JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2006-000292	HP-UX Kernel の spinlock 処理におけるサービス運用妨害 (DoS) の脆弱性	HP-UX のカーネルには、排他制御を行うための spinlock 処理の不備のため、異常に長い時間 spinlock を保持する状態が続いた場合に適切にエラーコードが返されず、カーネルパニックが発生する脆弱性が存在します。	CVE-2006-2551	2.1	http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000292.html	2006-05-17	2007-04-01	View
JVNDB-2006-000548	Macromedia Flash Player の allowScriptAccess オプションを回避される脆弱性	------------	CVE-2006-4640	10	http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000548.html	2006-09-12	2007-04-01	View
JVNDB-2005-000138	Mozilla Firefox の about:config における真偽値を改ざんされる脆弱性	------------	CVE-2005-0232	2.6	http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000138.html	2005-02-24	2007-04-01	View
JVNDB-2005-000394	Linux Kernel の ipt_recent モジュールにおけるサービス運用妨害 (DoS) の脆弱性	Linux Kernel において iptables に実装される ipt_recent モジュールには、 last_pkts 配列のメモリ割り当て処理を行う際に、データ型に関して「unsigned long」型とすべきところを「u_int32_t」型と誤って処理を行っているため、カーネルクラッシュが発生する脆弱性が存在します。	CVE-2005-2872	5	http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000394.html	2005-06-16	2007-04-01	View
JVNDB-2004-000045	Microsoft Internet Explorer のビットマップファイルの解析における整数オーバフローの脆弱性	Microsoft Internet Explorer には、ビットマップ (BMP) ファイルのヘッダのオフセット値の取り扱いにおける不備のため、整数オーバーフローを発生する脆弱性が存在します。	CVE-2004-0566	7.5	http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000045.html	2004-02-15	2007-04-01	View

Page 13726 of 13768, showing 5 records out of 68839 total, starting on record 68626, ending on 68630

<<first <prev 13722 | 13723 | 13724 | 13725 | 13726 | 13727 | 13728 | 13729 | 13730 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page13726
  sortlast_updated_date
  directiondesc
- pass(empty)
- paging(array)
  Jvninfo(array)
  page13726
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.last_updated_datedesc
  limit5
  options(array)
  page13726
  order(array)
  Jvninfo.last_updated_datedesc
  sortlast_updated_date
  directiondesc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 4.10 MB

Message	Memory use
Component initialization	1.39 MB
Controller action start	1.49 MB
Controller render start	2.28 MB
View render complete	2.78 MB

Timers

Total Request Time: 547 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	3.41
Event: Controller.initialize	0.02
Event: Controller.startup	0.09
Controller action	526.20
Event: Controller.beforeRender	4.68
» Processing toolbar data	4.59
Rendering View	7.42
» Event: View.beforeRender	0.02
» Rendering APP/View/Jvninfos/index.ctp	6.52
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.49
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.07
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id58096
  nameJVNDB-2006-000292
  titleHP-UX Kernel の spinlock 処理におけるサービス運用妨害 (DoS) の脆弱性
  summaryHP-UX のカーネルには、排他制御を行うための spinlock 処理の不備のため、異常に長い時間 spinlock を保持する状態が続いた場合に適切にエラーコードが返されず、カーネルパニックが発生する脆弱性が存在します。
  cveinfo_nameCVE-2006-2551
  cveinfo_id18653
  nvdinfo_nameCVE-2006-2551
  nvdinfo_id61246
  cvssv22.1
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000292.html
  published_date2006-05-17
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id18653
  nameCVE-2006-2549
  statusCandidate
  descriptionStack-based buffer overflow in PDF Form Filling and Flattening Tool before 3.1.0.12 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via long field names.
  phaseAssigned (20060522)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id61246
  nameCVE-2006-2551
  descriptionUnspecified vulnerability in the kernel in HP-UX B.11.00 allows local users to cause an unspecified denial of service via unknown vectors.
  reject(null)
  CVSS_version2
  CVSS_score2.1
  severityLow
  CVSS_base_score2.1
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore3.9
  nvd_xml_version(null)
  CVSS_vector(AV:L/AC:L/Au:N/C:N/I:N/A:P)
  sourcecve
  pub_date2016-12-20
  published2006-05-23
  modified_date2011-03-07
  typeCVE
  seq2006-2551
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id58352
  nameJVNDB-2006-000548
  titleMacromedia Flash Player の allowScriptAccess オプションを回避される脆弱性
  summary------------
  cveinfo_nameCVE-2006-4640
  cveinfo_id20742
  nvdinfo_nameCVE-2006-4640
  nvdinfo_id63273
  cvssv210
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000548.html
  published_date2006-09-12
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id20742
  nameCVE-2006-4638
  statusCandidate
  descriptionPHP remote file inclusion vulnerability in article.php in ACGV News 0.9.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PathNews parameter.
  phaseAssigned (20060908)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id63273
  nameCVE-2006-4640
  descriptionUnspecified vulnerability in Adobe Flash Player before 9.0.16.0 allows user-assisted remote attackers to bypass the allowScriptAccess protection via unspecified vectors.
  reject(null)
  CVSS_version2
  CVSS_score6.8
  severityMedium
  CVSS_base_score6.8
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2016-12-20
  published2006-09-12
  modified_date2011-03-07
  typeCVE
  seq2006-4640
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id61936
  nameJVNDB-2005-000138
  titleMozilla Firefox の about:config における真偽値を改ざんされる脆弱性
  summary------------
  cveinfo_nameCVE-2005-0232
  cveinfo_id11436
  nvdinfo_nameCVE-2005-0232
  nvdinfo_id65996
  cvssv22.6
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000138.html
  published_date2005-02-24
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id11436
  nameCVE-2005-0230
  statusCandidate
  descriptionFirefox 1.0 does not prevent the user from dragging an executable file to the desktop when it has an image/gif content type but has a dangerous extension such as .bat or .exe, which allows remote attackers to bypass the intended restriction and execute arbitrary commands via malformed GIF files that can still be parsed by the Windows batch file parser, aka "firedragging."
  phaseAssigned (20050207)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id65996
  nameCVE-2005-0232
  descriptionFirefox 1.0 allows remote attackers to modify Boolean configuration parameters for the about:config site by using a plugin such as Flash, and the -moz-opacity filter, to display the about:config site then cause the user to double-click at a certain screen position, aka "Fireflashing."
  reject
  CVSS_version2
  CVSS_score2.6
  severityLow
  CVSS_base_score2.6
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore4.9
  nvd_xml_version
  CVSS_vector(AV:N/AC:H/Au:N/C:N/I:P/A:N)
  sourcecve
  pub_date2017-07-18
  published2005-05-02
  modified_date2017-07-10
  typeCVE
  seq2005-0232
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  3(array)
  Jvninfo(array)
  id62192
  nameJVNDB-2005-000394
  titleLinux Kernel の ipt_recent モジュールにおけるサービス運用妨害 (DoS) の脆弱性
  summaryLinux Kernel において iptables に実装される ipt_recent モジュールには、 last_pkts 配列のメモリ割り当て処理を行う際に、データ型に関して「unsigned long」型とすべきところを「u_int32_t」型と誤って処理を行っているため、カーネルクラッシュが発生する脆弱性が存在します。
  cveinfo_nameCVE-2005-2872
  cveinfo_id14076
  nvdinfo_nameCVE-2005-2872
  nvdinfo_id68547
  cvssv25
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000394.html
  published_date2005-06-16
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id14076
  nameCVE-2005-2870
  statusCandidate
  descriptionUnknown vulnerability in the net-svc script on Solaris 10 allows remote authenticated users to execute arbitrary code on a DHCP client via certain DHCP responses.
  phaseAssigned (20050908)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id68547
  nameCVE-2005-2872
  descriptionThe ipt_recent kernel module (ipt_recent.c) in Linux kernel before 2.6.12, when running on 64-bit processors such as AMD64, allows remote attackers to cause a denial of service (kernel panic) via certain attacks such as SSH brute force, which leads to memset calls using a length based on the u_int32_t type, acting on an array of unsigned long elements, a different vulnerability than CVE-2005-2873.
  reject(null)
  CVSS_version2
  CVSS_score5
  severityMedium
  CVSS_base_score5
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:N/I:N/A:P)
  sourcecve
  pub_date2017-01-03
  published2005-09-09
  modified_date2016-11-07
  typeCVE
  seq2005-2872
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id62704
  nameJVNDB-2004-000045
  titleMicrosoft Internet Explorer のビットマップファイルの解析における整数オーバフローの脆弱性
  summaryMicrosoft Internet Explorer には、ビットマップ (BMP) ファイルのヘッダのオフセット値の取り扱いにおける不備のため、整数オーバーフローを発生する脆弱性が存在します。
  cveinfo_nameCVE-2004-0566
  cveinfo_id8993
  nvdinfo_nameCVE-2004-0566
  nvdinfo_id70994
  cvssv27.5
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000045.html
  published_date2004-02-15
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id8993
  nameCVE-2004-0565
  statusCandidate
  descriptionFloating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit.
  phaseAssigned (20040615)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id70994
  nameCVE-2004-0566
  descriptionInteger overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value.
  reject
  CVSS_version2
  CVSS_score7.5
  severityHigh
  CVSS_base_score7.5
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore10
  nvd_xml_version
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2017-07-18
  published2004-07-27
  modified_date2017-07-10
  typeCVE
  seq2004-0566
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Http Connection	close
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:13726/sort:last_updated_date/direction:desc
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:13726/sort:last_updated_date/direction:desc
Remote Port	47055
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	13.58.11.68
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
X Dostranslated Ip	13.58.11.68
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	13.58.11.68
Unique Id	aBDiUn752NOfhu3Y21jhKAAAAfs
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect X Dostranslated Ip	13.58.11.68
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	13.58.11.68
Redirect Unique Id	aBDiUn752NOfhu3Y21jhKAAAAfs
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect X Dostranslated Ip	13.58.11.68
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	13.58.11.68
Redirect Redirect Unique Id	aBDiUn752NOfhu3Y21jhKAAAAfs
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1745936978.9203
Request Time	1745936978

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====