JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2010-001368	VMware Remote Console の vmware-vmrc.exe build 158248 における任意のコードを実行される脆弱性	VMware Remote Console の vmware-vmrc.exe build 158248 には、フォーマットストリングの処理に関して不備があるため、任意のコードを実行される脆弱性が存在します。	CVE-2009-3732	10	http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001368.html	2010-04-09	2010-05-07	View
JVNDB-2010-004701	HP OV NNM の ovet_demandpoll.exe におけるフォーマットストリングの脆弱性	HP OpenView Network Node Manager (OV NNM) の ovet_demandpoll.exe には、フォーマットストリングの不備があるため、フォーマットストリングの脆弱性が存在します。	CVE-2010-1550	10	http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004701.html	2010-05-11	2012-09-25	View
JVNDB-2009-004787	phion airlock WAF の管理インターフェースにおけるサービス運用妨害 (DoS) の脆弱性	phion airlock Web Application Firewall (WAF) の管理インターフェースは、画像の過度に大きい幅および高さのパラメータを指定する CGI リクエストを適切に処理しないため、任意のコマンドを実行される、およびサービス運用妨害 (リソースの消費) 状態となる脆弱性が存在します。	CVE-2009-2300	10	http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004787.html	2009-07-02	2012-09-25	View
JVNDB-2007-002456	E-Commerce Scripts Shopping Cart Script の admin.aspx における SQL インジェクションの脆弱性	E-Commerce Scripts Shopping Cart Script、Multi-Vendor E-Shop Script および Auction Script の admin.aspx には、SQL インジェクションの脆弱性が存在します。	CVE-2007-4121	10	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002456.html	2007-08-01	2012-06-26	View
JVNDB-2007-005784	Xeweb XEForum における権限を取得される脆弱性	Xeweb XEForum には、権限を取得される脆弱性が存在します。	CVE-2007-3500	10	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005784.html	2007-06-29	2012-12-20	View

Page 141 of 13768, showing 5 records out of 68839 total, starting on record 701, ending on 705

<<first <prev 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page141
  sortcvssv2
  directionasc
- pass(empty)
- paging(array)
  Jvninfo(array)
  page141
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.cvssv2asc
  limit5
  options(array)
  page141
  order(array)
  Jvninfo.cvssv2asc
  sortcvssv2
  directionasc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 3.83 MB

Message	Memory use
Component initialization	1.38 MB
Controller action start	1.49 MB
Controller render start	2.27 MB
View render complete	2.77 MB

Timers

Total Request Time: 155 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	3.84
Event: Controller.initialize	0.04
Event: Controller.startup	0.07
Controller action	135.51
Event: Controller.beforeRender	4.60
» Processing toolbar data	4.52
Rendering View	6.43
» Event: View.beforeRender	0.02
» Rendering APP/View/Jvninfos/index.ctp	5.51
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.52
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.07
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id35588
  nameJVNDB-2010-001368
  titleVMware Remote Console の vmware-vmrc.exe build 158248 における任意のコードを実行される脆弱性
  summaryVMware Remote Console の vmware-vmrc.exe build 158248 には、フォーマットストリングの処理に関して不備があるため、任意のコードを実行される脆弱性が存在します。
  cveinfo_nameCVE-2009-3732
  cveinfo_id41163
  nvdinfo_nameCVE-2009-3732
  nvdinfo_id50915
  cvssv210
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001368.html
  published_date2010-04-09
  registered_date2010-05-07
  last_updated_date2010-05-07
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id41163
  nameCVE-2009-3728
  statusCandidate
  descriptionDirectory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local International Color Consortium (ICC) profile files via a .. (dot dot) in a pathname, aka Bug Id 6631533.
  phaseAssigned (20091016)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id50915
  nameCVE-2009-3732
  descriptionFormat string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via unspecified vectors.
  reject(null)
  CVSS_version2
  CVSS_score10
  severityHigh
  CVSS_base_score10
  CVSS_impact_subscore10
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-07
  published2010-04-12
  modified_date2013-05-14
  typeCVE
  seq2009-3732
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id38916
  nameJVNDB-2010-004701
  titleHP OV NNM の ovet_demandpoll.exe におけるフォーマットストリングの脆弱性
  summaryHP OpenView Network Node Manager (OV NNM) の ovet_demandpoll.exe には、フォーマットストリングの不備があるため、フォーマットストリングの脆弱性が存在します。
  cveinfo_nameCVE-2010-1550
  cveinfo_id44130
  nvdinfo_nameCVE-2010-1550
  nvdinfo_id13073
  cvssv210
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004701.html
  published_date2010-05-11
  registered_date2012-09-25
  last_updated_date2012-09-25
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id44130
  nameCVE-2010-1546
  statusCandidate
  descriptionMultiple eval injection vulnerabilities in the import functionality in the Chaos Tool Suite (aka CTools) module 6.x before 6.x-1.4 for Drupal allow remote authenticated users, with "administer page manager" privileges, to execute arbitrary PHP code via input to a text area, related to (1) the page_manager_page_import_subtask_validate function in page_manager/plugins/tasks/page.admin.inc and (2) the page_manager_handler_import_validate function in page_manager/page_manager.admin.inc.
  phaseAssigned (20100426)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id13073
  nameCVE-2010-1550
  descriptionFormat string vulnerability in ovet_demandpoll.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via format string specifiers in the sel parameter.
  reject(null)
  CVSS_version2
  CVSS_score10
  severityHigh
  CVSS_base_score10
  CVSS_impact_subscore10
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-18
  published2010-05-13
  modified_date2010-05-20
  typeCVE
  seq2010-1550
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id43780
  nameJVNDB-2009-004787
  titlephion airlock WAF の管理インターフェースにおけるサービス運用妨害 (DoS) の脆弱性
  summaryphion airlock Web Application Firewall (WAF) の管理インターフェースは、画像の過度に大きい幅および高さのパラメータを指定する CGI リクエストを適切に処理しないため、任意のコマンドを実行される、およびサービス運用妨害 (リソースの消費) 状態となる脆弱性が存在します。
  cveinfo_nameCVE-2009-2300
  cveinfo_id39731
  nvdinfo_nameCVE-2009-2300
  nvdinfo_id49548
  cvssv210
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004787.html
  published_date2009-07-02
  registered_date2012-09-25
  last_updated_date2012-09-25
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id39731
  nameCVE-2009-2296
  statusCandidate
  descriptionThe NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the nfs_portmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors.
  phaseAssigned (20090702)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id49548
  nameCVE-2009-2300
  descriptionThe management interface in the phion airlock Web Application Firewall (WAF) 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service (resource consumption) via a crafted request.
  reject(null)
  CVSS_version2
  CVSS_score10
  severityHigh
  CVSS_base_score10
  CVSS_impact_subscore10
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-07
  published2009-07-02
  modified_date2009-07-15
  typeCVE
  seq2009-2300
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id53764
  nameJVNDB-2007-002456
  titleE-Commerce Scripts Shopping Cart Script の admin.aspx における SQL インジェクションの脆弱性
  summaryE-Commerce Scripts Shopping Cart Script、Multi-Vendor E-Shop Script および Auction Script の admin.aspx には、SQL インジェクションの脆弱性が存在します。
  cveinfo_nameCVE-2007-4121
  cveinfo_id27476
  nvdinfo_nameCVE-2007-4121
  nvdinfo_id56252
  cvssv210
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002456.html
  published_date2007-08-01
  registered_date2012-06-26
  last_updated_date2012-06-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id27476
  nameCVE-2007-4119
  statusCandidate
  descriptionMultiple SQL injection vulnerabilities in yonetici.asp in Berthanas Ziyaretci Defteri 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) user and (2) Pass fields.
  phaseAssigned (20070801)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id56252
  nameCVE-2007-4121
  descriptionMultiple SQL injection vulnerabilities in admin.aspx in E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, and Auction Script allow remote attackers to execute arbitrary SQL commands via the (1) EmailAdd (Username) and (2) Pass (password) parameters. NOTE: some of these details are obtained from third party information.
  reject(null)
  CVSS_version2
  CVSS_score10
  severityHigh
  CVSS_base_score10
  CVSS_impact_subscore10
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-07
  published2007-08-01
  modified_date2008-09-05
  typeCVE
  seq2007-4121
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id57092
  nameJVNDB-2007-005784
  titleXeweb XEForum における権限を取得される脆弱性
  summaryXeweb XEForum には、権限を取得される脆弱性が存在します。
  cveinfo_nameCVE-2007-3500
  cveinfo_id26855
  nvdinfo_nameCVE-2007-3500
  nvdinfo_id55651
  cvssv210
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005784.html
  published_date2007-06-29
  registered_date2012-12-20
  last_updated_date2012-12-20
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id26855
  nameCVE-2007-3498
  statusCandidate
  descriptionCross-site scripting (XSS) vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "unescaped print_r output."
  phaseAssigned (20070629)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id55651
  nameCVE-2007-3500
  descriptionXeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie.
  reject(null)
  CVSS_version2
  CVSS_score10
  severityHigh
  CVSS_base_score10
  CVSS_impact_subscore10
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-07
  published2007-06-29
  modified_date2012-10-30
  typeCVE
  seq2007-3500
  deleted(null)
  created(null)
  modified(null)
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Http Connection	close
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:141/sort:cvssv2/direction:asc
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:141/sort:cvssv2/direction:asc
Remote Port	31968
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	3.17.71.93
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
X Dostranslated Ip	3.17.71.93
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	3.17.71.93
Unique Id	aBhouXI3vFjOzN9uvyCPbgAAAhc
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect X Dostranslated Ip	3.17.71.93
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	3.17.71.93
Redirect Unique Id	aBhouXI3vFjOzN9uvyCPbgAAAhc
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect X Dostranslated Ip	3.17.71.93
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	3.17.71.93
Redirect Redirect Unique Id	aBhouXI3vFjOzN9uvyCPbgAAAhc
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1746430137.0674
Request Time	1746430137

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====