Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 2, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 254481 | 5 | 警告 | JSecurity Apache Software Foundation |
- | Apache Shiro および JSecurity におけるアクセス制限を回避される脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2010-3863 | 2011-06-10 09:52 | 2010-11-5 | Show | GitHub Exploit DB Packet Storm |
| 254482 | 4.3 | 警告 | Apache Software Foundation | - | Apache CouchDB の Web 管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2010-3854 | 2011-06-10 09:52 | 2011-01-28 | Show | GitHub Exploit DB Packet Storm |
| 254483 | 4.3 | 警告 | The Dojo Foundation Apache Software Foundation |
- | Apache Struts などで利用される Dojo におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2007-6726 | 2011-06-10 09:51 | 2009-04-9 | Show | GitHub Exploit DB Packet Storm |
| 254484 | 4.3 | 警告 | Apache Software Foundation | - | Apache Struts の LookupDispatchAction、DispatchAction および ActionDispatcher におけるクロスサイトスクリプティングの脆弱性 | - | CVE-2006-1548 | 2011-06-10 09:50 | 2006-03-30 | Show | GitHub Exploit DB Packet Storm |
| 254485 | 7.8 | 危険 | Apache Software Foundation | - | Apache Struts (with BeanUtils) の ActionForm におけるサービス運用妨害 (DoS) の脆弱性 | - | CVE-2006-1547 | 2011-06-10 09:50 | 2006-03-30 | Show | GitHub Exploit DB Packet Storm |
| 254486 | 4.3 | 警告 | Apache Software Foundation レッドハット |
- | Apache Struts におけるクロスサイトスクリプティングの脆弱性 | - | CVE-2005-3745 | 2011-06-10 09:49 | 2005-11-22 | Show | GitHub Exploit DB Packet Storm |
| 254487 | 4.6 | 警告 | Linux レッドハット |
- | Linux kernel の bond_select_queue 関数におけるサービス運用妨害 (DoS）の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2011-1581 | 2011-06-9 10:31 | 2011-05-18 | Show | GitHub Exploit DB Packet Storm |
| 254488 | 10 | 危険 | Google レッドハット |
- | Google Chrome におけるアドレスバーを偽装される脆弱性 |
CWE-DesignError
|
CVE-2010-3115 | 2011-06-9 10:30 | 2010-08-19 | Show | GitHub Exploit DB Packet Storm |
| 254489 | 10 | 危険 | Google レッドハット |
- | Google Chrome の text-editing 実装における脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2010-3114 | 2011-06-9 10:30 | 2010-08-19 | Show | GitHub Exploit DB Packet Storm |
| 254490 | 10 | 危険 | Google レッドハット |
- | Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-119
バッファエラー |
CVE-2010-3113 | 2011-06-9 10:29 | 2010-08-19 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 2, 2026, 4:18 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 246601 | 7.8 |
HIGH
Local |
qualcomm |
sd_835_firmware sd_845_firmware sd_850_firmware |
Improper input validation in WLAN encrypt/decrypt module can lead to a buffer copy in Snapdragon Mobile in version SD 835, SD 845, SD 850 |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-11857 | 2024-11-21 12:44 | 2018-10-30 | Show | GitHub Exploit DB Packet Storm |
| 246602 | 7.8 |
HIGH
Local |
qualcomm |
sd_835_firmware sd_845_firmware sd_850_firmware |
Improper input validation leads to buffer overwrite in the WLAN function that handles WMI commands in Snapdragon Mobile in version SD 835, SD 845, SD 850. |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-11856 | 2024-11-21 12:44 | 2018-10-30 | Show | GitHub Exploit DB Packet Storm |
| 246603 | 5.5 |
MEDIUM
Local |
qualcomm |
sd_845_firmware sd_850_firmware |
Improper access control in core module lead XBL_LOADER performs the ZI region clear for QTEE instead of XBL_SEC in Snapdragon Mobile in version SD 845, SD 850. |
CWE-732
Incorrect Permission Assignment for Critical Resource |
CVE-2018-11951 | 2024-11-21 12:44 | 2018-10-26 | Show | GitHub Exploit DB Packet Storm |
| 246604 | 7.8 |
HIGH
Local |
qualcomm |
sd_845_firmware sd_850_firmware |
Unapproved TrustZone applications can be loaded and executed in Snapdragon Mobile in version SD 845, SD 850 |
CWE-20
Improper Input Validation |
CVE-2018-11950 | 2024-11-21 12:44 | 2018-10-26 | Show | GitHub Exploit DB Packet Storm |
| 246605 | 7.8 |
HIGH
Local |
qualcomm |
sd_835_firmware sd_845_firmware sd_850_firmware sda660_firmware |
Lack of check of valid length of input parameter may cause buffer overwrite in WLAN in Snapdragon Mobile in version SD 835, SD 845, SD 850, SDA660 |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-11854 | 2024-11-21 12:44 | 2018-10-26 | Show | GitHub Exploit DB Packet Storm |
| 246606 | 4.7 |
MEDIUM
Local |
qualcomm |
sd_210_firmware sd_212_firmware sd_205_firmware sd_845_firmware sd_850_firmware |
The use of a non-time-constant memory comparison operation can lead to timing/side channel attacks in Snapdragon Mobile in version SD 210/SD 212/SD 205, SD 845, SD 850 |
CWE-200
Information Exposure |
CVE-2018-11846 | 2024-11-21 12:44 | 2018-10-26 | Show | GitHub Exploit DB Packet Storm |
| 246607 | 7.8 |
HIGH
Local |
qualcomm |
ipq8074_firmware mdm9206_firmware mdm9607_firmware mdm9650_firmware sd_425_firmware sd_427_firmware sd_430_firmware sd_435_firmware sd_450_firmware sd_625_firmware sd_65… |
Lack of check on out of range for channels When processing channel list set command will lead to buffer flow in Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, MDM9607, MDM9650, SD 42… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-11853 | 2024-11-21 12:44 | 2018-10-26 | Show | GitHub Exploit DB Packet Storm |
| 246608 | 7.8 |
HIGH
Local |
qualcomm |
mdm9206_firmware mdm9607_firmware mdm9640_firmware mdm9650_firmware msm8996au_firmware qca6174a_firmware qca6574au_firmware qca6584_firmware qca6584au_firmware qca9377_firm… |
Lack of check on remaining length parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version MDM9206, MDM9607, MDM96… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-11850 | 2024-11-21 12:44 | 2018-10-26 | Show | GitHub Exploit DB Packet Storm |
| 246609 | 7.8 |
HIGH
Local |
qualcomm |
ipq8074_firmware mdm9206_firmware mdm9607_firmware mdm9635m_firmware mdm9640_firmware mdm9650_firmware msm8996au_firmware qca4531_firmware qca6174a_firmware qca6564_firmwar… |
Lack of check on out of range of bssid parameter When processing scan start command will lead to buffer flow in Snapdragon Automobile, Snapdragon Mobile, Snapdragon Wear in version IPQ8074, MDM9206, … |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2018-11849 | 2024-11-21 12:44 | 2018-10-26 | Show | GitHub Exploit DB Packet Storm |
| 246610 | 7.5 |
HIGH
Network |
qualcomm |
sd_210_firmware sd_212_firmware sd_205_firmware sd_425_firmware sd_430_firmware sd_450_firmware sd_625_firmware sd_650_firmware sd_652_firmware |
When FW tries to get random mac address generated from new SW RNG and ADC values read are constant then DUT get struck in loop while trying to get random ADC samples in Snapdragon Mobile in version S… |
CWE-400
Uncontrolled Resource Consumption |
CVE-2018-11828 | 2024-11-21 12:44 | 2018-10-26 | Show | GitHub Exploit DB Packet Storm |