JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2006-000288	BEA WebLogic Server の Administration Console における JDBC セキュリティポリシーが正しく設定されない脆弱性	BEA WebLogic Server において、Administration Console を使用してカスタム JDBC セキュリティポリシーを設定した場合に、正しく設定されない脆弱性が存在します。	CVE-2006-2470	7.5	http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000288.html	2006-05-15	2007-04-01	View
JVNDB-2007-000380	BEA WebLogic Server の Administration Console におけるファイルアップロード時にセキュリティポリシーが適用されない問題	BEA WebLogic Server の Administration コンソールには、Deployer ロールの管理ユーザがアーカイブのアップロードを行う際に、ドメインのセキュリティポリシーが適用されない問題が存在します。	CVE-2007-2699	7.1	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000380.html	2007-05-14	2007-05-31	View
JVNDB-2007-000379	BEA WebLogic Server の Administration Console における情報漏えいの脆弱性	BEA WebLogic Server の Administration Console には、コンフィグレーションの作成中に、パスワードを含む Web サービスの機密属性を平文で表示してしまう問題があります。	CVE-2007-2698	5	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000379.html	2007-05-14	2007-05-31	View
JVNDB-2007-000059	BEA WebLogic Server の Apache 用プロキシプラグインにサービス運用妨害 (DoS) の脆弱性	BEA Weblogic Server に含まれる Apache HTTP Server 用の WebLogic Server プロキシプラグインには、プロトコルエラーを適切に処理しないため、サービス運用妨害 (DoS) 状態を引き起こす脆弱性が存在します。	CVE-2007-0419	5	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000059.html	2007-01-16	2007-04-01	View
JVNDB-2007-000381	BEA WebLogic Server の configToScript コマンドにおける情報漏えいの脆弱性	BEA WebLogic Server には、configToScript コマンドで生成された WLST スクリプトで新しいドメインを作成する際に、コンフィグレーションファイルの機密属性を暗号化しない問題があります。	CVE-2007-2700	4	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000381.html	2007-05-14	2007-05-31	View

Page 1932 of 13768, showing 5 records out of 68839 total, starting on record 9656, ending on 9660

<<first <prev 1928 | 1929 | 1930 | 1931 | 1932 | 1933 | 1934 | 1935 | 1936 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page1932
  sorttitle
  directionasc
- pass(empty)
- paging(array)
  Jvninfo(array)
  page1932
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.titleasc
  limit5
  options(array)
  page1932
  order(array)
  Jvninfo.titleasc
  sorttitle
  directionasc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 3.92 MB

Message	Memory use
Component initialization	1.39 MB
Controller action start	1.49 MB
Controller render start	2.28 MB
View render complete	2.78 MB

Timers

Total Request Time: 192 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	2.70
Event: Controller.initialize	0.02
Event: Controller.startup	0.06
Controller action	173.84
Event: Controller.beforeRender	4.20
» Processing toolbar data	4.12
Rendering View	6.33
» Event: View.beforeRender	0.03
» Rendering APP/View/Jvninfos/index.ctp	5.47
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.45
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.07
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id58092
  nameJVNDB-2006-000288
  titleBEA WebLogic Server の Administration Console における JDBC セキュリティポリシーが正しく設定されない脆弱性
  summaryBEA WebLogic Server において、Administration Console を使用してカスタム JDBC セキュリティポリシーを設定した場合に、正しく設定されない脆弱性が存在します。
  cveinfo_nameCVE-2006-2470
  cveinfo_id18572
  nvdinfo_nameCVE-2006-2470
  nvdinfo_id61165
  cvssv27.5
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000288.html
  published_date2006-05-15
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id18572
  nameCVE-2006-2468
  statusCandidate
  descriptionThe WebLogic Server Administration Console in BEA WebLogic Server 8.1 up to SP4 and 7.0 up to SP6 displays the domain name in the Console login form, which allows remote attackers to obtain sensitive information.
  phaseAssigned (20060519)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id61165
  nameCVE-2006-2470
  descriptionUnspecified vulnerability in the WebLogic Server Administration Console for BEA WebLogic Server 9.0 prevents the console from setting custom JDBC security policies correctly, which could allow attackers to bypass intended policies.
  reject(null)
  CVSS_version2
  CVSS_score7.5
  severityHigh
  CVSS_base_score7.5
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2016-12-20
  published2006-05-19
  modified_date2011-03-07
  typeCVE
  seq2006-2470
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id51717
  nameJVNDB-2007-000380
  titleBEA WebLogic Server の Administration Console におけるファイルアップロード時にセキュリティポリシーが適用されない問題
  summaryBEA WebLogic Server の Administration コンソールには、Deployer ロールの管理ユーザがアーカイブのアップロードを行う際に、ドメインのセキュリティポリシーが適用されない問題が存在します。
  cveinfo_nameCVE-2007-2699
  cveinfo_id26054
  nvdinfo_nameCVE-2007-2699
  nvdinfo_id54863
  cvssv27.1
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000380.html
  published_date2007-05-14
  registered_date2007-05-31
  last_updated_date2007-05-31
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id26054
  nameCVE-2007-2697
  statusCandidate
  descriptionThe embedded LDAP server in BEA WebLogic Express and WebLogic Server 7.0 through SP6, 8.1 through SP5, 9.0, and 9.1, when in certain configurations, does not limit or audit failed authentication attempts, which allows remote attackers to more easily conduct brute-force attacks against the administrator password, or flood the server with login attempts and cause a denial of service.
  phaseAssigned (20070515)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id54863
  nameCVE-2007-2699
  descriptionThe Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not properly enforce certain Domain Security Policies, which allows remote administrative users in the Deployer role to upload arbitrary files.
  reject(null)
  CVSS_version2
  CVSS_score7.1
  severityHigh
  CVSS_base_score7.1
  CVSS_impact_subscore10
  CVSS_exploit_subscore3.9
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:H/Au:S/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-07
  published2007-05-15
  modified_date2011-03-07
  typeCVE
  seq2007-2699
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id51716
  nameJVNDB-2007-000379
  titleBEA WebLogic Server の Administration Console における情報漏えいの脆弱性
  summaryBEA WebLogic Server の Administration Console には、コンフィグレーションの作成中に、パスワードを含む Web サービスの機密属性を平文で表示してしまう問題があります。
  cveinfo_nameCVE-2007-2698
  cveinfo_id26053
  nvdinfo_nameCVE-2007-2698
  nvdinfo_id54862
  cvssv25
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000379.html
  published_date2007-05-14
  registered_date2007-05-31
  last_updated_date2007-05-31
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id26053
  nameCVE-2007-2696
  statusCandidate
  descriptionThe JMS Server in BEA WebLogic Server 6.1 through SP7, 7.0 through SP6, and 8.1 through SP5 enforces security access policies on the front end, which allows remote attackers to access protected queues via direct requests to the JMS back-end server.
  phaseAssigned (20070515)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id54862
  nameCVE-2007-2698
  descriptionThe Administration Console in BEA WebLogic Server 9.0 may show plaintext Web Service attributes during configuration creation, which allows remote attackers to obtain sensitive credential information.
  reject(null)
  CVSS_version2
  CVSS_score5
  severityMedium
  CVSS_base_score5
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:N/A:N)
  sourcecve
  pub_date2017-01-07
  published2007-05-15
  modified_date2012-11-05
  typeCVE
  seq2007-2698
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id51397
  nameJVNDB-2007-000059
  titleBEA WebLogic Server の Apache 用プロキシプラグインにサービス運用妨害 (DoS) の脆弱性
  summaryBEA Weblogic Server に含まれる Apache HTTP Server 用の WebLogic Server プロキシプラグインには、プロトコルエラーを適切に処理しないため、サービス運用妨害 (DoS) 状態を引き起こす脆弱性が存在します。
  cveinfo_nameCVE-2007-0419
  cveinfo_id23774
  nvdinfo_nameCVE-2007-0419
  nvdinfo_id52646
  cvssv25
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000059.html
  published_date2007-01-16
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id23774
  nameCVE-2007-0417
  statusCandidate
  descriptionBEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the WebLogic Server 6.1 compatibility realm, allows attackers to execute certain EJB container persistence operations with an administrative identity.
  phaseAssigned (20070122)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id52646
  nameCVE-2007-0419
  descriptionThe BEA WebLogic Server proxy plug-in before June 2006 for the Apache HTTP Server does not properly handle protocol errors, which allows remote attackers to cause a denial of service (server outage).
  reject(null)
  CVSS_version2
  CVSS_score5
  severityMedium
  CVSS_base_score5
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:N/I:N/A:P)
  sourcecve
  pub_date2017-01-07
  published2007-01-22
  modified_date2011-03-07
  typeCVE
  seq2007-0419
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id51718
  nameJVNDB-2007-000381
  titleBEA WebLogic Server の configToScript コマンドにおける情報漏えいの脆弱性
  summaryBEA WebLogic Server には、configToScript コマンドで生成された WLST スクリプトで新しいドメインを作成する際に、コンフィグレーションファイルの機密属性を暗号化しない問題があります。
  cveinfo_nameCVE-2007-2700
  cveinfo_id26055
  nvdinfo_nameCVE-2007-2700
  nvdinfo_id54864
  cvssv24
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000381.html
  published_date2007-05-14
  registered_date2007-05-31
  last_updated_date2007-05-31
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id26055
  nameCVE-2007-2698
  statusCandidate
  descriptionThe Administration Console in BEA WebLogic Server 9.0 may show plaintext Web Service attributes during configuration creation, which allows remote attackers to obtain sensitive credential information.
  phaseAssigned (20070515)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id54864
  nameCVE-2007-2700
  descriptionThe WLST script generated by the configToScript command in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not encrypt certain attributes in configuration files when creating a new domain, which allows remote authenticated users to obtain sensitive information.
  reject(null)
  CVSS_version2
  CVSS_score4
  severityMedium
  CVSS_base_score4
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore8
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:S/C:P/I:N/A:N)
  sourcecve
  pub_date2017-01-07
  published2007-05-15
  modified_date2011-03-07
  typeCVE
  seq2007-2700
  deleted(null)
  created(null)
  modified(null)
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:1932/sort:title/direction:asc
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:1932/sort:title/direction:asc
Remote Port	20619
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	216.73.216.31
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Connection	close
Http Cache Control	max-age=259200
Http X Forwarded For	10.3.180.70
Http Via	1.1 squid-proxy-5b5d847c96-87lc8 (squid/6.10)
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
X Dostranslated Ip	216.73.216.31
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	216.73.216.31
Unique Id	aHmTfHJ1ig15ZcyaGjY_rgAAADc
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect X Dostranslated Ip	216.73.216.31
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	216.73.216.31
Redirect Unique Id	aHmTfHJ1ig15ZcyaGjY_rgAAADc
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect X Dostranslated Ip	216.73.216.31
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	216.73.216.31
Redirect Redirect Unique Id	aHmTfHJ1ig15ZcyaGjY_rgAAADc
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1752798076.3519
Request Time	1752798076

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====