Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 24, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 252421 | 7.5 | 危険 | esoftpro | - | esoftpro Online Contact Manager の view.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-5001 | 2011-12-9 14:21 | 2011-11-1 | Show | GitHub Exploit DB Packet Storm |
| 252422 | 4.3 | 警告 | Exponent CMS project | - | Exponent CMS におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-5002 | 2011-12-9 14:20 | 2011-11-1 | Show | GitHub Exploit DB Packet Storm |
| 252423 | 7.5 | 危険 | Autartica | - | Joomla! 用 の AutarTimonial コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-5003 | 2011-12-9 14:20 | 2011-11-1 | Show | GitHub Exploit DB Packet Storm |
| 252424 | 4.3 | 警告 | VideoWhisper.com | - | VideoWhisper PHP 2 Way Video Chat コンポーネントにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-4971 | 2011-12-9 14:19 | 2011-11-2 | Show | GitHub Exploit DB Packet Storm |
| 252425 | 7.5 | 危険 | OlyKit | - | OlyKit Swoopo Clone 2010 の index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-4997 | 2011-12-9 14:18 | 2011-11-2 | Show | GitHub Exploit DB Packet Storm |
| 252426 | 7.5 | 危険 | Maulana Al Matien | - | ardeaCore PHP Framework におけるリモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-4998 | 2011-12-9 14:18 | 2011-11-2 | Show | GitHub Exploit DB Packet Storm |
| 252427 | 7.5 | 危険 | Joe Pieruccini | - | MCLogin System の login/login_index.php におけるSQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-5000 | 2011-12-9 14:17 | 2011-11-2 | Show | GitHub Exploit DB Packet Storm |
| 252428 | 7.5 | 危険 | 2daybiz | - | 2daybiz Polls Script の searchvote.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-5004 | 2011-12-9 14:16 | 2011-11-2 | Show | GitHub Exploit DB Packet Storm |
| 252429 | 4.3 | 警告 | Rayzz | - | Rayzz Photoz の members/profileCommentsResponse.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-5005 | 2011-12-9 14:15 | 2011-11-2 | Show | GitHub Exploit DB Packet Storm |
| 252430 | 7.5 | 危険 | Emophp Programming | - | EMO Realty Manager の googlemap/index.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-5006 | 2011-12-9 14:15 | 2011-11-2 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 24, 2026, 4:05 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 254261 | 5.5 |
MEDIUM
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9650_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_835_firmware sda660_firmware |
Secure display content could be accessed by third party trusted application after creating a fault in other trusted applications in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM… |
CWE-200
Information Exposure |
CVE-2017-18300 | 2024-11-21 12:19 | 2018-10-23 | Show | GitHub Exploit DB Packet Storm |
| 254262 | 7.8 |
HIGH
Local |
qualcomm |
sd_425_firmware sd_430_firmware sd_450_firmware sd_625_firmware sd_650_firmware sd_652_firmware sd_820_firmware |
Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820. |
CWE-415
Double Free |
CVE-2017-18297 | 2024-11-21 12:19 | 2018-10-23 | Show | GitHub Exploit DB Packet Storm |
| 254263 | 6.5 |
MEDIUM
Adjacent |
qualcomm |
qca9379_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_625_firmware sd_835_firmware sd_845_firmware sd_850_firmware sda660_firmware |
Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-18283 | 2024-11-21 12:19 | 2018-10-23 | Show | GitHub Exploit DB Packet Storm |
| 254264 | 7.8 |
HIGH
Local |
qaulcomm qualcomm |
fsm9055_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware sd_210_firmware sd_212_firmware sd_205_firmware
Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versi…
|
CWE-125
|
Out-of-bounds Read
CVE-2017-18304
|
2024-11-21 12:19 |
2018-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 254265 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_425_firmware sd_430_firmware s… |
While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MMDM9206, MD… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-18303 | 2024-11-21 12:19 | 2018-10-23 | Show | GitHub Exploit DB Packet Storm |
| 254266 | 5.5 |
MEDIUM
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9650_firmware msm8996au_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_450_firmware sd_650_firmware sd_652_firmware sd_… |
Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM899… |
CWE-400
Uncontrolled Resource Consumption |
CVE-2017-18299 | 2024-11-21 12:19 | 2018-10-23 | Show | GitHub Exploit DB Packet Storm |
| 254267 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9650_firmware msm8996au_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_450_firmware sd_615_firmware sd_616_firmware sd_… |
Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, MSM8996AU, SD 210/SD 212/SD… |
CWE-476
NULL Pointer Dereference |
CVE-2017-18298 | 2024-11-21 12:19 | 2018-10-23 | Show | GitHub Exploit DB Packet Storm |
| 254268 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_450_firmware sd_615_firmware s… |
Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607,… |
NVD-CWE-noinfo
|
CVE-2017-18296 | 2024-11-21 12:19 | 2018-10-23 | Show | GitHub Exploit DB Packet Storm |
| 254269 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_450_firmware sd_615_firmware s… |
Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, … |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-18295 | 2024-11-21 12:19 | 2018-10-23 | Show | GitHub Exploit DB Packet Storm |
| 254270 | 7.8 |
HIGH
Local |
qualcomm |
fsm9055_firmware mdm9206_firmware mdm9607_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_425_firmware … |
While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size of ELF64 header size in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile… |
CWE-125
Out-of-bounds Read |
CVE-2017-18294 | 2024-11-21 12:19 | 2018-10-23 | Show | GitHub Exploit DB Packet Storm |