Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 21, 2026, 6:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 249891 | 6 | 警告 | baconmap | - | BaconMap の admin/updatelist.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-4801 | 2012-03-27 18:42 | 2011-04-26 | Show | GitHub Exploit DB Packet Storm |
| 249892 | 7.5 | 危険 | baconmap | - | BaconMap の doadd.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4800 | 2012-03-27 18:42 | 2011-04-26 | Show | GitHub Exploit DB Packet Storm |
| 249893 | 6.8 | 警告 | Chipmunk Scripts | - | Chipmunk Pwngame における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4799 | 2012-03-27 18:42 | 2011-04-26 | Show | GitHub Exploit DB Packet Storm |
| 249894 | 6.8 | 警告 | OrangeHRM | - | OrangeHRM におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-4798 | 2012-03-27 18:42 | 2011-04-26 | Show | GitHub Exploit DB Packet Storm |
| 249895 | 7.5 | 危険 | truworthit | - | Truworth Flex Timesheet のログインフォームにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4797 | 2012-03-27 18:42 | 2011-04-26 | Show | GitHub Exploit DB Packet Storm |
| 249896 | 7.5 | 危険 | phpyun | - | PHPYun における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4796 | 2012-03-27 18:42 | 2011-04-26 | Show | GitHub Exploit DB Packet Storm |
| 249897 | 7.5 | 危険 | joomlaseller Joomla! |
- | Joomla! の com_jscalendar コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4795 | 2012-03-27 18:42 | 2011-04-26 | Show | GitHub Exploit DB Packet Storm |
| 249898 | 4.3 | 警告 | joomlaseller Joomla! |
- | Joomla! の com_jscalendar コンポーネントにおけるクロスサイトスクリプティング脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4794 | 2012-03-27 18:42 | 2011-04-26 | Show | GitHub Exploit DB Packet Storm |
| 249899 | 7.5 | 危険 | site2nite | - | Site2Nite Auto e-Manager の detail.asp における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4793 | 2012-03-27 18:42 | 2011-04-26 | Show | GitHub Exploit DB Packet Storm |
| 249900 | 4.3 | 警告 | openit | - | OPEN IT OverLook の title.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4792 | 2012-03-27 18:42 | 2011-04-26 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 22, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 213861 | 6.4 |
MEDIUM
Local |
qualcomm |
msm8909w sdm630 qca6174a qca6574au qca6584au qca9377 msm8976 msm8937 msm8952 apq8096au msm8996au msm8917 sd450 sd835 sdx24 qcs605 sd855 qcs405 ap… |
Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between accessing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer I… |
CWE-362
Race Condition |
CVE-2020-11152 | 2024-11-21 13:56 | 2021-01-21 | Show | GitHub Exploit DB Packet Storm |
| 213862 | 6.4 |
MEDIUM
Local |
qualcomm |
qca6574au qca6584au sdx55 sa6155p qca6390 qcm4290 qcs4290 sa8150p sa8155 sa8195p sda429w sdx55m sm7250p sd675 pm3003a pm6125 pm6150 pm6150a pm615… |
Race condition occurs while calling user space ioctl from two different threads can results to use after free issue in video in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago… |
CWE-362 CWE-416 Race Condition Use After Free |
CVE-2020-11151 | 2024-11-21 13:56 | 2021-01-21 | Show | GitHub Exploit DB Packet Storm |
| 213863 | 6.7 |
MEDIUM
Local |
qualcomm |
qca6574au msm8917 qcs605 sd855 apq8017 apq8053 sdx55 msm8953 sa6155p qca6390 sdm429w sa8150p sa8155 sa8195p sda429w sdx55m sm7250p sd429 sd439
Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and meantime close is triggered and callback instance is deleted in Snapdragon Auto, S…
|
CWE-416
|
Use After Free
CVE-2020-11148
|
2024-11-21 13:56 |
2021-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 213864 | 6.7 |
MEDIUM
Local |
qualcomm |
qca6174a qca6574au qca6584au qca9377 qca9379 qca6574 qca6564 sd210 sd205 sdx24 qcs605 sd855 qca4020 qcs405 sdx55 sa6155p qca6390 sdm429w sa6155
Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset manipulation of pointer in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn…
|
CWE-119
|
Incorrect Access of Indexable Resource ('Range Error')
CVE-2020-11150
|
2024-11-21 13:56 |
2021-01-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 213865 | 6.7 |
MEDIUM
Local |
qualcomm |
mdm9650 sdx20 qca6174a qca6574au qca6584au qca9377 qca9379 apq8096au qca6574 qca6564 qcs605 qca4020 qcs405 apq8053 sd855 sdx24 sd205 sd210 qca639… |
Out of bound access due to usage of an out-of-range pointer offset in the camera driver. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industria… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2020-11149 | 2024-11-21 13:56 | 2021-01-21 | Show | GitHub Exploit DB Packet Storm |
| 213866 | 7.8 |
HIGH
Local |
qualcomm |
qca6174a qca6574au qca6584au qca9379 msm8937 qca6574 qca6564 sd210 sd205 sd845 qcs605 sd855 qca4020 qcs405 sdx55 sa6155p qca6390 sdm429w apq8076<… |
Out of bound write while copying data using IOCTL due to lack of check of array index received from user in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snap… |
CWE-129
Improper Validation of Array Index |
CVE-2020-11146 | 2024-11-21 13:56 | 2021-01-21 | Show | GitHub Exploit DB Packet Storm |
| 213867 | 7.5 |
HIGH
Network |
qualcomm |
mdm9206 mdm9607 mdm9650 msm8909w mdm9635m mdm9655 mdm9615 mdm9625 mdm9640 mdm9645 sdx20 sdm630 qca6174a qca6574au qca6584 qca6584au qca9377 qca9379<… |
Divide by zero issue can happen while updating delta extension header due to improper validation of master SN and extension header SN in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, … |
CWE-369
Divide By Zero |
CVE-2020-11145 | 2024-11-21 13:56 | 2021-01-21 | Show | GitHub Exploit DB Packet Storm |
| 213868 | 9.1 |
CRITICAL
Network |
qualcomm |
mdm9206 mdm9607 mdm9650 msm8909w mdm9635m mdm9655 mdm9615 mdm9625 mdm9640 mdm9645 sdx20 sdm630 qca6174a qca6574au qca6584 qca6584au qca9377 qca9379<… |
Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago… |
CWE-20 CWE-125 Improper Input Validation Out-of-bounds Read |
CVE-2020-11144 | 2024-11-21 13:56 | 2021-01-21 | Show | GitHub Exploit DB Packet Storm |
| 213869 | 9.8 |
CRITICAL
Network |
qualcomm |
msm8960 mdm9650 mdm9635m mdm9655 mdm9615 mdm9625 mdm9640 mdm9645 msm8937 msm8952 apq8096au msm8976 qca6584au qca6584 qca6574au qca6174a sdm630 qca93… |
Out of bound memory access during music playback with modified content due to copying data without checking destination buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn… |
CWE-787
Out-of-bounds Write |
CVE-2020-11143 | 2024-11-21 13:56 | 2021-01-21 | Show | GitHub Exploit DB Packet Storm |
| 213870 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9650 mdm9635m mdm9655 mdm9625 mdm9640 mdm9645 sdm630 qca6174a qca6574au qca6584au qca9379 msm8976 msm8937 msm8952 apq8096au msm8996au msm8917 qca… |
Out of bound memory access during music playback with ALAC modified content due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdr… |
CWE-787
Out-of-bounds Write |
CVE-2020-11140 | 2024-11-21 13:56 | 2021-01-21 | Show | GitHub Exploit DB Packet Storm |