Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 17, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 229411 | 7.5 | 危険 | project alumni | - | Project Alumni の index.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2007-6184 | 2012-12-20 18:34 | 2007-11-29 | Show | GitHub Exploit DB Packet Storm |
| 229412 | 6.8 | 警告 | ruby gnome2 | - | Ruby-GNOME 2 の gtk/src/rbgtkmessagedialog.c におけるフォーマットストリングの脆弱性 |
CWE-134
書式文字列の問題 |
CVE-2007-6183 | 2012-12-20 18:34 | 2007-11-29 | Show | GitHub Exploit DB Packet Storm |
| 229413 | 8.5 | 危険 | レッドハット | - | Cygwin の cygwin1.dll におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2007-6181 | 2012-12-20 18:34 | 2007-11-8 | Show | GitHub Exploit DB Packet Storm |
| 229414 | 8.5 | 危険 | phpdevshell | - | PHPDevShell における権限を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2007-6174 | 2012-12-20 18:34 | 2007-11-29 | Show | GitHub Exploit DB Packet Storm |
| 229415 | 10 | 危険 | wire plastic design | - | wpQuiz における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2007-6172 | 2012-12-20 18:34 | 2007-11-29 | Show | GitHub Exploit DB Packet Storm |
| 229416 | 7.5 | 危険 | vu | - | VU Case Manager の default.asp における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2007-6168 | 2012-12-20 18:34 | 2007-11-28 | Show | GitHub Exploit DB Packet Storm |
| 229417 | 7.2 | 危険 | SUSE | - | SUSE Linux の yast2-core における任意のコードを実行される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2007-6167 | 2012-12-20 18:34 | 2007-11-22 | Show | GitHub Exploit DB Packet Storm |
| 229418 | 4.3 | 警告 | wsdeluxe | - | FMDeluxe の index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2007-6162 | 2012-12-20 18:34 | 2007-11-28 | Show | GitHub Exploit DB Packet Storm |
| 229419 | 5 | 警告 | tilde.dk | - | Tilde CMS の index.php における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2007-6161 | 2012-12-20 18:34 | 2007-11-28 | Show | GitHub Exploit DB Packet Storm |
| 229420 | 4.3 | 警告 | tilde.dk | - | Tilde CMS の index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2007-6160 | 2012-12-20 18:34 | 2007-11-28 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 18, 2026, 4:12 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 201141 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware apq8098_firmware kamorta_firmware mdm9150_firmware mdm9205_firmware mdm9206_firmware mdm9207c_firmware… |
u'A potential buffer overflow exists due to integer overflow when parsing handler options due to wrong data type usage in operation' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, S… |
CWE-190
Integer Overflow or Wraparound |
CVE-2020-3624 | 2024-11-21 14:31 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 201142 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206 mdm9607 mdm9650 mdm9655 mdm9640 mdm9645 sdx20 sdm630 sdm636 sdm660 msm8937 sdm845 apq8096au msm8996au msm8996 msm8917 msm8998 sdm632 sdm7… |
u'Channel name string which has been read from shared memory is potentially subjected to string manipulations but not validated for NULL termination can results into memory corruption' in Snapdragon … |
CWE-787
Out-of-bounds Write |
CVE-2020-3622 | 2024-11-21 14:31 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 201143 | 5.5 |
MEDIUM
Local |
qualcomm |
apq8009_firmware apq8053_firmware apq8096au_firmware apq8098_firmware bitra_firmware kamorta_firmware mdm9206_firmware mdm9150_firmware mdm9607_firmware mdm9640_firmware
u'Lack of check to ensure that the TX read index & RX write index that are read from shared memory are less than the FIFO size results into memory corruption and potential information leakage' in Sna…
|
CWE-20 |
CWE-787 Improper Input Validation Out-of-bounds Write
CVE-2020-3621
|
2024-11-21 14:31 |
2020-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 201144 | 5.5 |
MEDIUM
Local |
qualcomm |
apq8009_firmware apq8053_firmware apq8096au_firmware apq8098_firmware bitra_firmware kamorta_firmware mdm9206_firmware mdm9150_firmware mdm9607_firmware mdm9640_firmware
u'Lack of check of integer overflow while doing a round up operation for data read from shared memory for G-link SMEM transport can lead to corruption and potential information leak' in Snapdragon Au…
|
CWE-190
|
Integer Overflow or Wraparound
CVE-2020-3620
|
2024-11-21 14:31 |
2020-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 201145 | 7.0 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8098_firmware ipq8074_firmware kamorta_firmware mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9650_firmware
u'Non-secure memory is touched multiple times during TrustZone\u2019s execution and can lead to privilege escalation or memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectiv…
|
CWE-787 |
CWE-367 Out-of-bounds Write Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2020-3619
|
2024-11-21 14:31 |
2020-09-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 201146 | 7.8 |
HIGH
Local |
qualcomm |
apq8098_firmware kamorta_firmware msm8998_firmware qcs404_firmware qcs605_firmware sda660_firmware sda845_firmware sdm630_firmware sdm636_firmware sdm660_firmware sdm670… |
u'XBL SEC clears only ZI region when loading Qualcomm-signed segments can lead to improper access issue' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, … |
NVD-CWE-noinfo
|
CVE-2020-3611 | 2024-11-21 14:31 | 2020-09-8 | Show | GitHub Exploit DB Packet Storm |
| 201147 | 6.5 |
MEDIUM
Network |
cisco | jabber | A vulnerability in Cisco Jabber software could allow an authenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of message contents. An… |
CWE-20
Improper Input Validation |
CVE-2020-3498 | 2024-11-21 14:31 | 2020-09-4 | Show | GitHub Exploit DB Packet Storm |
| 201148 | 6.8 |
MEDIUM
Adjacent |
cisco |
rv340w_firmware rv340_firmware rv345_firmware rv345p_firmware |
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute ar… |
CWE-20
Improper Input Validation |
CVE-2020-3453 | 2024-11-21 14:31 | 2020-09-4 | Show | GitHub Exploit DB Packet Storm |
| 201149 | 4.7 |
MEDIUM
Network |
cisco |
rv340w_firmware rv340_firmware rv345_firmware rv345p_firmware |
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute ar… |
CWE-20
Improper Input Validation |
CVE-2020-3451 | 2024-11-21 14:31 | 2020-09-4 | Show | GitHub Exploit DB Packet Storm |
| 201150 | 6.5 |
MEDIUM
Network |
cisco | asyncos | A vulnerability in the web-based management interface of Cisco AsyncOS software for Cisco Email Security Appliance (ESA), Cisco Content Security Management Appliance (SMA), and Cisco Web Security App… |
CWE-522
Insufficiently Protected Credentials |
CVE-2020-3547 | 2024-11-21 14:31 | 2020-09-4 | Show | GitHub Exploit DB Packet Storm |