Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":July 1, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 251321 | 4.3 | 警告 | アップル | - | Apple Mac OS X および iPhone の WebCore における CRLF インジェクションの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2007-2401 | 2012-06-26 15:46 | 2007-06-22 | Show | GitHub Exploit DB Packet Storm |
| 251322 | 4.3 | 警告 | アップル マイクロソフト |
- | Apple Safari におけるセキュリティモデルを回避される脆弱性 |
CWE-362 CWE-79 |
CVE-2007-2400 | 2012-06-26 15:46 | 2007-06-25 | Show | GitHub Exploit DB Packet Storm |
| 251323 | 9.3 | 危険 | アップル | - | Apple Mac OS X および iPhone の WebKit における任意のコードを実行される脆弱性 |
CWE-DesignError
|
CVE-2007-2399 | 2012-06-26 15:46 | 2007-06-22 | Show | GitHub Exploit DB Packet Storm |
| 251324 | 4.3 | 警告 | アップル | - | Apple Safari におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2007-2391 | 2012-06-26 15:46 | 2007-06-14 | Show | GitHub Exploit DB Packet Storm |
| 251325 | 10 | 危険 | アップル | - | Apple Mac OS X の iChat におけるバッファオーバーフローの脆弱性 | - | CVE-2007-2390 | 2012-06-26 15:46 | 2007-05-24 | Show | GitHub Exploit DB Packet Storm |
| 251326 | 7.1 | 危険 | アップル | - | Apple QuickTime for Java における Web ブラウザからメモリを読み取られる脆弱性 | - | CVE-2007-2389 | 2012-06-26 15:46 | 2007-05-29 | Show | GitHub Exploit DB Packet Storm |
| 251327 | 9.3 | 危険 | アップル | - | Apple QuickTime for Java における任意のコードを実行される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2007-2388 | 2012-06-26 15:46 | 2007-05-29 | Show | GitHub Exploit DB Packet Storm |
| 251328 | 10 | 危険 | アップル | - | Intel ハードウェア上の Apple Xserve Lights-Out Management における管理アクセス権を取得される脆弱性 | - | CVE-2007-2387 | 2012-06-26 15:46 | 2007-05-31 | Show | GitHub Exploit DB Packet Storm |
| 251329 | 9.4 | 危険 | アップル | - | Apple Mac OS X の mDNSResponder におけるバッファオーバーフローの脆弱性 | - | CVE-2007-2386 | 2012-06-26 15:46 | 2007-05-24 | Show | GitHub Exploit DB Packet Storm |
| 251330 | 5 | 警告 | - | GWT フレームワークにおけるデータを取得される脆弱性 | - | CVE-2007-2378 | 2012-06-26 15:46 | 2007-04-30 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:July 1, 2026, 4:27 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 252801 | 5.5 |
MEDIUM
Local |
qualcomm |
ipq8074_firmware mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9650_firmware mdm9655_firmware msm8909w_firmware msm8996au_firmware qca8081_firmware qcs605_firmware<… |
ECDSA signature code leaks private keys from secure world to non-secure world in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon… |
CWE-200
Information Exposure |
CVE-2018-11976 | 2024-11-21 12:44 | 2019-05-25 | Show | GitHub Exploit DB Packet Storm |
| 252802 | 7.8 |
HIGH
Local |
qualcomm |
ipq4019_firmware ipq8064_firmware ipq8074_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8996au_firmware qca4020_firmware qca6174a_firmware… |
Improper check before assigning value can lead to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer I… |
CWE-190
Integer Overflow or Wraparound |
CVE-2018-11968 | 2024-11-21 12:44 | 2019-05-25 | Show | GitHub Exploit DB Packet Storm |
| 252803 | 7.8 |
HIGH
Local |
qualcomm |
mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware qcs605_firmware qm215_firmware sd_425_firmware … |
Signature verification of the skel library could potentially be disabled as the memory region on the remote subsystem in which the library is loaded is allocated from userspace currently in Snapdrago… |
NVD-CWE-noinfo
|
CVE-2018-11967 | 2024-11-21 12:44 | 2019-05-25 | Show | GitHub Exploit DB Packet Storm |
| 252804 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware qca6174a_firmware qca6574au_firmware qca9377_firmw… |
While processing ssid IE length from remote AP, possible out-of-bounds access may occur due to crafted ssid IE length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Cons… |
CWE-125
Out-of-bounds Read |
CVE-2018-11953 | 2024-11-21 12:44 | 2019-05-25 | Show | GitHub Exploit DB Packet Storm |
| 252805 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8996au_firmware qcs605_firmware sd_425_firmware sd_427_firmware sd_430_firmware s… |
Failure to initialize the extra buffer can lead to an out of buffer access in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobi… |
CWE-665
Improper Initialization |
CVE-2018-11949 | 2024-11-21 12:44 | 2019-05-25 | Show | GitHub Exploit DB Packet Storm |
| 252806 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8996au_firmware qcs605_firmware sd_625_firmware sd_636_firmware sd_712_firmware s… |
Lack of check in length before using memcpy in WLAN function can lead to OOB access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MD… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-11940 | 2024-11-21 12:44 | 2019-05-25 | Show | GitHub Exploit DB Packet Storm |
| 252807 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8996au_firmware qca6574au_firmware qcs605_firmware sd_425_firmware sd_427_firmware
Lack of input validation before copying can lead to a buffer over read in WLAN function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile i…
|
CWE-125
|
Out-of-bounds Read
CVE-2018-11937
|
2024-11-21 12:44 |
2019-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 252808 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8996au_firmware qca6174a_firmware qca6574_firmware qca6574au_firmware qca6584_firmware qca6584au_firm… |
Index of array is processed in a wrong way inside a while loop and result in invalid index (-1 or something else) leads to out of bound memory access. in Snapdragon Auto, Snapdragon Connectivity, Sna… |
CWE-400
Uncontrolled Resource Consumption |
CVE-2018-11936 | 2024-11-21 12:44 | 2019-05-25 | Show | GitHub Exploit DB Packet Storm |
| 252809 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8996au_firmware qcs605_firmware qm215_firmware sd_425_firmware sd_427_firmware sd… |
Improper input validation on input data which is used to locate and copy the additional IEs in WLAN function can lead to potential integer truncation issue in Snapdragon Auto, Snapdragon Compute, Sna… |
CWE-191
Integer Underflow (Wrap or Wraparound) |
CVE-2018-11930 | 2024-11-21 12:44 | 2019-05-25 | Show | GitHub Exploit DB Packet Storm |
| 252810 | 7.8 |
HIGH
Local |
qualcomm |
ipq8074_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8996au_firmware qca6174a_firmware qca6564_firmware qca6574_firmware qca6574au_firmwa… |
Lack of check on length parameter may cause buffer overflow while processing WMI commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-11928 | 2024-11-21 12:44 | 2019-05-25 | Show | GitHub Exploit DB Packet Storm |