JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2007-000140	Cisco IOS の IPS 機能における検出回避の脆弱性	Cisco IOS の IPS (侵入防御システム) 機能には、フラグメントされたパケットを利用されることにより、正規表現を利用する IPS シグネチャによる検出を回避されてしまう問題が存在します。	CVE-2007-0917	6.4	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000140.html	2007-02-13	2007-04-01	View
JVNDB-2007-000139	Cisco IOS の IPS 機能におけるサービス運用妨害 (DoS) の脆弱性	Cisco IOS の IPS (侵入防御システム) 機能には、ATOMIC.TCP シグネチャエンジンにおいて正規表現機能を利用する特定の IPS シグネチャを適切に取り扱わないため、デバイスがクラッシュする、あるいはトラフィックロスが生じる問題が存在ます。	CVE-2007-0918	5	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000139.html	2007-02-13	2007-04-01	View
JVNDB-2007-000138	Microsoft Word における不正な形式の描画オブジェクト処理によるメモリ破壊の脆弱性	Microsoft Word には不正な形式の描画オブジェクトを処理した際に、メモリ領域が破壊される脆弱性が存在します。	CVE-2007-0209	9.3	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000138.html	2007-02-13	2007-04-01	View
JVNDB-2007-000137	Microsoft Word におけるセキュリティ警告なしでマクロが実行される脆弱性	Microsoft Word には、特定のドキュメントのプロパティに対するチェックが不適切であるため、ユーザにマクロセキュリティ警告が表示されずにマクロが実行される脆弱性が存在します。	CVE-2007-0208	9.3	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000137.html	2007-02-13	2007-04-01	View
JVNDB-2007-000136	Sun Solaris の in.telnetd におけるログイン認証回避の脆弱性	Sun Solaris の in.telnetd には、正規のユーザ名に文字列 "-f" を含む USER 環境変数の誤った解釈により、ログイン認証が回避可能となる問題が存在します。	CVE-2007-0882	10	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000136.html	2007-02-12	2007-04-01	View

Page 12417 of 13768, showing 5 records out of 68839 total, starting on record 62081, ending on 62085

<<first <prev 12413 | 12414 | 12415 | 12416 | 12417 | 12418 | 12419 | 12420 | 12421 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page12417
  sortname
  directiondesc
  Jvninfoscveinfos
- pass(empty)
- paging(array)
  Jvninfo(array)
  page12417
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.namedesc
  limit5
  options(array)
  page12417
  sortname
  directiondesc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 4.24 MB

Message	Memory use
Component initialization	1.39 MB
Controller action start	1.49 MB
Controller render start	2.26 MB
View render complete	2.76 MB

Timers

Total Request Time: 564 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	2.89
Event: Controller.initialize	0.02
Event: Controller.startup	0.06
Controller action	544.29
Event: Controller.beforeRender	5.23
» Processing toolbar data	5.13
Rendering View	6.73
» Event: View.beforeRender	0.03
» Rendering APP/View/Jvninfos/index.ctp	5.77
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.53
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.08
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id51478
  nameJVNDB-2007-000140
  titleCisco IOS の IPS 機能における検出回避の脆弱性
  summaryCisco IOS の IPS (侵入防御システム) 機能には、フラグメントされたパケットを利用されることにより、正規表現を利用する IPS シグネチャによる検出を回避されてしまう問題が存在します。
  cveinfo_nameCVE-2007-0917
  cveinfo_id24272
  nvdinfo_nameCVE-2007-0917
  nvdinfo_id53132
  cvssv26.4
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000140.html
  published_date2007-02-13
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id24272
  nameCVE-2007-0915
  statusCandidate
  descriptionDistributed SLS daemon (SLSd) on HP-UX B.11.11 allows remote attackers to overwrite arbitrary files and gain privileges via a crafted RPC request.
  phaseAssigned (20070213)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id53132
  nameCVE-2007-0917
  descriptionThe Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets.
  reject(null)
  CVSS_version2
  CVSS_score6.4
  severityMedium
  CVSS_base_score6.4
  CVSS_impact_subscore4.9
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:P/A:N)
  sourcecve
  pub_date2017-01-07
  published2007-02-13
  modified_date2011-03-07
  typeCVE
  seq2007-0917
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id51477
  nameJVNDB-2007-000139
  titleCisco IOS の IPS 機能におけるサービス運用妨害 (DoS) の脆弱性
  summaryCisco IOS の IPS (侵入防御システム) 機能には、ATOMIC.TCP シグネチャエンジンにおいて正規表現機能を利用する特定の IPS シグネチャを適切に取り扱わないため、デバイスがクラッシュする、あるいはトラフィックロスが生じる問題が存在ます。
  cveinfo_nameCVE-2007-0918
  cveinfo_id24273
  nvdinfo_nameCVE-2007-0918
  nvdinfo_id53133
  cvssv25
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000139.html
  published_date2007-02-13
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id24273
  nameCVE-2007-0916
  statusCandidate
  descriptionUnspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11 and B.11.23 allows local users to cause an unspecified denial of service via unknown vectors.
  phaseAssigned (20070213)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id53133
  nameCVE-2007-0918
  descriptionThe ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service (IPS crash and traffic loss) via unspecified manipulations that are not properly handled by the regular expression feature, as demonstrated using the 3123.0 (Netbus Pro Traffic) signature.
  reject(null)
  CVSS_version2
  CVSS_score7.1
  severityHigh
  CVSS_base_score7.1
  CVSS_impact_subscore6.9
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:N/I:N/A:C)
  sourcecve
  pub_date2017-01-07
  published2007-02-13
  modified_date2011-07-15
  typeCVE
  seq2007-0918
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id51476
  nameJVNDB-2007-000138
  titleMicrosoft Word における不正な形式の描画オブジェクト処理によるメモリ破壊の脆弱性
  summaryMicrosoft Word には不正な形式の描画オブジェクトを処理した際に、メモリ領域が破壊される脆弱性が存在します。
  cveinfo_nameCVE-2007-0209
  cveinfo_id23564
  nvdinfo_nameCVE-2007-0209
  nvdinfo_id52439
  cvssv29.3
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000138.html
  published_date2007-02-13
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id23564
  nameCVE-2007-0207
  statusCandidate
  description** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
  phaseAssigned (20070112)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id52439
  nameCVE-2007-0209
  descriptionMicrosoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via a Word file with a malformed drawing object, which leads to memory corruption.
  reject(null)
  CVSS_version2
  CVSS_score9.3
  severityHigh
  CVSS_base_score9.3
  CVSS_impact_subscore10
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-07
  published2007-02-13
  modified_date2011-03-07
  typeCVE
  seq2007-0209
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id51475
  nameJVNDB-2007-000137
  titleMicrosoft Word におけるセキュリティ警告なしでマクロが実行される脆弱性
  summaryMicrosoft Word には、特定のドキュメントのプロパティに対するチェックが不適切であるため、ユーザにマクロセキュリティ警告が表示されずにマクロが実行される脆弱性が存在します。
  cveinfo_nameCVE-2007-0208
  cveinfo_id23563
  nvdinfo_nameCVE-2007-0208
  nvdinfo_id52438
  cvssv29.3
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000137.html
  published_date2007-02-13
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id23563
  nameCVE-2007-0206
  statusCandidate
  descriptionUnspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, and 7.50 allows remote attackers to read arbitrary files via unknown vectors.
  phaseAssigned (20070111)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id52438
  nameCVE-2007-0208
  descriptionMicrosoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the properties of certain documents and warn the user of macro content, which allows user-assisted remote attackers to execute arbitrary code.
  reject(null)
  CVSS_version2
  CVSS_score9.3
  severityHigh
  CVSS_base_score9.3
  CVSS_impact_subscore10
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-07
  published2007-02-13
  modified_date2011-03-07
  typeCVE
  seq2007-0208
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id51474
  nameJVNDB-2007-000136
  titleSun Solaris の in.telnetd におけるログイン認証回避の脆弱性
  summarySun Solaris の in.telnetd には、正規のユーザ名に文字列 "-f" を含む USER 環境変数の誤った解釈により、ログイン認証が回避可能となる問題が存在します。
  cveinfo_nameCVE-2007-0882
  cveinfo_id24237
  nvdinfo_nameCVE-2007-0882
  nvdinfo_id53098
  cvssv210
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000136.html
  published_date2007-02-12
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id24237
  nameCVE-2007-0880
  statusCandidate
  descriptionCapital Request Forms stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database credentials via a direct request for inc/common_db.inc.
  phaseAssigned (20070212)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id53098
  nameCVE-2007-0882
  descriptionArgument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account.
  reject(null)
  CVSS_version2
  CVSS_score10
  severityHigh
  CVSS_base_score10
  CVSS_impact_subscore10
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-07
  published2007-02-12
  modified_date2011-06-13
  typeCVE
  seq2007-0882
  deleted(null)
  created(null)
  modified(null)
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:12417/sort:name/direction:desc/Jvninfos:cveinfos
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:12417/sort:name/direction:desc/Jvninfos:cveinfos
Remote Port	44836
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	216.73.216.211
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Connection	close
Http Cache Control	max-age=259200
Http X Forwarded For	10.2.235.78
Http Via	1.1 squid-proxy-5b5d847c96-qsdzj (squid/6.13)
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Suspectharddos	1
Suspectdos	1
X Dostranslated Ip	216.73.216.211
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	216.73.216.211
Unique Id	aTHO3bu5ygIRzbVz-aiu-gAAAgU
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Suspectharddos	1
Redirect Suspectdos	1
Redirect X Dostranslated Ip	216.73.216.211
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	216.73.216.211
Redirect Unique Id	aTHO3bu5ygIRzbVz-aiu-gAAAgU
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect Suspectharddos	1
Redirect Redirect Suspectdos	1
Redirect Redirect X Dostranslated Ip	216.73.216.211
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	216.73.216.211
Redirect Redirect Unique Id	aTHO3bu5ygIRzbVz-aiu-gAAAgU
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1764871901.6741
Request Time	1764871901

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====