Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 22, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 256691 | 9.3 | 危険 | アップル サイバートラスト株式会社 サン・マイクロシステムズ ヒューレット・パッカード VMware レッドハット |
- | JDK、JRE および SDK の setDiffICM 関数におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2009-3869 | 2010-02-24 12:23 | 2009-11-5 | Show | GitHub Exploit DB Packet Storm |
| 256692 | 9.3 | 危険 | アップル サイバートラスト株式会社 サン・マイクロシステムズ ヒューレット・パッカード VMware レッドハット |
- | JDK、JRE および SDK における権限昇格の脆弱性 |
CWE-119
バッファエラー |
CVE-2009-3868 | 2010-02-24 12:23 | 2009-11-5 | Show | GitHub Exploit DB Packet Storm |
| 256693 | 9.3 | 危険 | アップル サイバートラスト株式会社 サン・マイクロシステムズ ヒューレット・パッカード VMware レッドハット |
- | JDK、JRE および SDK の HsbParser.getSoundBank 関数におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2009-3867 | 2010-02-24 12:23 | 2009-11-5 | Show | GitHub Exploit DB Packet Storm |
| 256694 | 7.5 | 危険 | サン・マイクロシステムズ | - | Sun Java System Web Server の WebDAV 実装におけるフォーマットストリングの脆弱性 |
CWE-134
書式文字列の問題 |
CVE-2010-0388 | 2010-02-23 11:59 | 2010-01-20 | Show | GitHub Exploit DB Packet Storm |
| 256695 | 7.5 | 危険 | サン・マイクロシステムズ | - | Sun Java System Web Server における複数のヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0387 | 2010-02-23 11:59 | 2010-01-20 | Show | GitHub Exploit DB Packet Storm |
| 256696 | 10 | 危険 | サン・マイクロシステムズ | - | Sun Java System Web Server の WebDAV 実装におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0361 | 2010-02-23 11:58 | 2010-01-20 | Show | GitHub Exploit DB Packet Storm |
| 256697 | 7.5 | 危険 | サン・マイクロシステムズ | - | Sun Java System Web Server におけるヒープ領域のメモリ格納場所を上書きされる脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2010-0360 | 2010-02-23 11:58 | 2010-01-20 | Show | GitHub Exploit DB Packet Storm |
| 256698 | 7.5 | 危険 | サン・マイクロシステムズ | - | Sun Java System Web Server における任意のコードを実行される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2010-0273 | 2010-02-23 11:58 | 2010-01-8 | Show | GitHub Exploit DB Packet Storm |
| 256699 | 7.5 | 危険 | サン・マイクロシステムズ | - | Sun Java System Web Server におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2010-0272 | 2010-02-23 11:57 | 2010-01-8 | Show | GitHub Exploit DB Packet Storm |
| 256700 | 7.5 | 危険 | サン・マイクロシステムズ VMware レッドハット |
- | Sun Java SE の Java Web Start 実装における署名された JAR ファイルと JNLP アプリケーション処理に関する脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-3886 | 2010-02-23 11:52 | 2009-11-9 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 22, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 213701 | 7.8 |
HIGH
Local |
qualcomm |
fsm10055_firmware fsm10056_firmware pm3003a_firmware pm6125_firmware pm6150_firmware pm6150a_firmware pm6150l_firmware pm6350_firmware pm660_firmware pm660l_firmware pm7… |
Use after free in camera If the threadmanager is being cleaned up while the worker thread is processing objects in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IO… |
CWE-416
Use After Free |
CVE-2020-11295 | 2024-11-21 13:57 | 2021-05-7 | Show | GitHub Exploit DB Packet Storm |
| 213702 | 7.8 |
HIGH
Local |
qualcomm |
aqt1000_firmware ar8035_firmware pm3003a_firmware pm4125_firmware pm4250_firmware pm6125_firmware pm6150_firmware pm6150a_firmware pm6150l_firmware pm6350_firmware pm640… |
Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untrusted source of input for secure boot loader in Snapdragon Auto… |
CWE-667
Improper Locking |
CVE-2020-11284 | 2024-11-21 13:57 | 2021-05-7 | Show | GitHub Exploit DB Packet Storm |
| 213703 | 7.8 |
HIGH
Local |
qualcomm |
ar8035_firmware pm215_firmware pm3003a_firmware pm6125_firmware pm6150_firmware pm6150a_firmware pm6150l_firmware pm6350_firmware pm640a_firmware pm640l_firmware pm640p_… |
Out of bound write in logger due to prefix size is not validated while prepended to logging string in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… |
CWE-129
Improper Validation of Array Index |
CVE-2020-11294 | 2024-11-21 13:57 | 2021-05-7 | Show | GitHub Exploit DB Packet Storm |
| 213704 | 7.8 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8064au_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware ar8035_firmware ar8151_firmware
Out of bound write can occur in TZ command handler due to lack of validation of command ID in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industr…
|
CWE-119
|
Incorrect Access of Indexable Resource ('Range Error')
CVE-2020-11289
|
2024-11-21 13:57 |
2021-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 213705 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar6003_firmware ar8151_firmware
Memory corruption while processing crafted SDES packets due to improper length check in sdes packets recieved in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT,…
|
CWE-190
|
Integer Overflow or Wraparound
CVE-2020-11279
|
2024-11-21 13:57 |
2021-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 213706 | 6.0 |
MEDIUM
Local |
qualcomm |
apq8017_firmware apq8037_firmware apq8053_firmware apq8064au_firmware apq8096au_firmware aqt1000_firmware ar8031_firmware ar8035_firmware ar8151_firmware csra6620_firmware<… |
Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer length received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,… |
CWE-125
Out-of-bounds Read |
CVE-2020-11293 | 2024-11-21 13:57 | 2021-05-7 | Show | GitHub Exploit DB Packet Storm |
| 213707 | 7.8 |
HIGH
Local |
qualcomm |
aqt1000_firmware ar8031_firmware ar8035_firmware csra6620_firmware csra6640_firmware csrb31024_firmware fsm10055_firmware fsm10056_firmware mdm9205_firmware pm3003a_firmwar… |
Out of bound write can occur in playready while processing command due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2020-11288 | 2024-11-21 13:57 | 2021-05-7 | Show | GitHub Exploit DB Packet Storm |
| 213708 | 9.1 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8009w_firmware apq8017_firmware apq8037_firmware apq8053_firmware apq8084_firmware apq8096au_firmware aqt1000_firmware ar8151_firmware csr6030_firmware<… |
Buffer over-read while unpacking the RTCP packet we may read extra byte if wrong length is provided in RTCP packets in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consume… |
CWE-125
Out-of-bounds Read |
CVE-2020-11285 | 2024-11-21 13:57 | 2021-05-7 | Show | GitHub Exploit DB Packet Storm |
| 213709 | 7.5 |
HIGH
Network |
qualcomm |
aqt1000_firmware csrb31024_firmware fsm10055_firmware fsm10056_firmware pm3003a_firmware pm456_firmware pm6125_firmware pm6150_firmware pm6150a_firmware pm6150l_firmware
Denial of service in MODEM due to assert to the invalid configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon M…
|
CWE-617
|
Reachable Assertion
CVE-2020-11274
|
2024-11-21 13:57 |
2021-05-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 213710 | 7.5 |
HIGH
Network |
qualcomm |
csrb31024_firmware pm3003a_firmware pm6150a_firmware pm6150l_firmware pm6350_firmware pm7150a_firmware pm7150l_firmware pm7250_firmware pm7250b_firmware pm8005_firmware … |
Histogram type KPI was teardown with the assumption of the existence of histogram binning info and will lead to null pointer access when histogram binning info is missing due to lack of null check in… |
CWE-476
NULL Pointer Dereference |
CVE-2020-11273 | 2024-11-21 13:57 | 2021-05-7 | Show | GitHub Exploit DB Packet Storm |