Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 2, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 253931 | 7.5 | 危険 | 日立 | - | Cosminexus、Processing Kit for XML および Hitachi Developer's Kit for Java におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
- | 2010-02-2 11:42 | 2009-12-22 | Show | GitHub Exploit DB Packet Storm |
| 253932 | 4.3 | 警告 | VMware | - | 複数の VMware 製品におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-3731 | 2010-02-1 11:52 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
| 253933 | 10 | 危険 | サイバートラスト株式会社 Linux |
- | Linux kernel および gxsnmp パッケージの asn1 の実装における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2008-1673 | 2010-02-1 11:51 | 2008-06-10 | Show | GitHub Exploit DB Packet Storm |
| 253934 | 10 | 危険 | ヒューレット・パッカード | - | 複数の Symantec 製品の VRTSweb における任意のコードを実行される脆弱性 |
CWE-287
不適切な認証 |
CVE-2009-3027 | 2010-02-1 11:51 | 2009-12-8 | Show | GitHub Exploit DB Packet Storm |
| 253935 | 9.3 | 危険 | KDE project Glyph & Cog, LLC GNOME Project サイバートラスト株式会社 レッドハット |
- | Xpdf、gpdf および kpdf の FoFiType1::parse 関数における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-4035 | 2010-01-29 09:54 | 2009-12-16 | Show | GitHub Exploit DB Packet Storm |
| 253936 | 7.8 | 危険 | Mozilla Foundation | - | Mozilla Firefox/SeaMonkey の GeckoActiveXObject 関数における重要な情報を取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2009-3987 | 2010-01-29 09:54 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
| 253937 | 7.6 | 危険 | サイバートラスト株式会社 Mozilla Foundation レッドハット |
- | Mozilla Firefox/SeaMonkey における任意の JavaScript を実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3986 | 2010-01-29 09:54 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
| 253938 | 6.8 | 警告 | サイバートラスト株式会社 Mozilla Foundation レッドハット |
- | Mozilla Firefox/SeaMonkey におけるコンテンツを偽装される脆弱性 |
CWE-Other
その他 |
CVE-2009-3985 | 2010-01-29 09:53 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
| 253939 | 6.8 | 警告 | サイバートラスト株式会社 Mozilla Foundation レッドハット |
- | Mozilla Firefox/SeaMonkey における http URL または file URL の SSL インジケータを偽装される脆弱性 |
CWE-Other
その他 |
CVE-2009-3984 | 2010-01-29 09:53 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
| 253940 | 6.8 | 警告 | サイバートラスト株式会社 Mozilla Foundation レッドハット |
- | Mozilla Firefox/SeaMonkey における認証されたリクエストを任意のアプリケーションに送信される脆弱性 |
CWE-Other
その他 |
CVE-2009-3983 | 2010-01-29 09:53 | 2009-12-15 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 3, 2026, 4:06 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 222821 | 7.8 |
HIGH
Local |
qualcomm |
apq8053_firmware apq8096au_firmware mdm9607_firmware msm8909w_firmware msm8996_firmware msm8996au_firmware qcn7605_firmware qcs605_firmware sc8180x_firmware sda845_firmware… |
While IPA driver processes route add rule IOCTL, there is no input validation of the rule ID prior to adding the rule to the IPA HW commit list in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn… |
CWE-20
Improper Input Validation |
CVE-2019-14047 | 2024-11-21 13:25 | 2020-06-22 | Show | GitHub Exploit DB Packet Storm |
| 222822 | 7.8 |
HIGH
Local |
qualcomm |
kamorta_firmware msm8998_firmware qcs404_firmware qcs605_firmware sda660_firmware sda845_firmware sdm630_firmware sdm636_firmware sdm660_firmware sdm670_firmware sdm710_… |
Improper permissions in XBL_SEC region enable user to update XBL_SEC code and data and divert the RAM dump path to normal cold boot path in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Ind… |
NVD-CWE-Other
|
CVE-2019-14054 | 2024-11-21 13:25 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 222823 | 7.1 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8053_firmware apq8096au_firmware apq8098_firmware ipq4019_firmware ipq8074_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware mdm9640_firmware… |
When attempting to create a new XFRM policy, a stack out-of-bounds read will occur if the user provides a template where the mode is set to a value that does not resolve to a valid XFRM mode in Snapd… |
CWE-125
Out-of-bounds Read |
CVE-2019-14053 | 2024-11-21 13:25 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 222824 | 7.1 |
HIGH
Local |
qualcomm |
kamorta_firmware mdm9150_firmware mdm9205_firmware mdm9650_firmware msm8998_firmware nicobar_firmware qcs404_firmware qcs405_firmware qcs605_firmware rennell_firmware sa… |
Out of bound read in Fingerprint application due to requested data is being used without length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdra… |
CWE-125
Out-of-bounds Read |
CVE-2019-14043 | 2024-11-21 13:25 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 222825 | 7.1 |
HIGH
Local |
qualcomm |
kamorta_firmware mdm9205_firmware nicobar_firmware qcs404_firmware qcs405_firmware qcs605_firmware rennell_firmware sa415m_firmware sa6155p_firmware sc7180_firmware sc81… |
Out of bound read in in fingerprint application due to requested data assigned to a local buffer without length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consu… |
CWE-125
Out-of-bounds Read |
CVE-2019-14042 | 2024-11-21 13:25 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 222826 | 7.1 |
HIGH
Local |
qualcomm |
apq8053_firmware apq8098_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8905_firmware msm8909w_firmware msm8917_firmware<… |
Out of bound read in adm call back function due to incorrect boundary check for payload in command response in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT,… |
CWE-125
Out-of-bounds Read |
CVE-2019-14039 | 2024-11-21 13:25 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 222827 | 7.1 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8053_firmware apq8098_firmware mdm9206_firmware mdm9207c_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8905_firmware msm8909w_firmware<… |
Buffer over-read in ADSP parse function due to lack of check for availability of sufficient data payload received in command response in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, … |
CWE-20 CWE-125 Improper Input Validation Out-of-bounds Read |
CVE-2019-14038 | 2024-11-21 13:25 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 222828 | 9.1 |
CRITICAL
Network |
qualcomm |
apq8053_firmware apq8096_firmware apq8096au_firmware apq8098_firmware mdm9150_firmware mdm9205_firmware mdm9206_firmware mdm9607_firmware mdm9615_firmware mdm9625_firmware<… |
Multiple Read overflows issue due to improper length check while decoding tau reject/tau accept/detach request/attach reject/attach accept in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer … |
CWE-125
Out-of-bounds Read |
CVE-2019-14033 | 2024-11-21 13:25 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |
| 222829 | 7.5 |
HIGH
Network |
qualcomm |
apq8096au_firmware mdm9205_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8905_firmware msm8909_firmware msm8917_firmware msm8920_firmware<… |
Error occurs While extracting the ipv6_header having an invalid length due to lack of length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrag… |
CWE-617
Reachable Assertion |
CVE-2019-14022 | 2024-11-21 13:25 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |
| 222830 | 7.8 |
HIGH
Local |
qualcomm |
apq8096au_firmware apq8098_firmware mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8905_firmware msm8909_firmware msm8909w_firmware… |
Possible buffer overrun when processing EFS filename and payload sent over diag interface due to lack of check for filename length and payload size received in Snapdragon Auto, Snapdragon Compute, Sn… |
CWE-120
Classic Buffer Overflow |
CVE-2019-14021 | 2024-11-21 13:25 | 2020-04-16 | Show | GitHub Exploit DB Packet Storm |