|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
Update Date":May 7, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 229161 | 4.3 | 警告 | woltlab | - | wBB および Burning Board Lite の register.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング(XSS) |
CVE-2007-1443 | 2012-12-20 18:19 | 2007-03-13 | Show | GitHub Exploit DB Packet Storm |
| 229162 | 4.3 | 警告 | BlackBerry | - | RIM BlackBerry 8100 上で稼動している 4thPass ブラウザにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2007-1441 | 2012-12-20 18:19 | 2007-03-13 | Show | GitHub Exploit DB Packet Storm |
| 229163 | 7.5 | 危険 | x-ice | - | X-Ice News System の devami.asp における SQL インジェクションの脆弱性 | - | CVE-2007-1438 | 2012-12-20 18:19 | 2007-03-13 | Show | GitHub Exploit DB Packet Storm |
| 229164 | 7.5 | 危険 | triexa | - | Triexa SonicMailer Pro の index.php における SQL インジェクションの脆弱性 | - | CVE-2007-1425 | 2012-12-20 18:19 | 2007-03-12 | Show | GitHub Exploit DB Packet Storm |
| 229165 | 7.5 | 危険 | softnews media group | - | Softnews Media Group DataLife Engine における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2007-1424 | 2012-12-20 18:19 | 2007-03-12 | Show | GitHub Exploit DB Packet Storm |
| 229166 | 9.3 | 危険 | work system e-commerce | - | WORK system e-commerce における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2007-1423 | 2012-12-20 18:19 | 2007-03-12 | Show | GitHub Exploit DB Packet Storm |
| 229167 | 10 | 危険 | premod subdog | - | Premod SubDog における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2007-1421 | 2012-12-20 18:19 | 2007-03-12 | Show | GitHub Exploit DB Packet Storm |
| 229168 | 4.3 | 警告 | サン・マイクロシステムズ | - | Java Dynamic Management Kit の Internet Inter-ORB Protocol API における特定の MBeans データのアクセス権を取得される脆弱性 | - | CVE-2007-1419 | 2012-12-20 18:19 | 2007-03-9 | Show | GitHub Exploit DB Packet Storm |
| 229169 | 7.5 | 危険 | PMB Services SAS. | - | PMB Services における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2007-1415 | 2012-12-20 18:19 | 2007-03-12 | Show | GitHub Exploit DB Packet Storm |
| 229170 | 10 | 危険 | vallheru | - | Bartek Jasicki Vallheru の bank.php などの PHP ファイルにおける整数オーバーフローの脆弱性 | - | CVE-2007-1408 | 2012-12-20 18:19 | 2007-03-10 | Show | GitHub Exploit DB Packet Storm |
Update Date:May 7, 2026, 4:22 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 210231 | 7.5 |
HIGH
Network |
qualcomm |
sdm630 qca6574au qca6584au qca6574 sd845 ipq8074 sd_636 sd_675 sd_8cx qca8081 qcs605 sd855 qcs405 qcn7605 sdx55 sa6155p qca6390 ipq6018 sa415m | Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… |
CWE-203
Information Exposure Through Discrepancy |
CVE-2020-11287 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 210232 | 6.8 |
MEDIUM
Physics |
qualcomm |
mdm9206 mdm9607 mdm9650 msm8909w mdm9655 mdm9640 sdx20 sdm630 qca6174a qca6574au qca6584 qca6584au qca9377 msm8937 apq8096au msm8996au qca6574 sd210… |
An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories like device, interface & endpoint are made together. in Sna… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2020-11286 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 210233 | 8.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar6003_firmware ar8035_firmware | User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn… |
NVD-CWE-Other
|
CVE-2020-11177 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 210234 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8030_firmware apq8037_firmware apq8052_firmware apq8053_firmware apq8056_firmware apq8060a_firmware apq8062_firmware<… |
Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd… |
CWE-120
Classic Buffer Overflow |
CVE-2020-11170 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 210235 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9206 mdm9650 msm8909w sdx20 sdm630 qca6174a qca6574au qca9377 qca9379 msm8937 apq8096au msm8996au msm8917 qca6574 qca6564 sd210 sd205 sd450 sd… |
A buffer overflow can occur when playing an MKV clip due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IO… |
CWE-787
Out-of-bounds Write |
CVE-2020-11283 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 210236 | 7.1 |
HIGH
Local |
qualcomm |
apq8009w_firmware apq8064au_firmware apq8096au_firmware aqt1000_firmware msm8909w_firmware msm8996au_firmware pm215_firmware pm456_firmware pm6125_firmware pm6150_firmware<… |
Stack overflow may occur if GSM/WCDMA broadcast config size received from user is larger than variable length array in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon In… |
CWE-787
Out-of-bounds Write |
CVE-2020-11203 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 210237 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206 mdm9650 msm8909w mdm9655 mdm9615 sdx20 msm8937 apq8096au msm8996au msm8917 sdm630 qca6574 qca9379 qca9377 qca6584au qca6584 qca6574au qca617… |
Improper access control when using mmap with the kgsl driver with a special offset value that can be provided to map the memstore of the GPU to user space in Snapdragon Auto, Snapdragon Compute, Snap… |
NVD-CWE-noinfo
|
CVE-2020-11282 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 210238 | 7.8 |
HIGH
Local |
qualcomm |
aqt1000_firmware csrb31024_firmware pm7150a_firmware pm7150l_firmware pm7250_firmware pm7250b_firmware pm8004_firmware pm8008_firmware pm855_firmware pm855b_firmware pm8… |
Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile |
CWE-129
Improper Validation of Array Index |
CVE-2020-11187 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 210239 | 7.5 |
HIGH
Network |
qualcomm |
aqt1000_firmware ar8031_firmware ar8035_firmware csr8811_firmware csra6620_firmware csra6640_firmware csrb31024_firmware ipq5010_firmware ipq5018_firmware ipq6000_firmware<… |
Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… |
CWE-200
Information Exposure |
CVE-2020-11281 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 210240 | 7.5 |
HIGH
Network |
qualcomm |
aqt1000_firmware ar8031_firmware ar8035_firmware csr8811_firmware csra6620_firmware csra6640_firmware csrb31024_firmware ipq5010_firmware ipq5018_firmware ipq6000_firmware<… |
Possible denial of service while handling host WMI command due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Sn… |
CWE-617
Reachable Assertion |
CVE-2020-11278 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |