Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 15, 2026, 10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 246941 | 7.2 | 危険 | caudium | - | Caudium の configvar における任意のファイルを上書きされる脆弱性 |
CWE-59
リンク解釈の問題 |
CVE-2008-3883 | 2012-06-26 16:02 | 2008-09-2 | Show | GitHub Exploit DB Packet Storm |
| 246942 | 9.3 | 危険 | acoustica | - | Acoustica Mixcraft におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2008-3877 | 2012-06-26 16:02 | 2008-09-2 | Show | GitHub Exploit DB Packet Storm |
| 246943 | 1.9 | 注意 | アップル | - | Apple iPhone におけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2008-3876 | 2012-06-26 16:02 | 2008-09-2 | Show | GitHub Exploit DB Packet Storm |
| 246944 | 6.8 | 警告 | cce-interact | - | Interact におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2008-3868 | 2012-06-26 16:02 | 2008-11-3 | Show | GitHub Exploit DB Packet Storm |
| 246945 | 6.8 | 警告 | cce-interact | - | Interact の spaces/emailuser.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-3867 | 2012-06-26 16:02 | 2008-11-3 | Show | GitHub Exploit DB Packet Storm |
| 246946 | 5 | 警告 | davlin | - | Davlin Thickbox Gallery における管理者のユーザ名および MD5 パスワードハッシュを取得される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2008-3859 | 2012-06-26 16:02 | 2008-08-29 | Show | GitHub Exploit DB Packet Storm |
| 246947 | 4.3 | 警告 | Accellion | - | Accellion File Transfer におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-3850 | 2012-06-26 16:02 | 2008-08-27 | Show | GitHub Exploit DB Packet Storm |
| 246948 | 4.3 | 警告 | civic-cms | - | Civic Website Manager の カレンダコントローラにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-3849 | 2012-06-26 16:02 | 2008-08-27 | Show | GitHub Exploit DB Packet Storm |
| 246949 | 4.3 | 警告 | aguestbook | - | ANG におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2008-3847 | 2012-06-26 16:02 | 2008-08-27 | Show | GitHub Exploit DB Packet Storm |
| 246950 | 7.5 | 危険 | craftysyntax | - | CSLH における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2008-3845 | 2012-06-26 16:02 | 2008-08-27 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 15, 2026, 4:10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 219541 | 8.8 |
HIGH
Adjacent |
qualcomm |
apq8009_firmware apq8009w_firmware apq8016_firmware apq8017_firmware apq8037_firmware apq8039_firmware apq8052_firmware apq8053_firmware apq8056_firmware apq8064au_firmware… |
Possible memory corruption while processing EAPOL frames due to lack of validation of key length before using it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer E… |
CWE-190
Integer Overflow or Wraparound |
CVE-2020-11269 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 219542 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8016_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8064au_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware… |
Possible memory corruption and information leakage in sub-system due to lack of check for validity and boundary compliance for parameters that are read from shared MSG RAM in Snapdragon Auto, Snapdra… |
CWE-20 CWE-787 Improper Input Validation Out-of-bounds Write |
CVE-2020-11204 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 219543 | 7.5 |
HIGH
Network |
qualcomm |
sdm630 qca6574au qca6584au qca6574 sd845 ipq8074 sd_636 sd_675 sd_8cx qca8081 qcs605 sd855 qcs405 qcn7605 sdx55 sa6155p qca6390 ipq6018 sa415m
Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,…
|
CWE-203
|
Information Exposure Through Discrepancy
CVE-2020-11287
|
2024-11-21 13:57 |
2021-02-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 219544 | 6.8 |
MEDIUM
Physics |
qualcomm |
mdm9206 mdm9607 mdm9650 msm8909w mdm9655 mdm9640 sdx20 sdm630 qca6174a qca6574au qca6584 qca6584au qca9377 msm8937 apq8096au msm8996au qca6574 sd210… |
An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories like device, interface & endpoint are made together. in Sna… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2020-11286 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 219545 | 8.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar6003_firmware ar8035_firmware
User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn…
|
NVD-CWE-Other
|
CVE-2020-11177
|
2024-11-21 13:57 |
2021-02-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 219546 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8030_firmware apq8037_firmware apq8052_firmware apq8053_firmware apq8056_firmware apq8060a_firmware apq8062_firmware<… |
Out of bound memory access while playing music playbacks with crafted vorbis content due to improper checks in header extraction in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd… |
CWE-120
Classic Buffer Overflow |
CVE-2020-11170 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 219547 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9206 mdm9650 msm8909w sdx20 sdm630 qca6174a qca6574au qca9377 qca9379 msm8937 apq8096au msm8996au msm8917 qca6574 qca6564 sd210 sd205 sd450 sd… |
A buffer overflow can occur when playing an MKV clip due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IO… |
CWE-787
Out-of-bounds Write |
CVE-2020-11283 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 219548 | 7.1 |
HIGH
Local |
qualcomm |
apq8009w_firmware apq8064au_firmware apq8096au_firmware aqt1000_firmware msm8909w_firmware msm8996au_firmware pm215_firmware pm456_firmware pm6125_firmware pm6150_firmware<… |
Stack overflow may occur if GSM/WCDMA broadcast config size received from user is larger than variable length array in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon In… |
CWE-787
Out-of-bounds Write |
CVE-2020-11203 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 219549 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206 mdm9650 msm8909w mdm9655 mdm9615 sdx20 msm8937 apq8096au msm8996au msm8917 sdm630 qca6574 qca9379 qca9377 qca6584au qca6584 qca6574au qca617… |
Improper access control when using mmap with the kgsl driver with a special offset value that can be provided to map the memstore of the GPU to user space in Snapdragon Auto, Snapdragon Compute, Snap… |
NVD-CWE-noinfo
|
CVE-2020-11282 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |
| 219550 | 7.8 |
HIGH
Local |
qualcomm |
aqt1000_firmware csrb31024_firmware pm7150a_firmware pm7150l_firmware pm7250_firmware pm7250b_firmware pm8004_firmware pm8008_firmware pm855_firmware pm855b_firmware pm8… |
Possible memory corruption in BSI module due to improper validation of parameter count in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile |
CWE-129
Improper Validation of Array Index |
CVE-2020-11187 | 2024-11-21 13:57 | 2021-02-22 | Show | GitHub Exploit DB Packet Storm |