JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2014-006000	Cisco Unified Communications Domain Manager の Web フレームワークにおける任意の OS コマンドを実行される脆弱性	Cisco Unified Communications Domain Manager の Web フレームワークには、任意の OS コマンドを実行される脆弱性が存在します。	CVE-2014-8010	6.5	http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-006000.html	2014-12-09	2014-12-25	View
JVNDB-2014-007302	Cisco Adaptive Security Appliance ソフトウェアの WebVPN ポータルのログインページにおけるクロスサイトスクリプティングの脆弱性	Cisco Adaptive Security Appliance (ASA) ソフトウェアの WebVPN ポータルのログインページには、クロスサイトスクリプティングの脆弱性が存在します。	CVE-2014-8012	4.3	http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007302.html	2014-12-18	2014-12-22	View
JVNDB-2014-007837	Cisco NX-OS の TACACS+ command-authorization の実装におけるサービス運用妨害 (DoS) の脆弱性	Cisco NX-OS の TACACS+ command-authorization の実装には、サービス運用妨害 (デバイスリロード) 状態にされる脆弱性が存在します。	CVE-2014-8013	4.9	http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007837.html	2014-10-08	2015-02-13	View
JVNDB-2014-007303	Cisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性	Cisco IOS XR には、サービス運用妨害 (RSVP プロセスのリロード) 状態にされる脆弱性が存在します。	CVE-2014-8014	5	http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007303.html	2014-12-18	2014-12-22	View
JVNDB-2014-007360	Cisco Identity Services Engine の Sponsor Portal における任意のスポンサーのゲストアカウントへのアクセス権を取得される脆弱性	Cisco Identity Services Engine (ISE) の Sponsor Portal には、任意のスポンサーのゲストアカウントへのアクセス権を取得される脆弱性が存在します。	CVE-2014-8015	4	http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007360.html	2014-12-22	2014-12-24	View

Page 11163 of 13768, showing 5 records out of 68839 total, starting on record 55811, ending on 55815

<<first <prev 11159 | 11160 | 11161 | 11162 | 11163 | 11164 | 11165 | 11166 | 11167 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page11163
  sortcveinfo_id
  directionasc
- pass(empty)
- paging(array)
  Jvninfo(array)
  page11163
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.cveinfo_idasc
  limit5
  options(array)
  page11163
  order(array)
  Jvninfo.cveinfo_idasc
  sortcveinfo_id
  directionasc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 3.96 MB

Message	Memory use
Component initialization	1.39 MB
Controller action start	1.49 MB
Controller render start	2.28 MB
View render complete	2.78 MB

Timers

Total Request Time: 428 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	2.75
Event: Controller.initialize	0.02
Event: Controller.startup	0.06
Controller action	409.58
Event: Controller.beforeRender	4.64
» Processing toolbar data	4.55
Rendering View	6.47
» Event: View.beforeRender	0.03
» Rendering APP/View/Jvninfos/index.ctp	5.56
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.49
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.08
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id17125
  nameJVNDB-2014-006000
  titleCisco Unified Communications Domain Manager の Web フレームワークにおける任意の OS コマンドを実行される脆弱性
  summaryCisco Unified Communications Domain Manager の Web フレームワークには、任意の OS コマンドを実行される脆弱性が存在します。
  cveinfo_nameCVE-2014-8010
  cveinfo_id75303
  nvdinfo_nameCVE-2014-8010
  nvdinfo_id35264
  cvssv26.5
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-006000.html
  published_date2014-12-09
  registered_date2014-12-16
  last_updated_date2014-12-25
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id75303
  nameCVE-2014-8002
  statusCandidate
  descriptionUse-after-free vulnerability in decode_slice.cpp in Cisco OpenH264 1.2.0 and earlier allows remote attackers to execute arbitrary code via an encoded media file.
  phaseAssigned (20141008)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id35264
  nameCVE-2014-8010
  descriptionThe web framework in Cisco Unified Communications Domain Manager 8 allows remote authenticated administrators to execute arbitrary OS commands via crafted values, aka Bug ID CSCuq50205.
  reject(null)
  CVSS_version2
  CVSS_score6.5
  severityMedium
  CVSS_base_score6.5
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore8
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:S/C:P/I:P/A:P)
  sourcecve
  pub_date2017-01-19
  published2014-12-10
  modified_date2017-01-02
  typeCVE
  seq2014-8010
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id18427
  nameJVNDB-2014-007302
  titleCisco Adaptive Security Appliance ソフトウェアの WebVPN ポータルのログインページにおけるクロスサイトスクリプティングの脆弱性
  summaryCisco Adaptive Security Appliance (ASA) ソフトウェアの WebVPN ポータルのログインページには、クロスサイトスクリプティングの脆弱性が存在します。
  cveinfo_nameCVE-2014-8012
  cveinfo_id75305
  nvdinfo_nameCVE-2014-8012
  nvdinfo_id35265
  cvssv24.3
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007302.html
  published_date2014-12-18
  registered_date2014-12-22
  last_updated_date2014-12-22
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id75305
  nameCVE-2014-8004
  statusCandidate
  descriptionCisco IOS XR allows remote attackers to cause a denial of service (LISP process reload) by establishing many LISP TCP sessions, aka Bug ID CSCuq90378.
  phaseAssigned (20141008)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id35265
  nameCVE-2014-8012
  descriptionCross-site scripting (XSS) vulnerability in the WebVPN Portal Login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via crafted attributes in a cookie, aka Bug ID CSCuh24695.
  reject(null)
  CVSS_version2
  CVSS_score4.3
  severityMedium
  CVSS_base_score4.3
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:N/I:P/A:N)
  sourcecve
  pub_date2017-01-19
  published2014-12-18
  modified_date2017-01-02
  typeCVE
  seq2014-8012
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id18962
  nameJVNDB-2014-007837
  titleCisco NX-OS の TACACS+ command-authorization の実装におけるサービス運用妨害 (DoS) の脆弱性
  summaryCisco NX-OS の TACACS+ command-authorization の実装には、サービス運用妨害 (デバイスリロード) 状態にされる脆弱性が存在します。
  cveinfo_nameCVE-2014-8013
  cveinfo_id75306
  nvdinfo_nameCVE-2014-8013
  nvdinfo_id35266
  cvssv24.9
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007837.html
  published_date2014-10-08
  registered_date2015-02-13
  last_updated_date2015-02-13
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id75306
  nameCVE-2014-8005
  statusCandidate
  descriptionRace condition in the lighttpd module in Cisco IOS XR 5.1 and earlier on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (process reload) by establishing many TCP sessions, aka Bug ID CSCuq45239.
  phaseAssigned (20141008)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id35266
  nameCVE-2014-8013
  descriptionThe TACACS+ command-authorization implementation in Cisco NX-OS allows local users to cause a denial of service (device reload) via a long CLI command, aka Bug ID CSCur54182.
  reject(null)
  CVSS_version2
  CVSS_score4.9
  severityMedium
  CVSS_base_score4.9
  CVSS_impact_subscore6.9
  CVSS_exploit_subscore3.9
  nvd_xml_version(null)
  CVSS_vector(AV:L/AC:L/Au:N/C:N/I:N/A:C)
  sourcecve
  pub_date2017-01-19
  published2015-02-03
  modified_date2015-11-04
  typeCVE
  seq2014-8013
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id18428
  nameJVNDB-2014-007303
  titleCisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性
  summaryCisco IOS XR には、サービス運用妨害 (RSVP プロセスのリロード) 状態にされる脆弱性が存在します。
  cveinfo_nameCVE-2014-8014
  cveinfo_id75307
  nvdinfo_nameCVE-2014-8014
  nvdinfo_id35267
  cvssv25
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007303.html
  published_date2014-12-18
  registered_date2014-12-22
  last_updated_date2014-12-22
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id75307
  nameCVE-2014-8006
  statusCandidate
  descriptionThe Disaster Recovery (DRA) feature on the Cisco ISB8320-E High-Definition IP-Only DVR allows remote attackers to bypass authentication by establishing a TELNET session during a recovery boot, aka Bug ID CSCup85422.
  phaseAssigned (20141008)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id35267
  nameCVE-2014-8014
  descriptionCisco IOS XR allows remote attackers to cause a denial of service (RSVP process reload) via a malformed RSVP packet, aka Bug ID CSCub63710.
  reject(null)
  CVSS_version2
  CVSS_score5
  severityMedium
  CVSS_base_score5
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:N/I:N/A:P)
  sourcecve
  pub_date2017-01-19
  published2014-12-18
  modified_date2017-01-02
  typeCVE
  seq2014-8014
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id18485
  nameJVNDB-2014-007360
  titleCisco Identity Services Engine の Sponsor Portal における任意のスポンサーのゲストアカウントへのアクセス権を取得される脆弱性
  summaryCisco Identity Services Engine (ISE) の Sponsor Portal には、任意のスポンサーのゲストアカウントへのアクセス権を取得される脆弱性が存在します。
  cveinfo_nameCVE-2014-8015
  cveinfo_id75308
  nvdinfo_nameCVE-2014-8015
  nvdinfo_id35268
  cvssv24
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007360.html
  published_date2014-12-22
  registered_date2014-12-24
  last_updated_date2014-12-24
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id75308
  nameCVE-2014-8007
  statusCandidate
  descriptionCisco Prime Infrastructure allows remote authenticated users to read device-discovery passwords by examining the HTML source code of the Quick Discovery options page, aka Bug ID CSCum00019.
  phaseAssigned (20141008)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id35268
  nameCVE-2014-8015
  descriptionThe Sponsor Portal in Cisco Identity Services Engine (ISE) allows remote authenticated users to obtain access to an arbitrary sponsor"s guest account via a modified HTTP request, aka Bug ID CSCur64400.
  reject(null)
  CVSS_version2
  CVSS_score4
  severityMedium
  CVSS_base_score4
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore8
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:S/C:N/I:P/A:N)
  sourcecve
  pub_date2017-01-19
  published2014-12-22
  modified_date2017-01-02
  typeCVE
  seq2014-8015
  deleted(null)
  created(null)
  modified(null)
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:11163/sort:cveinfo_id/direction:asc
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:11163/sort:cveinfo_id/direction:asc
Remote Port	38112
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	216.73.216.32
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Connection	close
Http Cache Control	max-age=259200
Http X Forwarded For	10.2.116.192
Http Via	1.1 squid-proxy-5b5d847c96-xmlgh (squid/6.13)
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Suspectharddos	1
Suspectdos	1
X Dostranslated Ip	216.73.216.32
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	216.73.216.32
Unique Id	aOdXcBKsm0vHw1N4tkKGtwAAABE
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Suspectharddos	1
Redirect Suspectdos	1
Redirect X Dostranslated Ip	216.73.216.32
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	216.73.216.32
Redirect Unique Id	aOdXcBKsm0vHw1N4tkKGtwAAABE
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect Suspectharddos	1
Redirect Redirect Suspectdos	1
Redirect Redirect X Dostranslated Ip	216.73.216.32
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	216.73.216.32
Redirect Redirect Unique Id	aOdXcBKsm0vHw1N4tkKGtwAAABE
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1759991664.8997
Request Time	1759991664

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====