Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 27, 2026, noon
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 229581 | 4.3 | 警告 | pro2col | - | Pro2col Stingray FTS の verify_login.jsp におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-4168 | 2012-12-20 18:52 | 2008-09-22 | Show | GitHub Exploit DB Packet Storm |
| 229582 | 7.5 | 危険 | zanfi solutions | - | Zanfi CMS lite および Jaw Portal の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4159 | 2012-12-20 18:52 | 2008-09-22 | Show | GitHub Exploit DB Packet Storm |
| 229583 | 6.8 | 警告 | zanfi solutions | - | Zanfi CMS lite の index.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2008-4158 | 2012-12-20 18:52 | 2008-09-22 | Show | GitHub Exploit DB Packet Storm |
| 229584 | 7.5 | 危険 | Vastal I-Tech & Co. | - | Vastal I-Tech phpVID の groups.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4157 | 2012-12-20 18:52 | 2008-09-22 | Show | GitHub Exploit DB Packet Storm |
| 229585 | 7.5 | 危険 | razorecommerce | - | RazorCommerce Shopping Cart の category_search.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-4143 | 2012-12-20 18:52 | 2008-09-24 | Show | GitHub Exploit DB Packet Storm |
| 229586 | 7.5 | 危険 | x10media | - | x10Media x10 Automatic MP3 Script における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2008-4141 | 2012-12-20 18:52 | 2008-09-24 | Show | GitHub Exploit DB Packet Storm |
| 229587 | 10 | 危険 | technote | - | Technote の skin_shop/standard/3_plugin_twindow/twindow_notice.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2008-4138 | 2012-12-20 18:52 | 2008-09-24 | Show | GitHub Exploit DB Packet Storm |
| 229588 | 7.8 | 危険 | s60 | - | Nokia E90 Communicator および Nseries N82 上で稼動している Symbian OS におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2008-4135 | 2012-12-20 18:52 | 2008-09-19 | Show | GitHub Exploit DB Packet Storm |
| 229589 | 7.5 | 危険 | phprealty | - | phpRealty の manager/static/view.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2008-4134 | 2012-12-20 18:52 | 2008-09-19 | Show | GitHub Exploit DB Packet Storm |
| 229590 | 5 | 警告 | phpBB | - | phpBB の search 関数における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2008-4125 | 2012-12-20 18:52 | 2008-09-18 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 27, 2026, 4:52 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 221801 | 7.8 |
HIGH
Local |
android | In WelcomeActivity.java and related files, there is a possible permissions bypass due to a partially provisioned Device Policy Client. This could lead to local escalation of privilege, leaving an Adm… |
CWE-269
Improper Privilege Management |
CVE-2019-2193 | 2024-11-21 13:40 | 2019-11-14 | Show | GitHub Exploit DB Packet Storm | |
| 221802 | 7.8 |
HIGH
Local |
android | In call of SliceProvider.java, there is a possible permissions bypass due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed… |
CWE-20
Improper Input Validation |
CVE-2019-2192 | 2024-11-21 13:40 | 2019-11-14 | Show | GitHub Exploit DB Packet Storm | |
| 221803 | 9.8 |
CRITICAL
Network |
android | In okToConnect of HidHostService.java, there is a possible permission bypass due to an incorrect state check. This could lead to remote escalation of privilege with no additional execution privileges… |
NVD-CWE-noinfo
|
CVE-2019-2036 | 2024-11-21 13:40 | 2019-11-14 | Show | GitHub Exploit DB Packet Storm | |
| 221804 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9615_firmware mdm9640_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware qcs405_firmware qcs605_firmware
Memory corruption while accessing the memory as payload size is not validated before access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT,…
|
CWE-787
|
Out-of-bounds Write
CVE-2019-2332
|
2024-11-21 13:40 |
2019-11-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 221805 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9615_firmware mdm9640_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware qcs405_firmware qcs605_firmware
Possible Integer overflow because of subtracting two integers without checking if the result would overflow or not in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industri…
|
CWE-190
|
Integer Overflow or Wraparound
CVE-2019-2331
|
2024-11-21 13:40 |
2019-11-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 221806 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware qcs405_firmware qcs605_firmware qualcomm_215_firmw… |
Out of boundary access due to token received from ADSP and is used without validation as an index into the array in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial… |
CWE-129
Improper Validation of Array Index |
CVE-2019-2325 | 2024-11-21 13:40 | 2019-11-7 | Show | GitHub Exploit DB Packet Storm |
| 221807 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9615_firmware mdm9640_firmware mdm9650_firmware msm8909w_firmware sd_210_firmware sd_212_firmware sd_205_firmware s… |
When ADSP is compromised, the audio port index that`s returned from ADSP might be out of the valid range and leads to out of boundary access in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Co… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2019-2324 | 2024-11-21 13:40 | 2019-11-7 | Show | GitHub Exploit DB Packet Storm |
| 221808 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware qcs405_firmware qcs605_firmware qualcomm_215_firmw… |
Lack of check to ensure crypto engine data passed by user is initialized can result in bus error in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… |
CWE-1187
Use of Uninitialized Resource |
CVE-2019-2323 | 2024-11-21 13:40 | 2019-11-7 | Show | GitHub Exploit DB Packet Storm |
| 221809 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8017_firmware apq8053_firmware apq8096au_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8905_firmware msm8909_firmware… |
While processing vendor command which contains corrupted channel count, an integer overflow occurs and finally will lead to heap overflow. in Snapdragon Auto, Snapdragon Consumer Electronics Connecti… |
CWE-787 CWE-190 Out-of-bounds Write Integer Overflow or Wraparound |
CVE-2019-2302 | 2024-11-21 13:40 | 2019-11-7 | Show | GitHub Exploit DB Packet Storm |
| 221810 | 9.8 |
CRITICAL
Network |
qualcomm |
msm8909w_firmware msm8996au_firmware qcs605_firmware qualcomm_215_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_425_firmware sd_427_firmware sd_430_firmware
Out of bound write issue is observed while giving information about properties that have been set so far for playing video in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon …
|
CWE-787
|
Out-of-bounds Write
CVE-2019-2285
|
2024-11-21 13:40 |
2019-11-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|