Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 8, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 254301 | 7.5 | 危険 | VMware | - | 複数の VMware 製品の WebAccess におけるリクエストの発信元を偽装される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-0686 | 2010-04-21 17:53 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 254302 | 4.3 | 警告 | VMware | - | 複数の VMware 製品の WebAccess におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-1137 | 2010-04-21 17:51 | 2010-03-29 | Show | GitHub Exploit DB Packet Storm |
| 254303 | 4.6 | 警告 | GNU Project サイバートラスト株式会社 レッドハット |
- | GNU Automake の dist または distcheck ルールにおけるコンテンツを変更される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-4029 | 2010-04-21 17:51 | 2009-12-20 | Show | GitHub Exploit DB Packet Storm |
| 254304 | 5 | 警告 | Linux レッドハット |
- | Linux kernel の virtio-net ドライバにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-0741 | 2010-04-21 17:48 | 2010-03-30 | Show | GitHub Exploit DB Packet Storm |
| 254305 | 6.9 | 警告 | mielke レッドハット |
- | brltty の libbrlttybba.so における権限昇格の脆弱性 |
CWE-264 CWE-Other |
CVE-2008-3279 | 2010-04-21 17:47 | 2010-03-30 | Show | GitHub Exploit DB Packet Storm |
| 254306 | 4.3 | 警告 | Mozilla Foundation | - | Mozilla Firefox/SeaMonkey におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-0181 | 2010-04-20 16:42 | 2010-03-30 | Show | GitHub Exploit DB Packet Storm |
| 254307 | 5.8 | 警告 | サイボウズ | - | 複数のサイボウズ製品におけるアクセス制限に関する脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2010-2029 | 2010-04-20 12:01 | 2010-04-20 | Show | GitHub Exploit DB Packet Storm |
| 254308 | 9.3 | 危険 | マイクロソフト | - | Microsoft Internet Explorer の Tabular Data Control ActiveX コントロールにおける任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-0805 | 2010-04-19 19:20 | 2010-03-30 | Show | GitHub Exploit DB Packet Storm |
| 254309 | 9.3 | 危険 | マイクロソフト | - | Microsoft Internet Explorer における任意のコードを実行される脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-0491 | 2010-04-19 19:19 | 2010-03-30 | Show | GitHub Exploit DB Packet Storm |
| 254310 | 4.3 | 警告 | マイクロソフト | - | Microsoft Internet Explorer における同一生成元ポリシーを回避される脆弱性 |
CWE-200
情報漏えい |
CVE-2010-0494 | 2010-04-19 19:19 | 2010-03-30 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 8, 2026, 4:54 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 210511 | 7.8 |
HIGH
Local |
qualcomm |
apq8017_firmware apq8037_firmware apq8053_firmware aqt1000_firmware msm8917_firmware msm8920_firmware msm8937_firmware msm8940_firmware msm8953_firmware pm215_firmware p… |
A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Ind… |
CWE-415
Double Free |
CVE-2020-11246 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 210512 | 7.8 |
HIGH
Local |
qualcomm |
aqt1000_firmware ar8035_firmware pm3003a_firmware pm4125_firmware pm4250_firmware pm6125_firmware pm6150_firmware pm6150a_firmware pm6150l_firmware pm6350_firmware pm640… |
Unintended reads and writes by NS EL2 in access control driver due to lack of check of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapd… |
CWE-190
Integer Overflow or Wraparound |
CVE-2020-11245 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 210513 | 7.8 |
HIGH
Local |
qualcomm |
pm660_firmware pm660a_firmware pm660l_firmware pm855a_firmware pmm855au_firmware qat3514_firmware qat3522_firmware qat3550_firmware qca6564a_firmware qca6564au_firmware … |
User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capture requested contents in Snapdragon Industrial IOT, Snapdragon Mobile |
NVD-CWE-Other
|
CVE-2020-11242 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 210514 | 7.8 |
HIGH
Local |
qualcomm |
csrb31024_firmware pm3003a_firmware pm456_firmware pm6150_firmware pm6150a_firmware pm6150l_firmware pm6250_firmware pm6350_firmware pm7150a_firmware pm7150l_firmware pm… |
Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before accessing it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdra… |
CWE-20
Improper Input Validation |
CVE-2020-11237 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 210515 | 8.8 |
HIGH
Local |
qualcomm |
ar8035_firmware pm4125_firmware pm4250_firmware pm6125_firmware pm6150a_firmware pm6150l_firmware pm6350_firmware pm7250b_firmware pm8008_firmware pmd9655_firmware pmi63… |
Possible memory corruption in RPM region due to improper XPU configuration in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking |
CWE-787
Out-of-bounds Write |
CVE-2020-11210 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 210516 | 5.5 |
MEDIUM
Local |
qualcomm |
csrb31024_firmware pm3003a_firmware pm6150a_firmware pm6150l_firmware pm6350_firmware pm7150a_firmware pm7150l_firmware pm7250_firmware pm7250b_firmware pm8008_firmware … |
Memory corruption due to invalid value of total dimension in the non-histogram type KPI could lead to a denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon M… |
CWE-787
Out-of-bounds Write |
CVE-2020-11236 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 210517 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8053_firmware apq8064au_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware ar8035_firmware ar8151_firmware<… |
When sending a socket event message to a user application, invalid information will be passed if socket is freed by other thread resulting in a Use After Free condition in Snapdragon Auto, Snapdragon… |
CWE-416
Use After Free |
CVE-2020-11234 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 210518 | 6.7 |
MEDIUM
Local |
qualcomm |
apq8017_firmware apq8053_firmware aqt1000_firmware msm8917_firmware msm8953_firmware pm215_firmware pm3003a_firmware pm439_firmware pm6125_firmware pm6150_firmware pm615… |
Two threads call one or both functions concurrently leading to corruption of pointers and reference counters which in turn can lead to heap corruption in Snapdragon Compute, Snapdragon Connectivity, … |
CWE-415
Double Free |
CVE-2020-11231 | 2024-11-21 13:57 | 2021-04-7 | Show | GitHub Exploit DB Packet Storm |
| 210519 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar8035_firmware ar8151_firmware
Out of bound write while parsing RTT/TTY packet parsing due to lack of check of buffer size before copying into buffer in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons…
|
CWE-787 |
CWE-129 Out-of-bounds Write Improper Validation of Array Index
CVE-2020-11227
|
2024-11-21 13:57 |
2021-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 210520 | 5.5 |
MEDIUM
Local |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar8035_firmware ar8151_firmware
Usage of syscall by non-secure entity can allow extraction of secure QTEE diagnostic information in clear text form due to insufficient checks in the syscall handler and leads to information disclosu…
|
CWE-200
|
Information Exposure
CVE-2020-11221
|
2024-11-21 13:57 |
2021-03-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|