Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 1, 2026, 10 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 252721 | 7.8 | 危険 | Stichting NLnet Labs | - | Unbound の validator/val_nsec3.c におけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2011-4869 | 2011-12-21 15:48 | 2011-12-20 | Show | GitHub Exploit DB Packet Storm |
| 252722 | 6.8 | 警告 | D-Link Systems, Inc. | - | D-Link DIR-300 ルータにおける重要な情報を取得される脆弱性 |
CWE-310
暗号の問題 |
CVE-2011-4723 | 2011-12-21 15:36 | 2011-12-20 | Show | GitHub Exploit DB Packet Storm |
| 252723 | 10 | 危険 | Schneider Electric | - | NOE 771 デバイス上の Schneider Electric Quantum Ethernet Module における脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-4861 | 2011-12-21 15:30 | 2011-12-12 | Show | GitHub Exploit DB Packet Storm |
| 252724 | 10 | 危険 | Schneider Electric | - | NOE 771 デバイス上の Schneider Electric Quantum Ethernet Module におけるアクセス権を取得される脆弱性 |
CWE-287
不適切な認証 |
CVE-2011-4860 | 2011-12-21 15:29 | 2011-12-12 | Show | GitHub Exploit DB Packet Storm |
| 252725 | 10 | 危険 | Schneider Electric | - | Schneider Electric Quantum Ethernet Module におけるアクセス権を取得される脆弱性 |
CWE-DesignError
|
CVE-2011-4859 | 2011-12-21 15:28 | 2011-12-12 | Show | GitHub Exploit DB Packet Storm |
| 252726 | 10 | 危険 | Nullsoft | - | Winamp の in_mod.dll プラグインにおけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2011-4857 | 2011-12-21 15:27 | 2011-12-9 | Show | GitHub Exploit DB Packet Storm |
| 252727 | 6.8 | 警告 | HomeSeer Technologies, LLC. | - | HomeSeer HS2 の Web インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2011-4837 | 2011-12-21 15:25 | 2011-12-15 | Show | GitHub Exploit DB Packet Storm |
| 252728 | 4.3 | 警告 | HomeSeer Technologies, LLC. | - | HomeSeer HS2 の Web インターフェースにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2011-4836 | 2011-12-21 15:24 | 2011-12-15 | Show | GitHub Exploit DB Packet Storm |
| 252729 | 7.5 | 危険 | HomeSeer Technologies, LLC. | - | HomeSeer HS2 の Web インターフェースにおけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2011-4835 | 2011-12-21 15:23 | 2011-12-15 | Show | GitHub Exploit DB Packet Storm |
| 252730 | 9.3 | 危険 | RSAセキュリティ | - | EMC RSA SecurID Software Token における権限を取得される脆弱性 |
CWE-Other
その他 |
CVE-2011-4141 | 2011-12-21 14:34 | 2011-12-17 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 1, 2026, 4:12 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 246661 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware sd210_firmware sd212_firmware sd205_firmware sd425_firmware sd427_firmware sd430_… |
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 820, SD 820A, S… |
CWE-20
Improper Input Validation |
CVE-2018-11287 | 2024-11-21 12:43 | 2018-09-20 | Show | GitHub Exploit DB Packet Storm |
| 246662 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware sd210_firmware sd212_firmware sd205_firmware sd425_firmware sd427_firmware sd430_… |
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9650, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, SD 615/16/SD 415, SD 625, SD 650/52, … |
CWE-125
Out-of-bounds Read |
CVE-2018-11285 | 2024-11-21 12:43 | 2018-09-20 | Show | GitHub Exploit DB Packet Storm |
| 246663 | 7.8 |
HIGH
Local |
qualcomm |
msm8909w_firmware msm8996au_firmware sd210_firmware sd212_firmware sd205_firmware sd430_firmware sd450_firmware sd615_firmware sd616_firmware sd415_firmware sd617_firmwa… |
In Snapdragon (Automobile, Mobile, Wear) in version MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 810, SD 820, SD 820A, SD 835, SD 845, SD… |
CWE-732
Incorrect Permission Assignment for Critical Resource |
CVE-2018-11277 | 2024-11-21 12:43 | 2018-09-20 | Show | GitHub Exploit DB Packet Storm |
| 246664 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9635m_firmware mdm9640_firmware mdm9645_firmware mdm9650_firmware mdm9655_firmware msm8909w_firmware msm8996au_firmware sd210_firmware<… |
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, … |
CWE-129
Improper Validation of Array Index |
CVE-2018-11269 | 2024-11-21 12:43 | 2018-09-20 | Show | GitHub Exploit DB Packet Storm |
| 246665 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9635m_firmware mdm9640_firmware mdm9645_firmware mdm9650_firmware mdm9655_firmware msm8909w_firmware msm8996au_firmware sd210_firmware<… |
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9635M, MDM9640, MDM9645, MDM9650, MDM9655, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 450, … |
CWE-129
Improper Validation of Array Index |
CVE-2018-11268 | 2024-11-21 12:43 | 2018-09-20 | Show | GitHub Exploit DB Packet Storm |
| 246666 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9615_firmware mdm9640_firmware mdm9650_firmware mdm9655_firmware msm8996au_firmware sd210_firmware sd212_firmware sd205_firmware sd4… |
In Snapdragon (Automobile, Mobile, Wear) in version MDM9206, MDM9607, MDM9615, MDM9640, MDM9650, MDM9655, MSM8996AU, SD 210/SD 212/SD 205, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 600, S… |
CWE-129
Improper Validation of Array Index |
CVE-2018-11267 | 2024-11-21 12:43 | 2018-09-20 | Show | GitHub Exploit DB Packet Storm |
| 246667 | 5.9 |
MEDIUM
Network |
apache | tika | In Apache Tika 0.9 to 1.18, in a rare edge case where a user does not specify an extract directory on the commandline (--extract-dir=) and the input file has an embedded file with an absolute path, s… |
CWE-22
Path Traversal |
CVE-2018-11762 | 2024-11-21 12:43 | 2018-09-19 | Show | GitHub Exploit DB Packet Storm |
| 246668 | 7.5 |
HIGH
Network |
apache oracle |
tika business_process_management_suite |
In Apache Tika 0.1 to 1.18, the XML parsers were not configured to limit entity expansion. They were therefore vulnerable to an entity expansion vulnerability which can lead to a denial of service at… |
CWE-611
XXE |
CVE-2018-11761 | 2024-11-21 12:43 | 2018-09-19 | Show | GitHub Exploit DB Packet Storm |
| 246669 | 7.8 |
HIGH
Local |
android | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check of input received from userspace before copying into buffer can lead to poten… |
CWE-20
Improper Input Validation |
CVE-2018-11302 | 2024-11-21 12:43 | 2018-09-19 | Show | GitHub Exploit DB Packet Storm | |
| 246670 | 7.8 |
HIGH
Local |
android | In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, lack of check on buffer length while processing debug log event from firmware can lead to a… |
CWE-191
Integer Underflow (Wrap or Wraparound) |
CVE-2018-11301 | 2024-11-21 12:43 | 2018-09-19 | Show | GitHub Exploit DB Packet Storm |