Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 4, 2026, 10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 251501 | 4.3 | 警告 | Invision Power Services, Inc | - | IP.Board の admin/sources/classes/bbcode/custom/defaults.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-3424 | 2012-03-27 18:42 | 2010-09-7 | Show | GitHub Exploit DB Packet Storm |
| 251502 | 7.5 | 危険 | freka | - | Drupal の Yr Weatherdata モジュールにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-3423 | 2012-03-27 18:42 | 2010-09-8 | Show | GitHub Exploit DB Packet Storm |
| 251503 | 7.5 | 危険 | solventus Joomla! |
- | Jmoola! 用の JGen コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-3422 | 2012-03-27 18:42 | 2010-09-16 | Show | GitHub Exploit DB Packet Storm |
| 251504 | 4.3 | 警告 | productcart | - | ProductCart の AffiliateLogin.asp におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-3421 | 2012-03-27 18:42 | 2010-09-16 | Show | GitHub Exploit DB Packet Storm |
| 251505 | 4.3 | 警告 | webassist | - | PowerStore の Products_Results.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-3420 | 2012-03-27 18:42 | 2010-09-16 | Show | GitHub Exploit DB Packet Storm |
| 251506 | 7.5 | 危険 | Haudenschilt | - | FCMS における任意の PHP コードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-3419 | 2012-03-27 18:42 | 2010-09-16 | Show | GitHub Exploit DB Packet Storm |
| 251507 | 4.3 | 警告 | NetArt Media | - | NetArt Media Car Portal におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-3418 | 2012-03-27 18:42 | 2010-09-16 | Show | GitHub Exploit DB Packet Storm |
| 251508 | 7.5 | 危険 | eshtery.com | - | eshtery CMS における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-3404 | 2012-03-27 18:42 | 2010-09-16 | Show | GitHub Exploit DB Packet Storm |
| 251509 | 9.3 | 危険 | クアルコム | - | QXDM における任意のコードを実行されるおよび DLL ハイジャック攻撃をされる脆弱性 |
CWE-Other
その他 |
CVE-2010-3403 | 2012-03-27 18:42 | 2010-09-16 | Show | GitHub Exploit DB Packet Storm |
| 251510 | 9.3 | 危険 | dm computer solutions | - | IDM Computer Solutions UltraEdit における任意のコードを実行される脆弱性 |
CWE-Other
その他 |
CVE-2010-3402 | 2012-03-27 18:42 | 2010-09-16 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 4, 2026, 4:17 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 247031 | 5.3 |
MEDIUM
Network |
qualcomm |
mdm9607_firmware mdm9650_firmware mdm9655_firmware msm8996au_firmware qcs605_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_410_firmware sd_12_firmware sd_6… |
Improper input validation might result in incorrect app id returned to the caller Instead of returning failure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Ele… |
CWE-20
Improper Input Validation |
CVE-2018-11935 | 2024-11-21 12:44 | 2019-02-26 | Show | GitHub Exploit DB Packet Storm |
| 247032 | 9.1 |
CRITICAL
Network |
qualcomm |
mdm9650_firmware mdm9655_firmware msm8996au_firmware qcs605_firmware sd_410_firmware sd_12_firmware sd_615_firmware sd_16_firmware sd_415_firmware sd_675_firmware sd_712… |
Improper input validation can lead RW access to secure subsystem from HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Co… |
CWE-20
Improper Input Validation |
CVE-2018-11932 | 2024-11-21 12:44 | 2019-02-26 | Show | GitHub Exploit DB Packet Storm |
| 247033 | 7.8 |
HIGH
Local |
qualcomm |
mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9650_firmware msm8996au_firmware qcs605_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_410_firmware sd… |
Improper access to HLOS is possible while transferring memory to CPZ in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer… |
CWE-20
Improper Input Validation |
CVE-2018-11931 | 2024-11-21 12:44 | 2019-02-26 | Show | GitHub Exploit DB Packet Storm |
| 247034 | 5.5 |
MEDIUM
Local |
qualcomm |
ipq8074_firmware mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9650_firmware mdm9655_firmware msm8996au_firmware qca8081_firmware qcs605_firmware sd_210_firmware
Bytes can be written to fuses from Secure region which can be read later by HLOS in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdra…
|
CWE-20
|
Improper Input Validation
CVE-2018-11864
|
2024-11-21 12:44 |
2019-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 247035 | 5.5 |
MEDIUM
Local |
qualcomm |
mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9650_firmware mdm9655_firmware msm8996au_firmware qcs605_firmware sd_210_firmware sd_212_firmware sd_205_firmware s… |
Usage of non-time-constant comparison functions can lead to information leakage through side channel analysis in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Elec… |
CWE-200
Information Exposure |
CVE-2018-11845 | 2024-11-21 12:44 | 2019-02-26 | Show | GitHub Exploit DB Packet Storm |
| 247036 | 5.5 |
MEDIUM
Local |
qualcomm |
ipq8074_firmware mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware mdm9655_firmware msm8996au_firmware qca8081_firmware qcs605_firmware
Use of non-time constant memcmp function creates side channel that leaks information and leads to cryptographic issues in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Cons…
|
NVD-CWE-noinfo
|
CVE-2018-11820
|
2024-11-21 12:44 |
2019-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 247037 | 5.5 |
MEDIUM
Local |
intel | proset\/wireless | Buffer overflow in the command-line interface for Intel(R) PROSet Wireless v20.50 and before may allow an authenticated user to potentially enable denial of service via local access. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-12159 | 2024-11-21 12:44 | 2019-02-19 | Show | GitHub Exploit DB Packet Storm |
| 247038 | 7.8 |
HIGH
Local |
android | In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Null pointer dereference vulnerability may occur due to missing NULL assignment in NAT modul… |
CWE-476 CWE-416 NULL Pointer Dereference Use After Free |
CVE-2018-12014 | 2024-11-21 12:44 | 2019-02-12 | Show | GitHub Exploit DB Packet Storm | |
| 247039 | 5.5 |
MEDIUM
Local |
android | In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Uninitialized data for socket address leads to information exposure. |
CWE-908
Use of Uninitialized Resource |
CVE-2018-12011 | 2024-11-21 12:44 | 2019-02-12 | Show | GitHub Exploit DB Packet Storm | |
| 247040 | 7.8 |
HIGH
Local |
android | In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Absence of length sanity check may lead to possible stack overflow resulting in memory corru… |
CWE-787
Out-of-bounds Write |
CVE-2018-12010 | 2024-11-21 12:44 | 2019-02-12 | Show | GitHub Exploit DB Packet Storm |