Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 27, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 251291 | 7.5 | 危険 | CreateVision | - | CreateVision CMS の artykul_print.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2012-1778 | 2012-03-22 17:32 | 2012-03-19 | Show | GitHub Exploit DB Packet Storm |
| 251292 | 6.8 | 警告 | Webfolio CMS | - | Webfolio CMS におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2012-1498 | 2012-03-22 17:25 | 2012-03-19 | Show | GitHub Exploit DB Packet Storm |
| 251293 | 4.3 | 警告 | NetMechanica | - | NetMechanica NetDecision の HTTP Server におけるスタックベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2012-1465 | 2012-03-22 17:22 | 2012-03-19 | Show | GitHub Exploit DB Packet Storm |
| 251294 | 5 | 警告 | NetMechanica | - | NetMechanica NetDecision の Dashboard Server におけるインストールパスを取得される脆弱性 |
CWE-200
情報漏えい |
CVE-2012-1464 | 2012-03-22 17:22 | 2012-03-19 | Show | GitHub Exploit DB Packet Storm |
| 251295 | 6.8 | 警告 | Contao | - | Contao の main.php におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2012-1297 | 2012-03-22 17:18 | 2012-03-19 | Show | GitHub Exploit DB Packet Storm |
| 251296 | 4.3 | 警告 | tskynet | - | Kongreg8 におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-1789 | 2012-03-22 17:16 | 2012-03-19 | Show | GitHub Exploit DB Packet Storm |
| 251297 | 7.5 | 危険 | Dotclear | - | Dotclear の inc/swf/swfupload.swf における任意のコードを実行される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-5083 | 2012-03-22 17:15 | 2012-03-19 | Show | GitHub Exploit DB Packet Storm |
| 251298 | 4.3 | 警告 | WonderDesk | - | WonderDesk SQL の wonderdesk.cgi におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-1788 | 2012-03-22 16:59 | 2012-03-19 | Show | GitHub Exploit DB Packet Storm |
| 251299 | 4.3 | 警告 | s2Member | - | WordPress 用 s2Member Pro プラグインにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-5082 | 2012-03-22 16:55 | 2012-03-19 | Show | GitHub Exploit DB Packet Storm |
| 251300 | 5 | 警告 | Bitweaver | - | Bitweaver の wiki/rankings.php におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-5086 | 2012-03-22 16:54 | 2012-03-19 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 28, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 255581 | 9.8 |
CRITICAL
Network |
qualcomm |
msm8996au_firmware sd_410_firmware sd_412_firmware sd_425_firmware sd_430_firmware sd_450_firmware sd_625_firmware sd_650_firmware sd_652_firmware sd_810_firmware sd_820… |
Missing validation check on CRL issuer name in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996AU, SD 410/12, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 810, SD 820, SD 820A. |
CWE-20
Improper Input Validation |
CVE-2017-18318 | 2024-11-21 12:19 | 2018-11-29 | Show | GitHub Exploit DB Packet Storm |
| 255582 | 7.8 |
HIGH
Local |
qualcomm |
msm8996au_firmware sd_410_firmware sd_412_firmware sd_820_firmware sd_820a_firmware |
Restrictions related to the modem (sim lock, sim kill) can be bypassed by manipulating the system to issue a deactivation flow sequence in Snapdragon Automobile, Snapdragon Mobile in versions MSM8996… |
CWE-20
Improper Input Validation |
CVE-2017-18317 | 2024-11-21 12:19 | 2018-11-29 | Show | GitHub Exploit DB Packet Storm |
| 255583 | 7.8 |
HIGH
Local |
qualcomm | sd_600_firmware | Buffer over-read vulnerabilities in an older version of ASN.1 parser in Snapdragon Mobile in versions SD 600. |
CWE-125
Out-of-bounds Read |
CVE-2017-18315 | 2024-11-21 12:19 | 2018-11-29 | Show | GitHub Exploit DB Packet Storm |
| 255584 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9650_firmware msm8996au_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_425_firmware sd_430_firmware sd_450_firmware sd_… |
Secure application can access QSEE kernel memory through Ontario kernel driver in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210… |
NVD-CWE-noinfo
|
CVE-2017-18316 | 2024-11-21 12:19 | 2018-11-29 | Show | GitHub Exploit DB Packet Storm |
| 255585 | 5.5 |
MEDIUM
Local |
android | A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android releases from CAF using the linux kernel |
CWE-125
Out-of-bounds Read |
CVE-2017-18281 | 2024-11-21 12:19 | 2018-10-30 | Show | GitHub Exploit DB Packet Storm | |
| 255586 | 7.1 |
HIGH
Local |
qualcomm |
sd_845_firmware sd_850_firmware |
A micro-core of QMP transportation may cause a macro-core to read from or write to arbitrary memory in Snapdragon Mobile in version SD 845, SD 850. |
CWE-129
Improper Validation of Array Index |
CVE-2017-18309 | 2024-11-21 12:19 | 2018-10-26 | Show | GitHub Exploit DB Packet Storm |
| 255587 | 7.8 |
HIGH
Local |
qualcomm |
mdm9607_firmware msm8909w_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_425_firmware sd_430_firmware |
Modem segments are unlocked after authentication, leaving modem segments open to all in Snapdragon Mobile, Snapdragon Wear in version MDM9607, MSM8909W, SD 210/SD 212/SD 205, SD 425, SD 430 |
NVD-CWE-noinfo
|
CVE-2017-18308 | 2024-11-21 12:19 | 2018-10-26 | Show | GitHub Exploit DB Packet Storm |
| 255588 | 7.8 |
HIGH
Local |
qualcomm |
mdm9607_firmware mdm9635m_firmware mdm9640_firmware mdm9645_firmware mdm9650_firmware mdm9655_firmware msm8909w_firmware msm8996au_firmware sd_210_firmware sd_212_firmware<… |
XPU Master privilege escalation is possible due to improper access control of unused configuration xPU ports where unused configuration ports are open in Snapdragon Automobile, Snapdragon Mobile, Sna… |
NVD-CWE-noinfo
|
CVE-2017-18311 | 2024-11-21 12:19 | 2018-10-26 | Show | GitHub Exploit DB Packet Storm |
| 255589 | 7.8 |
HIGH
Local |
qualcomm |
msm8909w_firmware msm8996au_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_410_firmware sd_412_firmware sd_425_firmware sd_427_firmware sd_430_firmware sd_4… |
ClientEnv exposes services 0-32 to HLOS in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, S… |
NVD-CWE-noinfo
|
CVE-2017-18310 | 2024-11-21 12:19 | 2018-10-26 | Show | GitHub Exploit DB Packet Storm |
| 255590 | 7.8 |
HIGH
Local |
qualcomm |
fsm9055_firmware ipq4019_firmware mdm9206_firmware mdm9607_firmware mdm9625_firmware mdm9635m_firmware mdm9640_firmware mdm9645_firmware mdm9650_firmware mdm9655_firmware
During secure boot, addition is performed on uint8 ptrs which led to overflow issue in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version FSM9055, IPQ4019, MDM9206, …
|
CWE-119
|
Incorrect Access of Indexable Resource ('Range Error')
CVE-2017-18124
|
2024-11-21 12:19 |
2018-10-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|