Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":July 1, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 251211 | 7.5 | 危険 | com yanc | - | Mambo の yanc コンポーネントにおける SQL インジェクションの脆弱性 | - | CVE-2007-2792 | 2012-06-26 15:46 | 2007-05-21 | Show | GitHub Exploit DB Packet Storm |
| 251212 | 6.8 | 警告 | eSyndiCat | - | eSyndiCat Pro の manage-admins.php における追加の管理者アカウントを作成される脆弱性 | - | CVE-2007-2785 | 2012-06-26 15:46 | 2007-05-21 | Show | GitHub Exploit DB Packet Storm |
| 251213 | 7.8 | 危険 | Globus | - | Globus Toolkit の globus-job-manager におけるサービス運用妨害 (DoS) の脆弱性 | - | CVE-2007-2784 | 2012-06-26 15:46 | 2007-05-21 | Show | GitHub Exploit DB Packet Storm |
| 251214 | 7.5 | 危険 | AlstraSoft | - | AlstraSoft Template Seller Pro の admin/addsptemplate.php における無制限にファイルをアップロードされる脆弱性 | - | CVE-2007-2777 | 2012-06-26 15:46 | 2007-05-21 | Show | GitHub Exploit DB Packet Storm |
| 251215 | 10 | 危険 | AlstraSoft | - | AlstraSoft Template Seller Pro における管理アクセス権を取得される脆弱性 | - | CVE-2007-2776 | 2012-06-26 15:46 | 2007-05-21 | Show | GitHub Exploit DB Packet Storm |
| 251216 | 10 | 危険 | AlstraSoft | - | AlstraSoft Live Support における管理アクセス権を取得される脆弱性 | - | CVE-2007-2775 | 2012-06-26 15:46 | 2007-05-21 | Show | GitHub Exploit DB Packet Storm |
| 251217 | 7.8 | 危険 | CA Technologies | - | CA BrightStor Backup の caloggerd.exe におけるサービス運用妨害 (DoS) の脆弱性 | - | CVE-2007-2772 | 2012-06-26 15:46 | 2007-05-16 | Show | GitHub Exploit DB Packet Storm |
| 251218 | 7.2 | 危険 | backup manager | - | Backup Manager の lib/backup-methods.sh におけるパスワードを取得される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2007-2766 | 2012-06-26 15:46 | 2007-05-18 | Show | GitHub Exploit DB Packet Storm |
| 251219 | 6.8 | 警告 | ac zoom | - | BlockHosts の blockhosts.py におけるサービス運用妨害 (DoS) の脆弱性 | - | CVE-2007-2765 | 2012-06-26 15:46 | 2007-05-18 | Show | GitHub Exploit DB Packet Storm |
| 251220 | 7.5 | 危険 | build it fast | - | bif3 における PHP リモートファイルインクルージョンの脆弱性 | - | CVE-2007-2762 | 2012-06-26 15:46 | 2007-05-18 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:July 1, 2026, 4:27 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 252891 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8996au_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_425_firmware sd_427_firmware sd… |
While processing radio connection status change events, Radio index is not properly validated in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrag… |
CWE-129
Improper Validation of Array Index |
CVE-2018-11899 | 2024-11-21 12:44 | 2019-02-12 | Show | GitHub Exploit DB Packet Storm |
| 252892 | 7.8 |
HIGH
Local |
qualcomm |
mdm9607_firmware mdm9650_firmware mdm9655_firmware msm8996au_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_410_firmware sd_412_firmware sd_425_firmware sd_… |
Unauthorized access may be allowed by the SCP11 Crypto Services TA will processing commands from other TA in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electron… |
CWE-862
Missing Authorization |
CVE-2018-11888 | 2024-11-21 12:44 | 2019-02-12 | Show | GitHub Exploit DB Packet Storm |
| 252893 | 7.8 |
HIGH
Local |
qualcomm |
mdm9607_firmware mdm9650_firmware mdm9655_firmware msm8996au_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_410_firmware sd_412_firmware sd_636_firmware sd_… |
If an end user makes use of SCP11 sample OCE code without modification it could lead to a buffer overflow when transmitting a CAPDU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sn… |
CWE-190
Integer Overflow or Wraparound |
CVE-2018-11855 | 2024-11-21 12:44 | 2019-02-12 | Show | GitHub Exploit DB Packet Storm |
| 252894 | 7.8 |
HIGH
Local |
qualcomm |
ipq8074_firmware mdm9206_firmware mdm9607_firmware mdm9650_firmware mdm9655_firmware msm8909w_firmware msm8996au_firmware qca8081_firmware sd_210_firmware sd_212_firmware
Malicious TA can tag QSEE kernel memory and map to EL0, there by corrupting the physical memory as well it can be used to corrupt the QSEE kernel and compromise the whole TEE in Snapdragon Auto, Snap…
|
CWE-20
|
Improper Input Validation
CVE-2018-11847
|
2024-11-21 12:44 |
2019-02-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 252895 | 7.5 |
HIGH
Network |
apache canonical |
subversion ubuntu_linux |
Subversion's mod_dav_svn Apache HTTPD module versions 1.11.0 and 1.10.0 to 1.10.3 will crash after dereferencing an uninitialized pointer if the client omits the root path in a recursive directory li… |
CWE-824
Access of Uninitialized Pointer |
CVE-2018-11803 | 2024-11-21 12:44 | 2019-02-6 | Show | GitHub Exploit DB Packet Storm |
| 252896 | 7.8 |
HIGH
Local |
apache canonical |
openoffice ubuntu_linux |
When loading a document with Apache Open Office 4.1.5 and earlier with smaller end line termination than the operating system uses, the defect occurs. In this case OpenOffice runs into an Arithmetic … |
CWE-682
Incorrect Calculation |
CVE-2018-11790 | 2024-11-21 12:44 | 2019-02-1 | Show | GitHub Exploit DB Packet Storm |
| 252897 | 7.2 |
HIGH
Network |
symantec | reporter | The Symantec Reporter CLI 10.1 prior to 10.1.5.6 and 10.2 prior to 10.2.1.8 is susceptible to an OS command injection vulnerability. An authenticated malicious administrator with Enable mode access c… |
CWE-78
OS Command |
CVE-2018-12237 | 2024-11-21 12:44 | 2019-01-25 | Show | GitHub Exploit DB Packet Storm |
| 252898 | 8.8 |
HIGH
Adjacent |
qualcomm |
mdm9206_firmware mdm9607_firmware |
Improper check while accessing the local memory stack on MQTT connection request can lead to buffer overflow in snapdragon wear in versions MDM9206, MDM9607 |
CWE-787
Out-of-bounds Write |
CVE-2018-11993 | 2024-11-21 12:44 | 2019-01-19 | Show | GitHub Exploit DB Packet Storm |
| 252899 | 5.5 |
MEDIUM
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9635m_firmware mdm9650_firmware mdm9655_firmware msm8996au_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_410_firmware … |
Improper input validation in trustzone can lead to denial of service in snapdragon automobile, snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, MDM9635M, MDM9650, MDM9655, MSM8996A… |
CWE-20
Improper Input Validation |
CVE-2018-11999 | 2024-11-21 12:44 | 2019-01-19 | Show | GitHub Exploit DB Packet Storm |
| 252900 | 7.5 |
HIGH
Adjacent |
qualcomm |
mdm9206_firmware mdm9607_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_427_firmware sd_435_firmware sd_450_firmware sd_625_firmware sd_636_firmware sd_835_… |
While processing a packet decode request in MQTT, Race condition can occur leading to an out-of-bounds access in snapdragon mobile and snapdragon wear in versions MDM9206, MDM9607, SD 210/SD 212/SD 2… |
CWE-362
Race Condition |
CVE-2018-11998 | 2024-11-21 12:44 | 2019-01-19 | Show | GitHub Exploit DB Packet Storm |