JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2005-000206	gdk-pixbuf の不正な BMP ファイルの処理によるサービス運用妨害 (DoS) の脆弱性	gdk-pixbuf において、ビットマップ (BMP) ファイルのヘッダの colors および important colors フィールドにゼロが指定されているパレットを持たない 4bpp の非圧縮ファイルの処理において、メモリの二重解放が生じる脆弱性が存在します。	CVE-2005-0891	5	http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000206.html	2005-03-28	2007-08-09	View
JVNDB-2005-000198	CDRTools の不適切なデバッグファイルの作成によるシンボリックリンク攻撃を受ける脆弱性	CDRTools において、 DEBUG オプションを有効にして実行した場合に、シンボリックリンク攻撃を受ける脆弱性が存在します。	CVE-2005-0866	2.1	http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000198.html	2005-03-24	2007-04-01	View
JVNDB-2005-000199	Sylpheed の添付ファイルの処理におけるバッファオーバーフローの脆弱性	Sylpheed において、添付ファイル名に MIME エンコードされている電子メールメッセージを表示した場合、バッファオーバーフローが発生する脆弱性が存在します。	CVE-2005-0926	5.1	http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000199.html	2005-03-24	2007-04-01	View
JVNDB-2005-000200	NIS クライアントの IBM AIX における権限昇格の脆弱性	NIS クライアントとして構成された IBM AIX には、 root 権限を取得されるセキュリティ上の脆弱性が存在します。	CVE-2005-1037	10	http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000200.html	2005-03-24	2007-04-01	View
JVNDB-2005-000191	Mozilla 製品の GIF ファイル解析用ライブラリにおけるヒープオーバーフローの脆弱性	Mozilla 、Mozilla Firefox 、Thunderbird には、GIF 形式の画像ファイル解析用ライブラリにおいて、GIF ファイル構造における Netscape 固有の拡張ブロックの取り扱いに不備が存在するため、ヒープ領域においてバッファオーバーフローが発生する脆弱性が存在します。	CVE-2005-0399	5.1	http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000191.html	2005-03-23	2007-04-01	View

Page 13374 of 13768, showing 5 records out of 68839 total, starting on record 66866, ending on 66870

<<first <prev 13370 | 13371 | 13372 | 13373 | 13374 | 13375 | 13376 | 13377 | 13378 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page13374
  sortpublished_date
  directiondesc
  Jvninfoscveinfos
- pass(empty)
- paging(array)
  Jvninfo(array)
  page13374
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.published_datedesc
  limit5
  options(array)
  page13374
  order(array)
  Jvninfo.published_datedesc
  sortpublished_date
  directiondesc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 3.82 MB

Message	Memory use
Component initialization	1.39 MB
Controller action start	1.49 MB
Controller render start	2.27 MB
View render complete	2.77 MB

Timers

Total Request Time: 423 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	2.88
Event: Controller.initialize	0.02
Event: Controller.startup	0.07
Controller action	404.68
Event: Controller.beforeRender	4.72
» Processing toolbar data	4.62
Rendering View	6.60
» Event: View.beforeRender	0.03
» Rendering APP/View/Jvninfos/index.ctp	5.66
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.54
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.07
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id62004
  nameJVNDB-2005-000206
  titlegdk-pixbuf の不正な BMP ファイルの処理によるサービス運用妨害 (DoS) の脆弱性
  summarygdk-pixbuf において、ビットマップ (BMP) ファイルのヘッダの colors および important colors フィールドにゼロが指定されているパレットを持たない 4bpp の非圧縮ファイルの処理において、メモリの二重解放が生じる脆弱性が存在します。
  cveinfo_nameCVE-2005-0891
  cveinfo_id12095
  nvdinfo_nameCVE-2005-0891
  nvdinfo_id66641
  cvssv25
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000206.html
  published_date2005-03-28
  registered_date2007-04-01
  last_updated_date2007-08-09
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id12095
  nameCVE-2005-0889
  statusCandidate
  descriptionCross-site scripting (XSS) vulnerability in index.php for Dream4 Koobi CMS 4.2.3 allows remote attackers to inject arbitrary web script or HTML via the area parameter.
  phaseAssigned (20050326)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id66641
  nameCVE-2005-0891
  descriptionDouble free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image.
  reject(null)
  CVSS_version2
  CVSS_score5
  severityMedium
  CVSS_base_score5
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:N/I:N/A:P)
  sourcecve
  pub_date2017-01-03
  published2005-05-02
  modified_date2010-08-21
  typeCVE
  seq2005-0891
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id61996
  nameJVNDB-2005-000198
  titleCDRTools の不適切なデバッグファイルの作成によるシンボリックリンク攻撃を受ける脆弱性
  summaryCDRTools において、 DEBUG オプションを有効にして実行した場合に、シンボリックリンク攻撃を受ける脆弱性が存在します。
  cveinfo_nameCVE-2005-0866
  cveinfo_id12070
  nvdinfo_nameCVE-2005-0866
  nvdinfo_id66616
  cvssv22.1
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000198.html
  published_date2005-03-24
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id12070
  nameCVE-2005-0864
  statusCandidate
  descriptionThe Boa web server, as used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products, allows remote attackers to read arbitrary files via a full pathname in the HTTP request.
  phaseAssigned (20050325)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id66616
  nameCVE-2005-0866
  descriptioncdrecord before 4:2.0, when DEBUG is enabled, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
  reject(null)
  CVSS_version2
  CVSS_score2.1
  severityLow
  CVSS_base_score2.1
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore3.9
  nvd_xml_version(null)
  CVSS_vector(AV:L/AC:L/Au:N/C:N/I:P/A:N)
  sourcecve
  pub_date2017-01-03
  published2005-05-02
  modified_date2008-09-10
  typeCVE
  seq2005-0866
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id61997
  nameJVNDB-2005-000199
  titleSylpheed の添付ファイルの処理におけるバッファオーバーフローの脆弱性
  summarySylpheed において、添付ファイル名に MIME エンコードされている電子メールメッセージを表示した場合、バッファオーバーフローが発生する脆弱性が存在します。
  cveinfo_nameCVE-2005-0926
  cveinfo_id12130
  nvdinfo_nameCVE-2005-0926
  nvdinfo_id66676
  cvssv25.1
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000199.html
  published_date2005-03-24
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id12130
  nameCVE-2005-0924
  statusCandidate
  descriptionCross-site scripting (XSS) vulnerability in Adventia E-Data 2.0 allows remote attackers to inject arbitrary web script or HTML via a query keyword.
  phaseAssigned (20050329)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id66676
  nameCVE-2005-0926
  descriptionBuffer overflow in Sylpheed before 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via attachments with MIME-encoded file names.
  reject(null)
  CVSS_version2
  CVSS_score5.1
  severityMedium
  CVSS_base_score5.1
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore4.9
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:H/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2017-01-03
  published2005-05-02
  modified_date2008-09-10
  typeCVE
  seq2005-0926
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id61998
  nameJVNDB-2005-000200
  titleNIS クライアントの IBM AIX における権限昇格の脆弱性
  summaryNIS クライアントとして構成された IBM AIX には、 root 権限を取得されるセキュリティ上の脆弱性が存在します。
  cveinfo_nameCVE-2005-1037
  cveinfo_id12241
  nvdinfo_nameCVE-2005-1037
  nvdinfo_id66786
  cvssv210
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000200.html
  published_date2005-03-24
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id12241
  nameCVE-2005-1035
  statusCandidate
  descriptionMultiple buffer overflows in Pavuk before 0.9.32 have unknown attack vectors and impact.
  phaseAssigned (20050410)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id66786
  nameCVE-2005-1037
  descriptionUnknown vulnerability in AIX 5.3.0, when configured as an NIS client, allows remote attackers to gain root privileges.
  reject(null)
  CVSS_version2
  CVSS_score10
  severityHigh
  CVSS_base_score10
  CVSS_impact_subscore10
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-03
  published2005-05-02
  modified_date2008-09-05
  typeCVE
  seq2005-1037
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id61989
  nameJVNDB-2005-000191
  titleMozilla 製品の GIF ファイル解析用ライブラリにおけるヒープオーバーフローの脆弱性
  summaryMozilla 、Mozilla Firefox 、Thunderbird には、GIF 形式の画像ファイル解析用ライブラリにおいて、GIF ファイル構造における Netscape 固有の拡張ブロックの取り扱いに不備が存在するため、ヒープ領域においてバッファオーバーフローが発生する脆弱性が存在します。
  cveinfo_nameCVE-2005-0399
  cveinfo_id11603
  nvdinfo_nameCVE-2005-0399
  nvdinfo_id66158
  cvssv25.1
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000191.html
  published_date2005-03-23
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id11603
  nameCVE-2005-0397
  statusCandidate
  descriptionFormat string vulnerability in the SetImageInfo function in image.c for ImageMagick before 6.0.2.5 may allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in a filename argument to convert, which may be called by other web applications.
  phaseAssigned (20050214)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id66158
  nameCVE-2005-0399
  descriptionHeap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer size.
  reject
  CVSS_version2
  CVSS_score5.1
  severityMedium
  CVSS_base_score5.1
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore4.9
  nvd_xml_version
  CVSS_vector(AV:N/AC:H/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2017-07-18
  published2005-05-02
  modified_date2017-07-10
  typeCVE
  seq2005-0399
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Http Connection	close
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:13374/sort:published_date/direction:desc/Jvninfos:cveinfos
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:13374/sort:published_date/direction:desc/Jvninfos:cveinfos
Remote Port	1742
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	18.221.142.39
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Suspectdos	1
X Dostranslated Ip	18.221.142.39
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	18.221.142.39
Unique Id	aCE2yOKEnluymdHDY-rsQgAAARs
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Suspectdos	1
Redirect X Dostranslated Ip	18.221.142.39
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	18.221.142.39
Redirect Unique Id	aCE2yOKEnluymdHDY-rsQgAAARs
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect Suspectdos	1
Redirect Redirect X Dostranslated Ip	18.221.142.39
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	18.221.142.39
Redirect Redirect Unique Id	aCE2yOKEnluymdHDY-rsQgAAARs
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1747007176.2361
Request Time	1747007176

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====