JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2007-002887	Adobe Shockwave の SWCtl.SWCtl ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性	Adobe Shockwave の SWCtl.SWCtl ActiveX コントロールには、スタックベースのバッファオーバーフローの脆弱性が存在します。	CVE-2007-5941	10	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002887.html	2007-11-13	2012-06-26	View
JVNDB-2007-002888	Bandersnatch における重要な情報を取得される脆弱性	Bandersnatch は、様々なエラーメッセージ内にパスを表示する不備があるため、重要な情報を取得される脆弱性が存在します。	CVE-2007-5942	4	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002888.html	2007-11-13	2012-06-26	View
JVNDB-2007-002889	E-Vendejo の articles.php における SQL インジェクションの脆弱性	E-Vendejo の articles.php には、SQL インジェクションの脆弱性が存在します。	CVE-2007-5951	7.5	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002889.html	2007-11-13	2012-06-26	View
JVNDB-2007-002890	F5 Firepass 4100 SSL VPN の download_plugin.php3 におけるクロスサイトスクリプティングの脆弱性	F5 Firepass 4100 SSL VPN download_plugin.php3 には、クロスサイトスクリプティングの脆弱性が存在します。	CVE-2007-5979	4.3	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002890.html	2007-11-14	2012-06-26	View
JVNDB-2007-002891	eggblog の home/rss.php におけるクロスサイトスクリプティングの脆弱性	eggblog の home/rss.php には、クロスサイトスクリプティングの脆弱性が存在します。	CVE-2007-5980	4.3	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002891.html	2007-11-14	2012-06-26	View

Page 1896 of 13768, showing 5 records out of 68839 total, starting on record 9476, ending on 9480

<<first <prev 1892 | 1893 | 1894 | 1895 | 1896 | 1897 | 1898 | 1899 | 1900 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page1896
  sortname
  directionasc
- pass(empty)
- paging(array)
  Jvninfo(array)
  page1896
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.nameasc
  limit5
  options(array)
  page1896
  order(array)
  Jvninfo.nameasc
  sortname
  directionasc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 4.07 MB

Message	Memory use
Component initialization	1.39 MB
Controller action start	1.49 MB
Controller render start	2.28 MB
View render complete	2.79 MB

Timers

Total Request Time: 152 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	2.62
Event: Controller.initialize	0.02
Event: Controller.startup	0.05
Controller action	132.74
Event: Controller.beforeRender	4.88
» Processing toolbar data	4.79
Rendering View	6.85
» Event: View.beforeRender	0.03
» Rendering APP/View/Jvninfos/index.ctp	5.81
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.62
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.20
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id54195
  nameJVNDB-2007-002887
  titleAdobe Shockwave の SWCtl.SWCtl ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性
  summaryAdobe Shockwave の SWCtl.SWCtl ActiveX コントロールには、スタックベースのバッファオーバーフローの脆弱性が存在します。
  cveinfo_nameCVE-2007-5941
  cveinfo_id29296
  nvdinfo_nameCVE-2007-5941
  nvdinfo_id57966
  cvssv210
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002887.html
  published_date2007-11-13
  registered_date2012-06-26
  last_updated_date2012-06-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id29296
  nameCVE-2007-5939
  statusCandidate
  descriptionThe gss_userok function in appl/ftp/ftpd/gss_userok.c in Heimdal 0.7.2 does not allocate memory for the ticketfile pointer before calling free, which allows remote attackers to have an unknown impact via an invalid username. NOTE: the vulnerability was originally reported for ftpd.c, but this is incorrect.
  phaseAssigned (20071113)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id57966
  nameCVE-2007-5941
  descriptionStack-based buffer overflow in the SWCtl.SWCtl ActiveX control in Adobe Shockwave allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long argument to the ShockwaveVersion method.
  reject(null)
  CVSS_version2
  CVSS_score10
  severityHigh
  CVSS_base_score10
  CVSS_impact_subscore10
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-07
  published2007-11-13
  modified_date2008-09-05
  typeCVE
  seq2007-5941
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id54196
  nameJVNDB-2007-002888
  titleBandersnatch における重要な情報を取得される脆弱性
  summaryBandersnatch は、様々なエラーメッセージ内にパスを表示する不備があるため、重要な情報を取得される脆弱性が存在します。
  cveinfo_nameCVE-2007-5942
  cveinfo_id29297
  nvdinfo_nameCVE-2007-5942
  nvdinfo_id57967
  cvssv24
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002888.html
  published_date2007-11-13
  registered_date2012-06-26
  last_updated_date2012-06-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id29297
  nameCVE-2007-5940
  statusCandidate
  descriptionfeynmf.pl in feynmf 1.08, as used in TeXLive 2007, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the feynmf$$.pl temporary file.
  phaseAssigned (20071113)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id57967
  nameCVE-2007-5942
  descriptionBandersnatch 0.4 allows remote attackers to obtain sensitive information via a malformed request for index.php with (1) a certain func parameter value; or (2) certain func, jid, page, and limit parameter values; which reveals the path in various error messages.
  reject(null)
  CVSS_version2
  CVSS_score4
  severityMedium
  CVSS_base_score4
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore8
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:S/C:P/I:N/A:N)
  sourcecve
  pub_date2017-01-07
  published2007-11-13
  modified_date2008-09-05
  typeCVE
  seq2007-5942
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id54197
  nameJVNDB-2007-002889
  titleE-Vendejo の articles.php における SQL インジェクションの脆弱性
  summaryE-Vendejo の articles.php には、SQL インジェクションの脆弱性が存在します。
  cveinfo_nameCVE-2007-5951
  cveinfo_id29306
  nvdinfo_nameCVE-2007-5951
  nvdinfo_id57976
  cvssv27.5
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002889.html
  published_date2007-11-13
  registered_date2012-06-26
  last_updated_date2012-06-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id29306
  nameCVE-2007-5949
  statusCandidate
  descriptionCross-site scripting (XSS) vulnerability in IBM Tivoli Service Desk 6.2 allows remote authenticated users to inject arbitrary web script or HTML via the Description parameter in a Maximo change action.
  phaseAssigned (20071113)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id57976
  nameCVE-2007-5951
  descriptionSQL injection vulnerability in articles.php in E-Vendejo 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.
  reject(null)
  CVSS_version2
  CVSS_score7.5
  severityHigh
  CVSS_base_score7.5
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2017-01-07
  published2007-11-13
  modified_date2011-03-07
  typeCVE
  seq2007-5951
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id54198
  nameJVNDB-2007-002890
  titleF5 Firepass 4100 SSL VPN の download_plugin.php3 におけるクロスサイトスクリプティングの脆弱性
  summaryF5 Firepass 4100 SSL VPN download_plugin.php3 には、クロスサイトスクリプティングの脆弱性が存在します。
  cveinfo_nameCVE-2007-5979
  cveinfo_id29334
  nvdinfo_nameCVE-2007-5979
  nvdinfo_id58003
  cvssv24.3
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002890.html
  published_date2007-11-14
  registered_date2012-06-26
  last_updated_date2012-06-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id29334
  nameCVE-2007-5977
  statusCandidate
  descriptionCross-site scripting (XSS) vulnerability in db_create.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to inject arbitrary web script or HTML via a hex-encoded IMG element in the db parameter in a POST request, a different vulnerability than CVE-2006-6942.
  phaseAssigned (20071114)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id58003
  nameCVE-2007-5979
  descriptionCross-site scripting (XSS) vulnerability in download_plugin.php3 in F5 Firepass 4100 SSL VPN 5.4 through 5.5.2 and 6.0 through 6.0.1 allows remote attackers to inject arbitrary web script or HTML via the backurl parameter.
  reject(null)
  CVSS_version2
  CVSS_score4.3
  severityMedium
  CVSS_base_score4.3
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:N/I:P/A:N)
  sourcecve
  pub_date2017-01-07
  published2007-11-14
  modified_date2011-03-07
  typeCVE
  seq2007-5979
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id54199
  nameJVNDB-2007-002891
  titleeggblog の home/rss.php におけるクロスサイトスクリプティングの脆弱性
  summaryeggblog の home/rss.php には、クロスサイトスクリプティングの脆弱性が存在します。
  cveinfo_nameCVE-2007-5980
  cveinfo_id29335
  nvdinfo_nameCVE-2007-5980
  nvdinfo_id58004
  cvssv24.3
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002891.html
  published_date2007-11-14
  registered_date2012-06-26
  last_updated_date2012-06-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id29335
  nameCVE-2007-5978
  statusCandidate
  descriptionSQL injection vulnerability in brokenlink.php in the mylinks module for XOOPS allows remote attackers to execute arbitrary SQL commands via the lid parameter.
  phaseAssigned (20071114)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id58004
  nameCVE-2007-5980
  descriptionCross-site scripting (XSS) vulnerability in home/rss.php in eggblog before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO (PHP_SELF).
  reject(null)
  CVSS_version2
  CVSS_score4.3
  severityMedium
  CVSS_base_score4.3
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:N/I:P/A:N)
  sourcecve
  pub_date2017-01-07
  published2007-11-14
  modified_date2010-07-16
  typeCVE
  seq2007-5980
  deleted(null)
  created(null)
  modified(null)
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:1896/sort:name/direction:asc
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:1896/sort:name/direction:asc
Remote Port	47370
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	216.73.216.66
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Connection	close
Http Cache Control	max-age=259200
Http X Forwarded For	10.3.85.41
Http Via	1.1 squid-proxy-5b5d847c96-hm7vw (squid/6.10)
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
X Dostranslated Ip	216.73.216.66
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	216.73.216.66
Unique Id	aHgkW0-ar2zD10j2LBnPjQAAAZU
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect X Dostranslated Ip	216.73.216.66
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	216.73.216.66
Redirect Unique Id	aHgkW0-ar2zD10j2LBnPjQAAAZU
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect X Dostranslated Ip	216.73.216.66
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	216.73.216.66
Redirect Redirect Unique Id	aHgkW0-ar2zD10j2LBnPjQAAAZU
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1752704091.0173
Request Time	1752704091

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====