Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 6, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 253441 | 4.3 | 警告 | codefabrik gmbh | - | Ecomat CMS におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-5030 | 2011-12-9 13:46 | 2011-11-2 | Show | GitHub Exploit DB Packet Storm |
| 253442 | 4.3 | 警告 | fileNice | - | fileNice の index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-5031 | 2011-12-9 13:45 | 2011-11-2 | Show | GitHub Exploit DB Packet Storm |
| 253443 | 7.5 | 危険 | Tamlyn Creative Pty | - | Joomla! 用 BF Quiz コンポーネントにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-5032 | 2011-12-9 13:45 | 2011-11-2 | Show | GitHub Exploit DB Packet Storm |
| 253444 | 7.5 | 危険 | Fusebox | - | Fusebox の ProductList.cfm における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-5033 | 2011-12-9 13:44 | 2011-11-2 | Show | GitHub Exploit DB Packet Storm |
| 253445 | 7.5 | 危険 | iScripts | - | iScripts EasyBiller の viewhistorydetail.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-5034 | 2011-12-9 13:43 | 2011-11-2 | Show | GitHub Exploit DB Packet Storm |
| 253446 | 4.3 | 警告 | iScripts | - | iScripts eSwap の search.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-5035 | 2011-12-9 13:42 | 2011-11-2 | Show | GitHub Exploit DB Packet Storm |
| 253447 | 7.5 | 危険 | iScripts | - | iScripts eSwap の addsale.php におけるSQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-5036 | 2011-12-9 13:42 | 2011-11-2 | Show | GitHub Exploit DB Packet Storm |
| 253448 | 7.5 | 危険 | Michau Enterprises | - | SenseSites CommonSense CMS の article.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-5037 | 2011-12-9 13:41 | 2011-11-2 | Show | GitHub Exploit DB Packet Storm |
| 253449 | 7.5 | 危険 | Groone's World | - | Groone's Simple Contact Form における PHP リモートファイルインクルージョンの脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-5038 | 2011-12-9 13:40 | 2011-11-2 | Show | GitHub Exploit DB Packet Storm |
| 253450 | 7.5 | 危険 | ScriptsFeed.com | - | ScriptsFeed Recipes Listing Portal における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2010-5039 | 2011-12-9 13:40 | 2011-11-2 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 7, 2026, 4:13 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 246351 | 7.8 |
HIGH
Local |
qualcomm |
snapdragon_auto_firmware snapdragon_consumer_internet_of_things_firmware snapdragon_industrial_internet_of_things_firmware snapdragon_internet_of_things_firmware snapdragon_mobile_firmwar… |
Improper validation of array index can lead to unauthorized access while processing debugFS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, … |
CWE-129
Improper Validation of Array Index |
CVE-2018-13913 | 2024-11-21 12:48 | 2019-02-26 | Show | GitHub Exploit DB Packet Storm |
| 246352 | 5.5 |
MEDIUM
Local |
qualcomm |
snapdragon_auto_firmware snapdragon_connectivity_firmware snapdragon_consumer_internet_of_things_firmware snapdragon_industrial_internet_of_things_firmware snapdragon_mobile_firmware s… |
Arbitrary write issue can occur when user provides kernel address in compat mode in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Sn… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-13912 | 2024-11-21 12:48 | 2019-02-26 | Show | GitHub Exploit DB Packet Storm |
| 246353 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9650_firmware msm8909w_firmware qcs605_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_439_firmware sd_429_firmware sd_7… |
KGSL syncsource lock not handled properly during syncsource cleanup can lead to use after free issue in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdra… |
CWE-416
Use After Free |
CVE-2018-13905 | 2024-11-21 12:48 | 2019-02-26 | Show | GitHub Exploit DB Packet Storm |
| 246354 | 9.8 |
CRITICAL
Network |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9650_firmware mdm9655_firmware qcs605_firmware sd_410_firmware sd_12_firmware sd_675_firmware sd_712_firmware sd_710_firmware sd_670… |
Improper input validation in SCM handler to access storage in TZ can lead to unauthorized access in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consu… |
CWE-20
Improper Input Validation |
CVE-2018-13904 | 2024-11-21 12:48 | 2019-02-26 | Show | GitHub Exploit DB Packet Storm |
| 246355 | 7.8 |
HIGH
Local |
qualcomm |
mdm9150_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware qcs605_firmware sd_210_firmware sd_212_firmware
Use-after-free vulnerability will occur as there is no protection for the route table`s rule in IPA driver in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, S…
|
CWE-416
|
Use After Free
CVE-2018-13900
|
2024-11-21 12:48 |
2019-02-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 246356 | 7.8 |
HIGH
Local |
android | In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Out of bound mask range access caused by using possible old value of msg mask table count wh… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-13893 | 2024-11-21 12:48 | 2019-02-12 | Show | GitHub Exploit DB Packet Storm | |
| 246357 | 7.8 |
HIGH
Local |
android | In all android releases(Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, Heap memory was accessed after it was freed |
CWE-416
Use After Free |
CVE-2018-13889 | 2024-11-21 12:48 | 2019-02-12 | Show | GitHub Exploit DB Packet Storm | |
| 246358 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9635m_firmware mdm9650_firmware msm8909w_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_425_firmware sd_427_firmware sd… |
There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial I… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-13888 | 2024-11-21 12:48 | 2019-02-12 | Show | GitHub Exploit DB Packet Storm |
| 246359 | 9.8 |
CRITICAL
Network |
abbyy | flexicapture | Multiple SQL injection vulnerabilities in the monitoring feature in the HTTP API in ABBYY FlexiCapture before 12 Release 2 allow an attacker to execute arbitrary SQL commands via the mask, sortOrder,… |
CWE-89
SQL Injection |
CVE-2018-13792 | 2024-11-21 12:48 | 2019-02-10 | Show | GitHub Exploit DB Packet Storm |
| 246360 | 7.5 |
HIGH
Network |
siemens |
simatic_s7-1200_firmware simatic_s7-1500_firmware |
A vulnerability has been identified in SIMATIC S7-1200 (All versions), SIMATIC S7-1500 (All Versions < V2.6). An attacker could exhaust the available connection pool of an affected device by opening … |
CWE-400
Uncontrolled Resource Consumption |
CVE-2018-13815 | 2024-11-21 12:48 | 2018-12-14 | Show | GitHub Exploit DB Packet Storm |