Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 12, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 258371 | 9.3 | 危険 | マイクロソフト | - | Microsoft Windows Help and Support Center に脆弱性 |
CWE-78
OSコマンド・インジェクション |
CVE-2010-1885 | 2010-07-23 18:55 | 2010-06-10 | Show | GitHub Exploit DB Packet Storm |
| 258372 | 4.9 | 警告 | マイクロソフト | - | Microsoft Windows の Canonical Display Driver における任意のコードを実行される脆弱性 |
CWE-DesignError
|
CVE-2009-3678 | 2010-07-23 18:55 | 2010-05-14 | Show | GitHub Exploit DB Packet Storm |
| 258373 | 9.3 | 危険 | サン・マイクロシステムズ レッドハット リアルネットワークス |
- | Realnetworks RealPlayer における ASM RuleBook の処理に関する脆弱性 |
CWE-119
バッファエラー |
CVE-2009-4247 | 2010-07-23 18:55 | 2010-01-19 | Show | GitHub Exploit DB Packet Storm |
| 258374 | 10 | 危険 | サイバートラスト株式会社 Apache Software Foundation |
- | Apache Geronimo の LoginModule 実装における認証要求を回避される脆弱性 |
CWE-287
不適切な認証 |
CVE-2007-4548 | 2010-07-22 20:51 | 2007-08-13 | Show | GitHub Exploit DB Packet Storm |
| 258375 | 5 | 警告 | サイバートラスト株式会社 Apache Software Foundation |
- | Apache Geronimo の management EJB における認証を回避される脆弱性 |
CWE-287
不適切な認証 |
CVE-2007-5085 | 2010-07-22 20:51 | 2007-09-6 | Show | GitHub Exploit DB Packet Storm |
| 258376 | 7.5 | 危険 | サイバートラスト株式会社 Apache Software Foundation |
- | Apache Geronimo の SQLLoginModule における認証を回避される脆弱性 |
CWE-287
不適切な認証 |
CVE-2007-5797 | 2010-07-22 20:51 | 2007-10-22 | Show | GitHub Exploit DB Packet Storm |
| 258377 | 6.8 | 警告 | InterSect Alliance International Pty | - | Snare Agent の Web インターフェースにクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2010-2594 | 2010-07-22 20:51 | 2010-06-30 | Show | GitHub Exploit DB Packet Storm |
| 258378 | 5.5 | 警告 | 富士通 | - | Internet Navigware Server における情報漏えいの脆弱性 |
CWE-200
情報漏えい |
- | 2010-07-22 20:51 | 2010-06-18 | Show | GitHub Exploit DB Packet Storm |
| 258379 | 7.8 | 危険 | サイバートラスト株式会社 Linux レッドハット |
- | Linux kernel の NFSv4 クライアントの nfs4_proc_lock 関数におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2009-3726 | 2010-07-22 17:53 | 2009-11-9 | Show | GitHub Exploit DB Packet Storm |
| 258380 | 5 | 警告 | IBM アップル サイバートラスト株式会社 サン・マイクロシステムズ ヒューレット・パッカード マイクロソフト オラクル OpenOffice.org Project レッドハット |
- | XML 署名の検証において認証回避が可能な問題 |
CWE-DesignError
|
CVE-2009-0217 | 2010-07-22 17:52 | 2009-07-15 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 12, 2026, 4:20 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 207251 | 7.8 |
HIGH
Local |
qualcomm |
apq8053_firmware apq8096au_firmware apq8098_firmware msm8905_firmware msm8909w_firmware msm8917_firmware msm8920_firmware msm8937_firmware msm8940_firmware msm8953_firmware… |
Any application can bind to it and exercise the APIs due to no protection for AIDL uimlpaservice in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon… |
CWE-276
Incorrect Default Permissions |
CVE-2020-3626 | 2024-11-21 14:31 | 2020-06-22 | Show | GitHub Exploit DB Packet Storm |
| 207252 | 9.8 |
CRITICAL
Network |
qualcomm |
apq8009_firmware apq8017_firmware apq8053_firmware apq8076_firmware apq8096_firmware apq8096au_firmware apq8098_firmware ipq6018_firmware ipq8074_firmware mdm9206_firmware<… |
Possible buffer overflow while copying the frame to local buffer due to lack of check of length before copying in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Ele… |
CWE-120
Classic Buffer Overflow |
CVE-2020-3614 | 2024-11-21 14:31 | 2020-06-22 | Show | GitHub Exploit DB Packet Storm |
| 207253 | 3.3 |
LOW
Local |
geovision | gv-gf192x_firmware | GeoVision Door Access Control device family improperly stores and controls access to system logs, any users can read these logs. |
CWE-532
Inclusion of Sensitive Information in Log Files |
CVE-2020-3930 | 2024-11-21 14:31 | 2020-06-12 | Show | GitHub Exploit DB Packet Storm |
| 207254 | 5.9 |
MEDIUM
Network |
usavisionsys |
geovision_gv-as210_firmware geovision_gv-as410_firmware geovision_gv-as810_firmware geovision_gv-as1010_firmware geovision_gv-gf192x_firmware |
GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted mes… |
CWE-326
Inadequate Encryption Strength |
CVE-2020-3929 | 2024-11-21 14:31 | 2020-06-12 | Show | GitHub Exploit DB Packet Storm |
| 207255 | 9.8 |
CRITICAL
Network |
usavisionsys |
geovision_gv-as210_firmware geovision_gv-as410_firmware geovision_gv-as810_firmware geovision_gv-as1010_firmware geovision_gv-gf192x_firmware |
GeoVision Door Access Control device family is hardcoded with a root password, which adopting an identical password in all devices. |
CWE-798
Use of Hard-coded Credentials |
CVE-2020-3928 | 2024-11-21 14:31 | 2020-06-12 | Show | GitHub Exploit DB Packet Storm |
| 207256 | 6.5 |
MEDIUM
Network |
apple | mac_os_x | This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.5. Importing a maliciously crafted calendar invitation may exfiltrate user information. |
NVD-CWE-noinfo
|
CVE-2020-3882 | 2024-11-21 14:31 | 2020-06-10 | Show | GitHub Exploit DB Packet Storm |
| 207257 | 7.0 |
HIGH
Local |
qualcomm |
apq8009_firmware apq8053_firmware msm8909w_firmware msm8917_firmware msm8953_firmware qcs605_firmware qm215_firmware sa415m_firmware sdm429_firmware sdm429w_firmware sdm… |
A race condition can occur when using the fastrpc memory mapping API. in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearabl… |
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition |
CVE-2020-3680 | 2024-11-21 14:31 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 207258 | 7.8 |
HIGH
Local |
qualcomm |
sm8250_firmware sxr2130_firmware |
When making query to DSP capabilities, Stack out of bounds occurs due to wrong buffer length configured for DSP attributes in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in SM8250, SX… |
CWE-120
Classic Buffer Overflow |
CVE-2020-3625 | 2024-11-21 14:31 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 207259 | 7.8 |
HIGH
Local |
qualcomm |
sm8250_firmware sxr2130_firmware |
kernel failure due to load failures while running v1 path directly via kernel in Snapdragon Mobile in SM8250, SXR2130 |
CWE-20
Improper Input Validation |
CVE-2020-3623 | 2024-11-21 14:31 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |
| 207260 | 7.8 |
HIGH
Local |
qualcomm |
qca8081_firmware sc8180x_firmware ipq6018_firmware ipq8074_firmware sxr2130_firmware |
NULL exception due to accessing bad pointer while posting events on RT FIFO in Snapdragon Compute, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking in IPQ6018, IPQ8074, QCA8081, SC81… |
CWE-416
Use After Free |
CVE-2020-3618 | 2024-11-21 14:31 | 2020-06-3 | Show | GitHub Exploit DB Packet Storm |