Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 19, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 256291 | 6.8 | 警告 | アップル GNU Project サン・マイクロシステムズ サイバートラスト株式会社 レッドハット |
- | GNU tar の contains_dot_dot() 関数におけるディレクトリトラバーサルの脆弱性 | - | CVE-2007-4131 | 2010-01-18 12:21 | 2007-08-23 | Show | GitHub Exploit DB Packet Storm |
| 256292 | 4.6 | 警告 | IBM | - | IBM DB2 の dasauto における管理者権限を持たないユーザが実行可能な脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2009-4150 | 2010-01-15 14:10 | 2009-12-2 | Show | GitHub Exploit DB Packet Storm |
| 256293 | 2.1 | 注意 | サン・マイクロシステムズ | - | Sun Solaris の ldap_cachemgr におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-Other
その他 |
CVE-2009-4080 | 2010-01-15 14:10 | 2009-11-24 | Show | GitHub Exploit DB Packet Storm |
| 256294 | 5 | 警告 | サン・マイクロシステムズ | - | Sun Solaris の sshd におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-4075 | 2010-01-15 14:09 | 2009-11-23 | Show | GitHub Exploit DB Packet Storm |
| 256295 | 2.6 | 注意 | オラクル | - | Oracle Application Server におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
- | 2010-01-14 15:01 | 2010-01-14 | Show | GitHub Exploit DB Packet Storm |
| 256296 | 9.3 | 危険 | マイクロソフト | - | Microsoft Internet Explorer に脆弱性 |
CWE-94
コード・インジェクション |
CVE-2009-3672 | 2010-01-14 12:08 | 2009-11-25 | Show | GitHub Exploit DB Packet Storm |
| 256297 | 9.3 | 危険 | サン・マイクロシステムズ VMware |
- | Sun Java SE の java.lang パッケージにおける脆弱性 |
CWE-362
競合状態 |
CVE-2009-2724 | 2010-01-14 12:08 | 2009-08-10 | Show | GitHub Exploit DB Packet Storm |
| 256298 | 10 | 危険 | サン・マイクロシステムズ VMware |
- | Sun Java SE の Provider クラスにおける脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-2721 | 2010-01-14 12:08 | 2009-08-10 | Show | GitHub Exploit DB Packet Storm |
| 256299 | 5 | 警告 | 有限会社シースリー | - | WebCalenderC3 におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-0348 | 2010-01-12 15:01 | 2010-01-12 | Show | GitHub Exploit DB Packet Storm |
| 256300 | 4.3 | 警告 | 有限会社シースリー | - | WebCalenderC3 におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-0349 | 2010-01-12 15:00 | 2010-01-12 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 19, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 201101 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware apq8098_firmware ipq4019_firmware ipq6018_firmware ipq8064_firmware ipq8074_firmware mdm9206_firmware<… |
u'Use after free while installing new security rule in ipcrtr as old one is deleted and this rule could still be in use for checking security permission for particular process' in Snapdragon Auto, Sn… |
CWE-416
Use After Free |
CVE-2020-3696 | 2024-11-21 14:31 | 2020-11-2 | Show | GitHub Exploit DB Packet Storm |
| 201102 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8098_firmware bitra_firmware msm8909w_firmware msm8996au_firmware nicobar_firmware qcm2150_firmware qcs605_firmware
u'Use out of range pointer issue can occur due to incorrect buffer range check during the execution of qseecom.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial…
|
CWE-119
|
Incorrect Access of Indexable Resource ('Range Error')
CVE-2020-3693
|
2024-11-21 14:31 |
2020-11-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 201103 | 9.8 |
CRITICAL
Network |
qualcomm |
agatti_firmware kamorta_firmware nicobar_firmware qcm6125_firmware qcs610_firmware rennell_firmware sa415m_firmware saipan_firmware sc7180_firmware sc8180x_firmware sdx2… |
u'Possible buffer overflow while updating output buffer for IMEI and Gateway Address due to lack of check of input validation for parameters received from server' in Snapdragon Auto, Snapdragon Compu… |
CWE-120
Classic Buffer Overflow |
CVE-2020-3692 | 2024-11-21 14:31 | 2020-11-2 | Show | GitHub Exploit DB Packet Storm |
| 201104 | 7.8 |
HIGH
Local |
qualcomm |
agatti_firmware bitra_firmware kamorta_firmware nicobar_firmware qca6390_firmware qcs404_firmware qcs605_firmware qcs610_firmware rennell_firmware sa415m_firmware sa515m… |
u'Due to an incorrect SMMU configuration, the modem crypto engine can potentially compromise the hypervisor' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, … |
NVD-CWE-Other
|
CVE-2020-3690 | 2024-11-21 14:31 | 2020-11-2 | Show | GitHub Exploit DB Packet Storm |
| 201105 | 7.8 |
HIGH
Local |
qualcomm |
agatti_firmware apq8009_firmware apq8098_firmware bitra_firmware ipq6018_firmware kamorta_firmware mdm9150_firmware mdm9205_firmware mdm9206_firmware mdm9607_firmware md… |
u'QSEE reads the access permission policy for the SMEM TOC partition from the SMEM TOC contents populated by XBL Loader and applies them without validation' in Snapdragon Auto, Snapdragon Compute, Sn… |
NVD-CWE-Other
|
CVE-2020-3684 | 2024-11-21 14:31 | 2020-11-2 | Show | GitHub Exploit DB Packet Storm |
| 201106 | 9.8 |
CRITICAL
Network |
qualcomm |
agatti_firmware apq8053_firmware apq8096au_firmware apq8098_firmware bitra_firmware kamorta_firmware msm8905_firmware msm8909w_firmware msm8917_firmware msm8940_firmware
u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check to validate the index length' in Snapdragon Auto, Snapdragon Compute, Snapdrag…
|
CWE-129
|
Improper Validation of Array Index
CVE-2020-3673
|
2024-11-21 14:31 |
2020-11-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 201107 | 9.1 |
CRITICAL
Network |
qualcomm |
agatti_firmware apq8053_firmware apq8096au_firmware apq8098_firmware kamorta_firmware mdm9150_firmware mdm9205_firmware mdm9206_firmware mdm9625_firmware mdm9635m_firmware<… |
u'Potential out of bounds read while processing downlink NAS transport message due to improper length check of Information Element(IEI) NAS message container' in Snapdragon Auto, Snapdragon Compute, … |
CWE-125
Out-of-bounds Read |
CVE-2020-3670 | 2024-11-21 14:31 | 2020-11-2 | Show | GitHub Exploit DB Packet Storm |
| 201108 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8096au_firmware apq8098_firmware ipq4019_firmware ipq6018_firmware ipq8064_firmware ipq8074_firmware mdm9150_firmware<… |
u'Remote code execution can happen by sending a carefully crafted POST query when Device configuration is accessed from a tethered client through webserver due to lack of array bound check.' in Snapd… |
CWE-120
Classic Buffer Overflow |
CVE-2020-3657 | 2024-11-21 14:31 | 2020-11-2 | Show | GitHub Exploit DB Packet Storm |
| 201109 | 9.8 |
CRITICAL
Network |
qualcomm |
agatti_firmware apq8053_firmware apq8096au_firmware apq8098_firmware bitra_firmware kamorta_firmware msm8905_firmware msm8909w_firmware msm8917_firmware msm8940_firmware
u'Buffer overflow occurs while processing SIP message packet due to lack of check of index validation before copying into it' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrag…
|
CWE-129
|
Improper Validation of Array Index
CVE-2020-3654
|
2024-11-21 14:31 |
2020-11-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 201110 | 7.8 |
HIGH
Local |
qualcomm |
agatti_firmware bitra_firmware kamorta_firmware qca6390_firmware qcs404_firmware qcs610_firmware rennell_firmware sa515m_firmware sc7180_firmware sc8180x_firmware sdx55_… |
u'An Unaligned address or size can propagate to the database due to improper page permissions and can lead to improper access control' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… |
NVD-CWE-noinfo
|
CVE-2020-3638 | 2024-11-21 14:31 | 2020-11-2 | Show | GitHub Exploit DB Packet Storm |