JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2011-003421	Parallels Plesk Panel の Administration Panel における重要な情報を取得される脆弱性	Parallels Plesk Panel の Administration Panel は、Web ページ内に RFC 1918 の IP アドレスを含むため、重要な情報を取得される脆弱性が存在します。	CVE-2011-4731	10	http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003421.html	2011-12-16	2011-12-19	View
JVNDB-2010-001009	IBM Lotus Domino Web Access におけるリンク処理に関する脆弱性	IBM Lotus iNotes (別名 Domino Web Access または DWA) には、"Try Lotus iNotes anyway" リンクの処理に不備があるため、詳細不明な脆弱性が存在します。	CVE-2010-0276	10	http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001009.html	2010-01-07	2010-02-08	View
JVNDB-2009-003404	ElectraSoft 32bit FTP におけるスタックベースのバッファオーバーフローの脆弱性	ElectraSoft 32bit FTP には、スタックベースのバッファオーバーフローの脆弱性が存在します。	CVE-2009-1611	10	http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003404.html	2009-05-11	2012-06-26	View
JVNDB-2009-004940	Kaspersky Online Scanner における脆弱性	Kaspersky Online Scanner には、不特定の影響を受ける脆弱性が存在します。	CVE-2009-3177	10	http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004940.html	2009-09-11	2012-09-25	View
JVNDB-2008-002827	Airspan WiMax ProST のアンテナの管理パネルにおける不正なファームウェアをアップロードされる脆弱性	Airspan WiMax ProST のアンテナ上で稼動する管理者パネルは、認証資格情報を検証しないため、(1) 不正なファームウェアをアップロードされる、または (2) 異なる WiMAX ベースステーションのアンテナに接続される脆弱性が存在します。	CVE-2008-1262	10	http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002827.html	2008-03-10	2012-06-26	View

Page 13274 of 13768, showing 5 records out of 68839 total, starting on record 66366, ending on 66370

<<first <prev 13270 | 13271 | 13272 | 13273 | 13274 | 13275 | 13276 | 13277 | 13278 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page13274
  sortcvssv2
  directiondesc
  Jvninfoscveinfos
- pass(empty)
- paging(array)
  Jvninfo(array)
  page13274
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.cvssv2desc
  limit5
  options(array)
  page13274
  order(array)
  Jvninfo.cvssv2desc
  sortcvssv2
  directiondesc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 4.02 MB

Message	Memory use
Component initialization	1.39 MB
Controller action start	1.49 MB
Controller render start	2.28 MB
View render complete	2.78 MB

Timers

Total Request Time: 751 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	3.27
Event: Controller.initialize	0.02
Event: Controller.startup	0.06
Controller action	725.23
Event: Controller.beforeRender	6.10
» Processing toolbar data	6.00
Rendering View	9.80
» Event: View.beforeRender	0.07
» Rendering APP/View/Jvninfos/index.ctp	8.45
» Event: View.afterRender	0.03
» Event: View.beforeLayout	0.03
» Rendering APP/View/Layouts/default.ctp	0.71
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.11
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id33181
  nameJVNDB-2011-003421
  titleParallels Plesk Panel の Administration Panel における重要な情報を取得される脆弱性
  summaryParallels Plesk Panel の Administration Panel は、Web ページ内に RFC 1918 の IP アドレスを含むため、重要な情報を取得される脆弱性が存在します。
  cveinfo_nameCVE-2011-4731
  cveinfo_id52638
  nvdinfo_nameCVE-2011-4731
  nvdinfo_id11081
  cvssv210
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003421.html
  published_date2011-12-16
  registered_date2011-12-19
  last_updated_date2011-12-19
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id52638
  nameCVE-2011-4726
  statusCandidate
  descriptionMultiple cross-site scripting (XSS) vulnerabilities in the Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by admin/health/ and certain other files.
  phaseAssigned (20111211)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id11081
  nameCVE-2011-4731
  descriptionThe Server Administration Panel in Parallels Plesk Panel 10.2.0_build1011110331.18 includes an RFC 1918 IP address within a web page, which allows remote attackers to obtain potentially sensitive information by reading this page, as demonstrated by admin/home/admin and certain other files.
  reject(null)
  CVSS_version2
  CVSS_score5
  severityMedium
  CVSS_base_score5
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:N/A:N)
  sourcecve
  pub_date2017-01-07
  published2011-12-16
  modified_date2011-12-16
  typeCVE
  seq2011-4731
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id35229
  nameJVNDB-2010-001009
  titleIBM Lotus Domino Web Access におけるリンク処理に関する脆弱性
  summaryIBM Lotus iNotes (別名 Domino Web Access または DWA) には、"Try Lotus iNotes anyway" リンクの処理に不備があるため、詳細不明な脆弱性が存在します。
  cveinfo_nameCVE-2010-0276
  cveinfo_id42856
  nvdinfo_nameCVE-2010-0276
  nvdinfo_id11844
  cvssv210
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001009.html
  published_date2010-01-07
  registered_date2010-02-08
  last_updated_date2010-02-08
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id42856
  nameCVE-2010-0272
  statusCandidate
  descriptionHeap-based buffer overflow in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to discover process memory locations via crafted data to TCP port 80, as demonstrated by the vd_sjws2 module in VulnDisco. NOTE: as of 20100106, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
  phaseAssigned (20100108)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id11844
  nameCVE-2010-0276
  descriptionIBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the "Try Lotus iNotes anyway" link from the page that reports use of an unsupported browser, which has unspecified impact and attack vectors, aka SPR LSHR7TBMQU.
  reject(null)
  CVSS_version2
  CVSS_score10
  severityHigh
  CVSS_base_score10
  CVSS_impact_subscore10
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-18
  published2010-01-09
  modified_date2010-03-26
  typeCVE
  seq2010-0276
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id42397
  nameJVNDB-2009-003404
  titleElectraSoft 32bit FTP におけるスタックベースのバッファオーバーフローの脆弱性
  summaryElectraSoft 32bit FTP には、スタックベースのバッファオーバーフローの脆弱性が存在します。
  cveinfo_nameCVE-2009-1611
  cveinfo_id39042
  nvdinfo_nameCVE-2009-1611
  nvdinfo_id48880
  cvssv210
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003404.html
  published_date2009-05-11
  registered_date2012-06-26
  last_updated_date2012-06-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id39042
  nameCVE-2009-1607
  statusCandidate
  descriptionCross-site scripting (XSS) vulnerability in the administrator panel in phpForm.net LinkBase 2.0 allows remote attackers to inject arbitrary web script or HTML via the username in a registration, which is not properly handled when the administrator accesses the Users menu.
  phaseAssigned (20090511)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id48880
  nameCVE-2009-1611
  descriptionStack-based buffer overflow in ElectraSoft 32bit FTP 09.04.24 allows remote FTP servers to execute arbitrary code via a long 257 reply to a CWD command.
  reject(null)
  CVSS_version2
  CVSS_score10
  severityHigh
  CVSS_base_score10
  CVSS_impact_subscore10
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-07
  published2009-05-11
  modified_date2009-05-20
  typeCVE
  seq2009-1611
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id43933
  nameJVNDB-2009-004940
  titleKaspersky Online Scanner における脆弱性
  summaryKaspersky Online Scanner には、不特定の影響を受ける脆弱性が存在します。
  cveinfo_nameCVE-2009-3177
  cveinfo_id40608
  nvdinfo_nameCVE-2009-3177
  nvdinfo_id50382
  cvssv210
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004940.html
  published_date2009-09-11
  registered_date2012-09-25
  last_updated_date2012-09-25
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id40608
  nameCVE-2009-3173
  statusCandidate
  descriptionUnrestricted file upload vulnerability in admin/add_album.php in The Rat CMS Alpha 2 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/.
  phaseAssigned (20090911)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id50382
  nameCVE-2009-3177
  descriptionUnspecified vulnerability in Kaspersky Online Scanner 7.0 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.8, (1) "Kaspersky Online Antivirus Scanner 7.0 exploit (Linux)" and (2) "Kaspersky Online Antivirus Scanner 7.0 exploit (Windows)." NOTE: as of 20090909, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
  reject(null)
  CVSS_version2
  CVSS_score10
  severityHigh
  CVSS_base_score10
  CVSS_impact_subscore10
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-07
  published2009-09-11
  modified_date2009-09-14
  typeCVE
  seq2009-3177
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id47517
  nameJVNDB-2008-002827
  titleAirspan WiMax ProST のアンテナの管理パネルにおける不正なファームウェアをアップロードされる脆弱性
  summaryAirspan WiMax ProST のアンテナ上で稼動する管理者パネルは、認証資格情報を検証しないため、(1) 不正なファームウェアをアップロードされる、または (2) 異なる WiMAX ベースステーションのアンテナに接続される脆弱性が存在します。
  cveinfo_nameCVE-2008-1262
  cveinfo_id31375
  nvdinfo_nameCVE-2008-1262
  nvdinfo_id1221
  cvssv210
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002827.html
  published_date2008-03-10
  registered_date2012-06-26
  last_updated_date2012-06-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id31375
  nameCVE-2008-1258
  statusCandidate
  descriptionCross-site scripting (XSS) vulnerability in prim.htm on the D-Link DI-604 router allows remote attackers to inject arbitrary web script or HTML via the rf parameter.
  phaseAssigned (20080310)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id1221
  nameCVE-2008-1262
  descriptionThe administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to (1) upload malformed firmware or (2) bind the antenna to a different WiMAX base station via unspecified requests to forms under process_adv/.
  reject(null)
  CVSS_version2
  CVSS_score10
  severityHigh
  CVSS_base_score10
  CVSS_impact_subscore10
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-03
  published2008-03-10
  modified_date2011-03-07
  typeCVE
  seq2008-1262
  deleted(null)
  created(null)
  modified(null)
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Http Connection	close
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:13274/sort:cvssv2/direction:desc/Jvninfos:cveinfos
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:13274/sort:cvssv2/direction:desc/Jvninfos:cveinfos
Remote Port	45143
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	3.145.152.98
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
X Dostranslated Ip	3.145.152.98
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	3.145.152.98
Unique Id	aCktkr4caBHI4K1cGz23BgAAAaM
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect X Dostranslated Ip	3.145.152.98
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	3.145.152.98
Redirect Unique Id	aCktkr4caBHI4K1cGz23BgAAAaM
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect X Dostranslated Ip	3.145.152.98
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	3.145.152.98
Redirect Redirect Unique Id	aCktkr4caBHI4K1cGz23BgAAAaM
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1747529106.5208
Request Time	1747529106

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====