm9150_firmware mdm9607_firmware mdm9640_firmware
u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to corruption and potential information leak' in Snapdragon Au…
|
CWE-190
|
Integer Overflow or Wraparound
CVE-2020-3620
|
2024-11-21 14:31 |
2020-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 197545 | 7.0 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8098_firmware ipq8074_firmware kamorta_firmware mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9650_firmware
u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to privilege escalation or memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv…
|
CWE-787 |
CWE-367 Out-of-bounds Write Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2020-3619
|
2024-11-21 14:31 |
2020-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 197546 | 7.8 |
HIGH
Local |
qualcomm |
apq8098_firmware kamorta_firmware msm8998_firmware qcs404_firmware qcs605_firmware sda660_firmware sda845_firmware sdm630_firmware sdm636_firmware sdm660_firmware sdm670… |
u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access issue' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, … |
NVD-CWE-noinfo
|
CVE-2020-3611 | 2024-11-21 14:31 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 197547 | 6.5 |
MEDIUM
Network |
cisco | jabber | A vulnerability in Cisco Jabber software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of message contents. An… |
CWE-20
Improper Input Validation |
CVE-2020-3498 | 2024-11-21 14:31 | 2020-09-4 | Show | GitHub Exploit DB Packet Storm |
| 197548 | 6.8 |
MEDIUM
Adjacent |
cisco |
rv340w_firmware rv340_firmware rv345_firmware rv345p_firmware |
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute ar… |
CWE-20
Improper Input Validation |
CVE-2020-3453 | 2024-11-21 14:31 | 2020-09-4 | Show | GitHub Exploit DB Packet Storm |
| 197549 | 4.7 |
MEDIUM
Network |
cisco |
rv340w_firmware rv340_firmware rv345_firmware rv345p_firmware |
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute ar… |
CWE-20
Improper Input Validation |
CVE-2020-3451 | 2024-11-21 14:31 | 2020-09-4 | Show | GitHub Exploit DB Packet Storm |
| 197550 | 6.5 |
MEDIUM
Network |
cisco | asyncos | A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA), Cisco Content Security Management Appliance (SMA), and Cisco Web Security App… |
CWE-522
Insufficiently Protected Credentials |
CVE-2020-3547 | 2024-11-21 14:31 | 2020-09-4 | Show | GitHub Exploit DB Packet Storm |