Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 9, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 250141 | 4.6 | 警告 | ヒューレット・パッカード IBM オラクル |
- | HP ALM 内の getInstalledPackages 関数における権限を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-4834 | 2011-12-19 15:08 | 2011-12-15 | Show | GitHub Exploit DB Packet Storm |
| 250142 | 7.5 | 危険 | SugarCRM | - | SugarCRM の Leads モジュールにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-4833 | 2011-12-19 15:08 | 2011-12-15 | Show | GitHub Exploit DB Packet Storm |
| 250143 | 7.5 | 危険 | Moxiecode Systems AB phpMyFAQ PHPletter |
- | 複数の製品で使用される inc/function.base.php における PHP コードを挿入される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2011-4825 | 2011-12-19 15:07 | 2011-10-25 | Show | GitHub Exploit DB Packet Storm |
| 250144 | 7.5 | 危険 | The Cacti Group | - | Cacti の auth_login.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2011-4824 | 2011-12-19 15:06 | 2011-09-26 | Show | GitHub Exploit DB Packet Storm |
| 250145 | 4.3 | 警告 | Atlassian | - | Atlassian FishEye のユーザプロファイル機能におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4822 | 2011-12-19 15:05 | 2011-10-24 | Show | GitHub Exploit DB Packet Storm |
| 250146 | 3.6 | 注意 | Artsoft Entertainment | - | Artsoft Entertainment の Rocks'n'Diamonds における任意のファイルを上書きされる脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-4606 | 2011-12-19 15:05 | 2011-12-15 | Show | GitHub Exploit DB Packet Storm |
| 250147 | 4.3 | 警告 | Digium | - | Asterisk の channels/chan_sip.c におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-200
情報漏えい |
CVE-2011-4598 | 2011-12-19 15:03 | 2011-11-2 | Show | GitHub Exploit DB Packet Storm |
| 250148 | 5 | 警告 | Digium | - | Asterisk の UDP 実装での SIP におけるユーザ名を列挙される脆弱性 |
CWE-200
情報漏えい |
CVE-2011-4597 | 2011-12-19 15:01 | 2011-07-18 | Show | GitHub Exploit DB Packet Storm |
| 250149 | 7.5 | 危険 | Caupo.Net | - | CaupoShop Pro および CaupoShop Classic におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-4832 | 2011-12-19 13:44 | 2011-12-15 | Show | GitHub Exploit DB Packet Storm |
| 250150 | 4 | 警告 | David Azoulay | - | Web File Browser の webFileBrowser.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-4831 | 2011-12-19 13:43 | 2011-12-15 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 10, 2026, 4:58 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 211011 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8017_firmware apq8053_firmware aqt1000_firmware csrb31024_firmware msm8917_firmware msm8920_firmware msm8940_firmware msm8953_firmware msm8976_firmware msm8976sg_firmwar… |
Possible buffer overflow while updating ikev2 parameters for delete payloads received during informational exchange due to lack of check of input validation for certain parameters received from the e… |
CWE-129
Improper Validation of Array Index |
CVE-2020-11291 | 2024-11-21 13:57 | 2021-06-9 | Show | GitHub Exploit DB Packet Storm |
| 211012 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar6003_firmware csr6030_firmware<… |
Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snap… |
CWE-120
Classic Buffer Overflow |
CVE-2020-11292 | 2024-11-21 13:57 | 2021-06-9 | Show | GitHub Exploit DB Packet Storm |
| 211013 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8017_firmware apq8053_firmware aqt1000_firmware ar8035_firmware csrb31024_firmware msm8917_firmware msm8920_firmware msm8940_firmware msm8953_firmware msm8976_firmware
While processing server certificate from IPSec server, certificate validation for subject alternative name API can cause heap overflow which can lead to memory corruption in Snapdragon Auto, Snapdrag…
|
CWE-787
|
Out-of-bounds Write
CVE-2020-11176
|
2024-11-21 13:57 |
2021-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 211014 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8053_firmware apq8064au_firmware apq8076_firmware apq8096au_firmware aqt1000_firmware ar7420_firmware ar8031_firmware… |
Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Con… |
CWE-787
Out-of-bounds Write |
CVE-2020-11267 | 2024-11-21 13:57 | 2021-06-9 | Show | GitHub Exploit DB Packet Storm |
| 211015 | 6.5 |
MEDIUM
Local |
qualcomm |
ar7420_firmware ar9580_firmware csr8811_firmware ipq4018_firmware ipq4019_firmware ipq4028_firmware ipq4029_firmware qca10901_firmware qca4024_firmware qca7500_firmware … |
Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired Infrastructure and Networking |
NVD-CWE-Other
|
CVE-2020-11266 | 2024-11-21 13:57 | 2021-06-9 | Show | GitHub Exploit DB Packet Storm |
| 211016 | 5.5 |
MEDIUM
Local |
qualcomm |
ar7420_firmware ar9580_firmware csr8811_firmware ipq4018_firmware ipq4019_firmware ipq4028_firmware ipq4029_firmware qca10901_firmware qca4024_firmware qca7500_firmware … |
Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and Networking |
CWE-125
Out-of-bounds Read |
CVE-2020-11265 | 2024-11-21 13:57 | 2021-06-9 | Show | GitHub Exploit DB Packet Storm |
| 211017 | 8.4 |
HIGH
Local |
qualcomm |
apq8017_firmware apq8053_firmware aqt1000_firmware msm8917_firmware msm8953_firmware pm215_firmware pm3003a_firmware pm4125_firmware pm439_firmware pm456_firmware pm6125… |
An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile |
CWE-908
Use of Uninitialized Resource |
CVE-2020-11260 | 2024-11-21 13:57 | 2021-06-9 | Show | GitHub Exploit DB Packet Storm |
| 211018 | 7.0 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8053_firmware apq8064au_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware ar8035_firmware ar8151_firmware<… |
A race between command submission and destroying the context can cause an invalid context being added to the list leads to use after free issue. in Snapdragon Auto, Snapdragon Compute, Snapdragon Con… |
CWE-362 CWE-416 Race Condition Use After Free |
CVE-2020-11262 | 2024-11-21 13:57 | 2021-06-9 | Show | GitHub Exploit DB Packet Storm |
| 211019 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8064au_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware ar8035_firmware… |
Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Con… |
CWE-20
Improper Input Validation |
CVE-2020-11261 | 2024-11-21 13:57 | 2021-06-9 | Show | GitHub Exploit DB Packet Storm |
| 211020 | 8.8 |
HIGH
Local |
qualcomm |
ar7420_firmware ar9580_firmware csr8811_firmware ipq4018_firmware ipq4019_firmware ipq4028_firmware ipq4029_firmware qca10901_firmware qca4024_firmware qca7500_firmware … |
Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2020-11259 | 2024-11-21 13:57 | 2021-06-9 | Show | GitHub Exploit DB Packet Storm |