Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 21, 2026, 6:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 254091 | 9.3 | 危険 | マイクロソフト | - | Microsoft WMI Administrative Tools の WBEMSingleView.ocx ActiveX コントロールにおける任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-3973 | 2011-04-28 14:29 | 2010-12-23 | Show | GitHub Exploit DB Packet Storm |
| 254092 | 9.3 | 危険 | マイクロソフト | - | Microsoft Internet Explorer における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2010-0811 | 2011-04-28 14:25 | 2010-06-8 | Show | GitHub Exploit DB Packet Storm |
| 254093 | 5 | 警告 | ProFTPD Project | - | ProFTPD の mod_sftp モジュールにおける整数オーバーフローの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2011-1137 | 2011-04-27 11:59 | 2011-01-24 | Show | GitHub Exploit DB Packet Storm |
| 254094 | 6.8 | 警告 | IBM | - | IBM AIX の LDAP ログイン機能における認証を回避される脆弱性 |
CWE-287
不適切な認証 |
CVE-2011-1561 | 2011-04-27 11:57 | 2011-03-31 | Show | GitHub Exploit DB Packet Storm |
| 254095 | 4.4 | 警告 | ヒューレット・パッカード | - | HP HP-UX の OS-Core.CORE2-KRN ファイルセットにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2011-0891 | 2011-04-27 11:56 | 2011-03-23 | Show | GitHub Exploit DB Packet Storm |
| 254096 | 1.9 | 注意 | Gentoo Linux レッドハット |
- | logrotate の logrotate.c 内にある writeState 関数におけるサービス運用妨害 (ローテーションの停止) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2011-1155 | 2011-04-27 11:41 | 2011-03-30 | Show | GitHub Exploit DB Packet Storm |
| 254097 | 6.9 | 警告 | Gentoo Linux レッドハット |
- | logrotate の shred_file 関数における任意のコードを実行される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-1154 | 2011-04-27 11:40 | 2011-03-30 | Show | GitHub Exploit DB Packet Storm |
| 254098 | 1.9 | 注意 | Gentoo Linux レッドハット |
- | logrotate の createOutputFile 関数におけるログデータを閲覧される脆弱性 |
CWE-362
競合状態 |
CVE-2011-1098 | 2011-04-27 11:39 | 2011-03-30 | Show | GitHub Exploit DB Packet Storm |
| 254099 | 6.9 | 警告 | サイバートラスト株式会社 libvirt.org レッドハット |
- | 複数のレッドハット製品などで利用される libvirt の libvirt.c における任意のコードを実行される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2011-1146 | 2011-04-27 11:34 | 2011-02-17 | Show | GitHub Exploit DB Packet Storm |
| 254100 | 5.1 | 警告 | rsync.samba.org レッドハット |
- | rsync における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2011-1097 | 2011-04-27 11:32 | 2011-03-26 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 22, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 254161 | 9.8 |
CRITICAL
Network |
pippo alibaba |
pippo fastjson |
parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a… |
CWE-20
Improper Input Validation |
CVE-2017-18349 | 2024-11-21 12:19 | 2018-10-24 | Show | GitHub Exploit DB Packet Storm |
| 254162 | 7.8 |
HIGH
Local |
qualcomm |
msm8996au_firmware sd_410_firmware sd_412_firmware sd_617_firmware sd_650_firmware sd_652_firmware sd_810_firmware sd_820_firmware sd_820a_firmware |
While accessing SafeSwitch services, third party can manipulate a given device and perform unauthorized operation due to lack of checking of same state transitions in Snapdragon Automobile, Snapdrago… |
CWE-862
Missing Authorization |
CVE-2017-18312 | 2024-11-21 12:19 | 2018-10-23 | Show | GitHub Exploit DB Packet Storm |
| 254163 | 5.3 |
MEDIUM
Adjacent |
qualcomm |
msm8909w_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_410_firmware sd_412_firmware sd_615_firmware sd_616_firmware sd_415_firmware sd_617_firmware |
Under certain mode of operations, HLOS may be able get direct or indirect access through DXE channels to tamper with the authenticated WCNSS firmware stored in DDR because DXE-accessible memory is lo… |
NVD-CWE-noinfo
|
CVE-2017-18313 | 2024-11-21 12:19 | 2018-10-23 | Show | GitHub Exploit DB Packet Storm |
| 254164 | 7.0 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9650_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_835_firmware |
XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse is not blown in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM9650, SD 210/SD 212… |
NVD-CWE-noinfo
|
CVE-2017-18305 | 2024-11-21 12:19 | 2018-10-23 | Show | GitHub Exploit DB Packet Storm |
| 254165 | 5.5 |
MEDIUM
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9650_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_835_firmware sda660_firmware |
Secure display content could be accessed by third party trusted application after creating a fault in other trusted applications in Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM… |
CWE-200
Information Exposure |
CVE-2017-18300 | 2024-11-21 12:19 | 2018-10-23 | Show | GitHub Exploit DB Packet Storm |
| 254166 | 7.8 |
HIGH
Local |
qualcomm |
sd_425_firmware sd_430_firmware sd_450_firmware sd_625_firmware sd_650_firmware sd_652_firmware sd_820_firmware |
Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820. |
CWE-415
Double Free |
CVE-2017-18297 | 2024-11-21 12:19 | 2018-10-23 | Show | GitHub Exploit DB Packet Storm |
| 254167 | 6.5 |
MEDIUM
Adjacent |
qualcomm |
qca9379_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_625_firmware sd_835_firmware sd_845_firmware sd_850_firmware sda660_firmware |
Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version QCA9379, SD 210/SD 212/SD 205, SD 625, SD 835, SD 845, SD 850, SDA660. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-18283 | 2024-11-21 12:19 | 2018-10-23 | Show | GitHub Exploit DB Packet Storm |
| 254168 | 7.8 |
HIGH
Local |
qaulcomm qualcomm |
fsm9055_firmware mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware sd_210_firmware sd_212_firmware sd_205_firmware
Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small Cell SoC, Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in versi…
|
CWE-125
|
Out-of-bounds Read
CVE-2017-18304
|
2024-11-21 12:19 |
2018-10-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
| 254169 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9650_firmware msm8909w_firmware msm8996au_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_425_firmware sd_430_firmware s… |
While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MMDM9206, MD… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2017-18303 | 2024-11-21 12:19 | 2018-10-23 | Show | GitHub Exploit DB Packet Storm |
| 254170 | 5.5 |
MEDIUM
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9650_firmware msm8996au_firmware sd_210_firmware sd_212_firmware sd_205_firmware sd_450_firmware sd_650_firmware sd_652_firmware sd_… |
Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear in version MDM9206, MDM9607, MDM9650, MSM899… |
CWE-400
Uncontrolled Resource Consumption |
CVE-2017-18299 | 2024-11-21 12:19 | 2018-10-23 | Show | GitHub Exploit DB Packet Storm |