Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 27, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 250721 | 6.8 | 警告 | CMS Made Simple | - | CMS Made Simple における管理者パスワードのリセット要求の管理者認証をハイジャックされる脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2010-3884 | 2012-03-27 18:42 | 2010-10-8 | Show | GitHub Exploit DB Packet Storm |
| 250722 | 6.8 | 警告 | CMS Made Simple | - | CMS Made Simple の Change Group Permissions モジュールにおけるクロスサイトリクエストフォージェリ脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2010-3883 | 2012-03-27 18:42 | 2010-10-8 | Show | GitHub Exploit DB Packet Storm |
| 250723 | 4.3 | 警告 | CMS Made Simple | - | CMS Made Simple におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-3882 | 2012-03-27 18:42 | 2010-10-8 | Show | GitHub Exploit DB Packet Storm |
| 250724 | 4.3 | 警告 | レッドハット | - | Red Hat JBoss Enterprise Application Platform の JMX Console におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2010-3878 | 2012-03-27 18:42 | 2010-12-1 | Show | GitHub Exploit DB Packet Storm |
| 250725 | 4.3 | 警告 | Mahara | - | Mahara の blocktype/groupviews/theme/raw/groupviews.tpl におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-3871 | 2012-03-27 18:42 | 2010-11-9 | Show | GitHub Exploit DB Packet Storm |
| 250726 | 4 | 警告 | レッドハット | - | RHCS および Dogtag Certificate System における任意の認証番号を生成される脆弱性 |
CWE-310
暗号の問題 |
CVE-2010-3869 | 2012-03-27 18:42 | 2010-11-8 | Show | GitHub Exploit DB Packet Storm |
| 250727 | 5.8 | 警告 | レッドハット | - | RHCS および Dogtag Certificate System における PIN を取得される脆弱性 |
CWE-287
不適切な認証 |
CVE-2010-3868 | 2012-03-27 18:42 | 2010-11-8 | Show | GitHub Exploit DB Packet Storm |
| 250728 | 2.6 | 注意 | レッドハット | - | Red Hat JBoss Enterprise Application Platform および JBoss Enterprise Web Platform の Boss Remoting におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-3862 | 2012-03-27 18:42 | 2010-12-8 | Show | GitHub Exploit DB Packet Storm |
| 250729 | 6.4 | 警告 | レッドハット | - | Red Hat Conga の Luciにおける repoze.who 認証をバイパスすることが容易になる脆弱性 |
CWE-287
不適切な認証 |
CVE-2010-3852 | 2012-03-27 18:42 | 2010-11-2 | Show | GitHub Exploit DB Packet Storm |
| 250730 | 4.9 | 警告 | Linux | - | Linux kernel の ec_dev_ioctl 関数におけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-3850 | 2012-03-27 18:42 | 2010-12-30 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 27, 2026, 4:52 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 196041 | 6.7 |
MEDIUM
Local |
tenable | nessus_agent | Nessus Agent 8.3.0 and earlier was found to contain a local privilege escalation vulnerability which could allow an authenticated, local administrator to run specific executables on the Nessus Agent … |
NVD-CWE-noinfo
|
CVE-2021-20117 | 2024-11-21 14:45 | 2021-09-9 | Show | GitHub Exploit DB Packet Storm |
| 196042 | 7.5 |
HIGH
Network |
qualcomm |
aqt1000_firmware ar8035_firmware csr8811_firmware csrb31024_firmware ipq5010_firmware ipq5018_firmware ipq6000_firmware ipq6005_firmware ipq6010_firmware ipq6018_firmware
Possible assertion due to lack of physical layer state validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Industrial …
|
CWE-617
|
Reachable Assertion
CVE-2021-1971
|
2024-11-21 14:45 |
2021-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196043 | 7.5 |
HIGH
Network |
qualcomm |
aqt1000_firmware ar8035_firmware ar9380_firmware csr8811_firmware csrb31024_firmware fsm10055_firmware fsm10056_firmware ipq4018_firmware ipq4019_firmware ipq4028_firmware<… |
Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snap… |
CWE-125
Out-of-bounds Read |
CVE-2021-1974 | 2024-11-21 14:45 | 2021-09-9 | Show | GitHub Exploit DB Packet Storm |
| 196044 | 6.7 |
MEDIUM
Local |
qualcomm |
apq8009w_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware ar8035_firmware csra6620_firmware csra6640_firmware fsm10055_firmware fsm10056_firmware mdm9150_firmwa… |
Possible use-after-free due to lack of validation for the rule count in filter table in IPA driver in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… |
CWE-416
Use After Free |
CVE-2021-1963 | 2024-11-21 14:45 | 2021-09-9 | Show | GitHub Exploit DB Packet Storm |
| 196045 | 6.7 |
MEDIUM
Local |
qualcomm |
aqt1000_firmware ar9380_firmware fsm10055_firmware fsm10056_firmware ipq8064_firmware ipq8065_firmware ipq8068_firmware ipq8069_firmware mdm9150_firmware qca6391_firmware
Buffer Overflow while processing IOCTL for getting peripheral endpoint information there is no proper validation for input maximum endpoint pair and its size in Snapdragon Auto, Snapdragon Consumer I…
|
CWE-120
|
Classic Buffer Overflow
CVE-2021-1962
|
2024-11-21 14:45 |
2021-09-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 196046 | 6.7 |
MEDIUM
Local |
qualcomm |
apq8009_firmware apq8053_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware ar8035_firmware csra6620_firmware csra6640_firmware fsm10055_firmware fsm10056_firmwar… |
Possible buffer overflow due to lack of offset length check while updating the buffer value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Indust… |
CWE-120
Classic Buffer Overflow |
CVE-2021-1961 | 2024-11-21 14:45 | 2021-09-9 | Show | GitHub Exploit DB Packet Storm |
| 196047 | 6.5 |
MEDIUM
Adjacent |
qualcomm |
aqt1000_firmware ar8031_firmware ar8035_firmware csra6620_firmware csra6640_firmware csrb31024_firmware ipq5010_firmware ipq5018_firmware ipq5028_firmware qca1062_firmware<… |
Improper handling of ASB-C broadcast packets with crafted opcode in LMP can lead to uncontrolled resource consumption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu… |
CWE-20
Improper Input Validation |
CVE-2021-1960 | 2024-11-21 14:45 | 2021-09-9 | Show | GitHub Exploit DB Packet Storm |
| 196048 | 6.4 |
MEDIUM
Local |
qualcomm |
qca6574a_firmware qca6574au_firmware qca6595_firmware qca6595au_firmware qca6696_firmware sa6145p_firmware sa6150p_firmware sa6155p_firmware sa8145p_firmware sa8150p_firmwa… |
A race condition in fastrpc kernel driver for dynamic process creation can lead to use after free scenario in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables |
CWE-362
Race Condition |
CVE-2021-1958 | 2024-11-21 14:45 | 2021-09-9 | Show | GitHub Exploit DB Packet Storm |
| 196049 | 6.5 |
MEDIUM
Adjacent |
qualcomm |
apq8017_firmware qca6174a_firmware qca6390_firmware qca6391_firmware qca6421_firmware qca6426_firmware qca6431_firmware qca6436_firmware qca6574au_firmware qca6696_firmware… |
Improper Access Control when ACL link encryption is failed and ACL link is not disconnected during reconnection with paired device in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sna… |
NVD-CWE-Other
|
CVE-2021-1957 | 2024-11-21 14:45 | 2021-09-9 | Show | GitHub Exploit DB Packet Storm |
| 196050 | 6.5 |
MEDIUM
Adjacent |
qualcomm |
aqt1000_firmware ar8035_firmware csrb31024_firmware qca6175a_firmware qca6390_firmware qca6391_firmware qca6420_firmware qca6430_firmware qca6564a_firmware qca6564au_firmwa… |
Improper handling of ASB-U packet with L2CAP channel ID by slave host can lead to interference with piconet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electr… |
NVD-CWE-Other
|
CVE-2021-1956 | 2024-11-21 14:45 | 2021-09-9 | Show | GitHub Exploit DB Packet Storm |