Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 24, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 230591 | 4.3 | 警告 | RSAセキュリティ | - | RSA KEON Registration Authority Web Interface におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2007-5703 | 2012-12-20 18:33 | 2007-10-29 | Show | GitHub Exploit DB Packet Storm |
| 230592 | 6.8 | 警告 | phpimage | - | PHP Image における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2007-5697 | 2012-12-20 18:33 | 2007-10-29 | Show | GitHub Exploit DB Packet Storm |
| 230593 | 6.8 | 警告 | phpbasic | - | phpBasic の includes.php における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2007-5696 | 2012-12-20 18:33 | 2007-10-29 | Show | GitHub Exploit DB Packet Storm |
| 230594 | 6.4 | 警告 | sitebar | - | SiteBar の command.php におけるオープンリダイレクトの脆弱性 |
CWE-59
リンク解釈の問題 |
CVE-2007-5695 | 2012-12-20 18:33 | 2007-10-29 | Show | GitHub Exploit DB Packet Storm |
| 230595 | 6.8 | 警告 | sitebar | - | SiteBar の translator.php における絶対パストラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2007-5694 | 2012-12-20 18:33 | 2007-10-29 | Show | GitHub Exploit DB Packet Storm |
| 230596 | 6 | 警告 | sitebar | - | SiteBar の translator.php における任意の PHP コードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2007-5693 | 2012-12-20 18:33 | 2007-10-29 | Show | GitHub Exploit DB Packet Storm |
| 230597 | 4.3 | 警告 | sitebar | - | SiteBar におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2007-5692 | 2012-12-20 18:33 | 2007-10-29 | Show | GitHub Exploit DB Packet Storm |
| 230598 | 4.9 | 警告 | rPath, Inc | - | rPath Linux の initscripts における認証試行の重要な情報を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2007-5686 | 2012-12-20 18:33 | 2007-10-11 | Show | GitHub Exploit DB Packet Storm |
| 230599 | 5 | 警告 | serverkit | - | shttp の safe_path 関数におけるディレクトリトラバーサル攻撃を実行される脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2007-5685 | 2012-12-20 18:33 | 2007-10-28 | Show | GitHub Exploit DB Packet Storm |
| 230600 | 7.5 | 危険 | Tiki Software Community Association | - | TikiWiki におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2007-5684 | 2012-12-20 18:33 | 2007-10-23 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 24, 2026, 4:05 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 213821 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8053_firmware apq8064au_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware ar8035_firmware ar8151_firmware<… |
When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting in a Use After Free condition in Snapdragon Auto, Snapdragon… |
CWE-416
Use After Free |
CVE-2020-11234 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 213822 | 6.7 |
MEDIUM
Local |
qualcomm |
apq8017_firmware apq8053_firmware aqt1000_firmware msm8917_firmware msm8953_firmware pm215_firmware pm3003a_firmware pm439_firmware pm6125_firmware pm6150_firmware pm615… |
Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in turn can lead to heap corruption in Snapdragon Compute, Snapdragon Connectivity, … |
CWE-415
Double Free |
CVE-2020-11231 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 213823 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar8035_firmware ar8151_firmware
Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons…
|
CWE-787 |
CWE-129 Out-of-bounds Write Improper Validation of Array Index
CVE-2020-11227
|
2024-11-21 13:57 |
2021-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 213824 | 5.5 |
MEDIUM
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar8035_firmware ar8151_firmware
Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insufficient checks in the syscall handler and leads to information disclosu…
|
CWE-200
|
Information Exposure
CVE-2020-11221
|
2024-11-21 13:57 |
2021-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 213825 | 5.5 |
MEDIUM
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar8035_firmware ar8151_firmware
HLOS to access EL3 stack canary by just mapping imem region due to Improper access control and can lead to information exposure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr…
|
CWE-200
|
Information Exposure
CVE-2020-11199
|
2024-11-21 13:57 |
2021-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 213826 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8053_firmware apq8064au_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware ar8035_firmware ar8151_firmware<… |
Use after free in GPU driver while mapping the user memory to GPU memory due to improper check of referenced memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consume… |
CWE-416
Use After Free |
CVE-2020-11309 | 2024-11-21 13:57 | 2021-03-17 | Show | GitHub Exploit DB Packet Storm |
| 213827 | 6.8 |
MEDIUM
Physics |
qualcomm |
apq8009_firmware aqt1000_firmware ar8031_firmware ar8035_firmware ar8151_firmware csra6620_firmware csra6640_firmware csrb31024_firmware fsm10055_firmware fsm10056_firmware… |
Buffer overflow occurs when trying to convert ASCII string to Unicode string if the actual size is more than required in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu… |
CWE-129
Improper Validation of Array Index |
CVE-2020-11308 | 2024-11-21 13:57 | 2021-03-17 | Show | GitHub Exploit DB Packet Storm |
| 213828 | 9.1 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar6003_firmware ar8151_firmware
Potential out of bound read exception when UE receives unusually large number of padding octets in the beginning of ROHC header in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr…
|
CWE-125
|
Out-of-bounds Read
CVE-2020-11166
|
2024-11-21 13:57 |
2021-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 213829 | 6.8 |
MEDIUM
Physics |
qualcomm |
apq8009_firmware apq8053_firmware mdm9206_firmware pm8909_firmware pm8916_firmware pm8953_firmware pmd9607_firmware pmi8952_firmware qca9367_firmware qca9377_firmware sm… |
Integer overflow in boot due to improper length check on arguments received in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2020-11305 | 2024-11-21 13:57 | 2021-03-17 | Show | GitHub Exploit DB Packet Storm |
| 213830 | 6.4 |
MEDIUM
Local |
qualcomm |
aqt1000_firmware fsm10055_firmware pm3003a_firmware pm7150a_firmware pm7150l_firmware pm7250_firmware pm7250b_firmware pm7350c_firmware pm8004_firmware pm8008_firmware p… |
Potential arbitrary memory corruption when the qseecom driver updates ion physical addresses in the buffer as it exposes a physical address to user land in Snapdragon Auto, Snapdragon Compute, Snapdr… |
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition |
CVE-2020-11230 | 2024-11-21 13:57 | 2021-03-17 | Show | GitHub Exploit DB Packet Storm |