JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2015-000045	Android OS がオープンリゾルバとして機能してしまう問題	Android OS を搭載しているデバイスには、オープンリゾルバとして機能してしまう問題が存在します。		2.6	http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000045.html	2015-03-27	2015-03-27	View
JVNDB-2016-000129	Android OS が CRIME 攻撃による影響を受けてしまう問題	Android OS での TLS プロトコルの実装には、平文の HTTP ヘッダを取得されてしまう脆弱性が存在します。	CVE-2012-4929	2.6	http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000129.html	2016-07-22	2016-07-22	View
JVNDB-2016-003712	Android One デバイス上で稼動する Android の MediaTek ビデオドライバにおける権限を取得される脆弱性	Android One デバイス上で稼動する Android の MediaTek ビデオドライバには、権限を取得される脆弱性が存在します。	CVE-2016-3799	9.3	http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003712.html	2016-07-06	2016-07-19	View
JVNDB-2016-003713	Android One デバイス上で稼動する Android の MediaTek ビデオドライバにおける権限を取得される脆弱性	Android One デバイス上で稼動する Android の MediaTek ビデオドライバには、権限を取得される脆弱性が存在します。	CVE-2016-3800	9.3	http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003713.html	2016-07-06	2016-07-19	View
JVNDB-2016-003722	Android One デバイス上で稼動する Android の MediaTek ビデオコーデックドライバにおける重要な情報を取得される脆弱性	Android One デバイス上で稼動する Android の MediaTek ビデオコーデックドライバには、重要な情報を取得される脆弱性が存在します。	CVE-2016-3812	4.3	http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003722.html	2016-07-06	2016-07-19	View

Page 13168 of 13768, showing 5 records out of 68839 total, starting on record 65836, ending on 65840

<<first <prev 13164 | 13165 | 13166 | 13167 | 13168 | 13169 | 13170 | 13171 | 13172 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page13168
  sorttitle
  directiondesc
  Jvninfoscveinfos
- pass(empty)
- paging(array)
  Jvninfo(array)
  page13168
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.titledesc
  limit5
  options(array)
  page13168
  order(array)
  Jvninfo.titledesc
  sorttitle
  directiondesc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 4.07 MB

Message	Memory use
Component initialization	1.39 MB
Controller action start	1.49 MB
Controller render start	2.28 MB
View render complete	2.78 MB

Timers

Total Request Time: 595 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	2.64
Event: Controller.initialize	0.03
Event: Controller.startup	0.06
Controller action	576.62
Event: Controller.beforeRender	4.65
» Processing toolbar data	4.57
Rendering View	6.37
» Event: View.beforeRender	0.03
» Rendering APP/View/Jvninfos/index.ctp	5.51
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.46
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.07
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id5538
  nameJVNDB-2015-000045
  titleAndroid OS がオープンリゾルバとして機能してしまう問題
  summaryAndroid OS を搭載しているデバイスには、オープンリゾルバとして機能してしまう問題が存在します。
  cveinfo_name(null)
  cveinfo_id(null)
  nvdinfo_name(null)
  nvdinfo_id(null)
  cvssv22.6
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-000045.html
  published_date2015-03-27
  registered_date2015-03-27
  last_updated_date2015-03-27
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id(null)
  name(null)
  status(null)
  description(null)
  phase(null)
  votes(null)
  comments(null)
  deleted(null)
  created(null)
  modified(null)
  Nvdinfo(array)
  id(null)
  name(null)
  description(null)
  reject(null)
  CVSS_version(null)
  CVSS_score(null)
  severity(null)
  CVSS_base_score(null)
  CVSS_impact_subscore(null)
  CVSS_exploit_subscore(null)
  nvd_xml_version(null)
  CVSS_vector(null)
  source(null)
  pub_date(null)
  published(null)
  modified_date(null)
  type(null)
  seq(null)
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id125
  nameJVNDB-2016-000129
  titleAndroid OS が CRIME 攻撃による影響を受けてしまう問題
  summaryAndroid OS での TLS プロトコルの実装には、平文の HTTP ヘッダを取得されてしまう脆弱性が存在します。
  cveinfo_nameCVE-2012-4929
  cveinfo_id58167
  nvdinfo_nameCVE-2012-4929
  nvdinfo_id46189
  cvssv22.6
  cvssv33.7
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000129.html
  published_date2016-07-22
  registered_date2016-07-22
  last_updated_date2016-07-22
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id58167
  nameCVE-2012-4924
  statusCandidate
  descriptionBuffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method.
  phaseAssigned (20120915)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id46189
  nameCVE-2012-4929
  descriptionThe TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a "CRIME" attack.
  reject(null)
  CVSS_version2
  CVSS_score2.6
  severityLow
  CVSS_base_score2.6
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore4.9
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:H/Au:N/C:P/I:N/A:N)
  sourcecve
  pub_date2017-01-19
  published2012-09-15
  modified_date2016-08-22
  typeCVE
  seq2012-4929
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id2939
  nameJVNDB-2016-003712
  titleAndroid One デバイス上で稼動する Android の MediaTek ビデオドライバにおける権限を取得される脆弱性
  summaryAndroid One デバイス上で稼動する Android の MediaTek ビデオドライバには、権限を取得される脆弱性が存在します。
  cveinfo_nameCVE-2016-3799
  cveinfo_id90305
  nvdinfo_nameCVE-2016-3799
  nvdinfo_id19542
  cvssv29.3
  cvssv37.8
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003712.html
  published_date2016-07-06
  registered_date2016-07-19
  last_updated_date2016-07-19
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id90305
  nameCVE-2016-3486
  statusCandidate
  descriptionUnspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: FTS.
  phaseAssigned (20160317)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id19542
  nameCVE-2016-3799
  descriptionThe MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28175025 and MediaTek internal bug ALPS02693738.
  reject(null)
  CVSS_version2
  CVSS_score9.3
  severityHigh
  CVSS_base_score9.3
  CVSS_impact_subscore10
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-19
  published2016-07-10
  modified_date2016-07-12
  typeCVE
  seq2016-3799
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id2940
  nameJVNDB-2016-003713
  titleAndroid One デバイス上で稼動する Android の MediaTek ビデオドライバにおける権限を取得される脆弱性
  summaryAndroid One デバイス上で稼動する Android の MediaTek ビデオドライバには、権限を取得される脆弱性が存在します。
  cveinfo_nameCVE-2016-3800
  cveinfo_id90306
  nvdinfo_nameCVE-2016-3800
  nvdinfo_id19543
  cvssv29.3
  cvssv37.8
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003713.html
  published_date2016-07-06
  registered_date2016-07-19
  last_updated_date2016-07-19
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id90306
  nameCVE-2016-3487
  statusCandidate
  descriptionUnspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
  phaseAssigned (20160317)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id19543
  nameCVE-2016-3800
  descriptionThe MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28175027 and MediaTek internal bug ALPS02693739.
  reject(null)
  CVSS_version2
  CVSS_score9.3
  severityHigh
  CVSS_base_score9.3
  CVSS_impact_subscore10
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-19
  published2016-07-10
  modified_date2016-07-12
  typeCVE
  seq2016-3800
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id2949
  nameJVNDB-2016-003722
  titleAndroid One デバイス上で稼動する Android の MediaTek ビデオコーデックドライバにおける重要な情報を取得される脆弱性
  summaryAndroid One デバイス上で稼動する Android の MediaTek ビデオコーデックドライバには、重要な情報を取得される脆弱性が存在します。
  cveinfo_nameCVE-2016-3812
  cveinfo_id90318
  nvdinfo_nameCVE-2016-3812
  nvdinfo_id19555
  cvssv24.3
  cvssv35.5
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003722.html
  published_date2016-07-06
  registered_date2016-07-19
  last_updated_date2016-07-19
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id90318
  nameCVE-2016-3499
  statusCandidate
  descriptionUnspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0 and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Web Container.
  phaseAssigned (20160317)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id19555
  nameCVE-2016-3812
  descriptionThe MediaTek video codec driver in Android before 2016-07-05 on Android One devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28174833 and MediaTek internal bug ALPS02688832.
  reject(null)
  CVSS_version2
  CVSS_score4.3
  severityMedium
  CVSS_base_score4.3
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:P/I:N/A:N)
  sourcecve
  pub_date2017-01-19
  published2016-07-10
  modified_date2016-07-12
  typeCVE
  seq2016-3812
  deleted(null)
  created(null)
  modified(null)
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/rvm/gems/ruby-3.0.2/bin:/usr/local/rvm/gems/ruby-3.0.2@global/bin:/usr/local/rvm/rubies/ruby-3.0.2/bin:/usr/share/Modules/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/usr/local/rvm/bin:/var/lib/snapd/snap/bin:/root/bin:/sbin:/usr/local/bin
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:13168/sort:title/direction:desc/Jvninfos:cveinfos
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:13168/sort:title/direction:desc/Jvninfos:cveinfos
Remote Port	59542
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	216.73.216.116
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Ld Library Path	/usr/local/apache24/lib
Http Connection	close
Http Cache Control	max-age=259200
Http X Forwarded For	10.1.224.33
Http Via	1.1 squid-proxy-75b5465b89-fr4t6 (squid/6.10)
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http Cookie	advanced-frontend=i5t8rel3j44ndo8s79tru29c34
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
X Dostranslated Ip	216.73.216.116
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	216.73.216.116
Unique Id	aC7I74tE5KjnEnJomW22vAAAAhk
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect X Dostranslated Ip	216.73.216.116
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	216.73.216.116
Redirect Unique Id	aC7I74tE5KjnEnJomW22vAAAAhk
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect X Dostranslated Ip	216.73.216.116
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	216.73.216.116
Redirect Redirect Unique Id	aC7I74tE5KjnEnJomW22vAAAAhk
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1747896559.3279
Request Time	1747896559

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====