JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2006-000389	Microsoft Office のプロパティの解析におけるメモリ領域が破壊される脆弱性	------------	CVE-2006-2389	5.1	http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000389.html	2006-07-11	2007-04-01	View
JVNDB-2006-000645	Sun Solaris の ifconfig/netstat の実行時における競合状態の脆弱性	Sun Solaris には、ifconfig あるいは netstat の実行時と関連して特定の SNMP クエリを処理した場合に、競合状態によるシステムパニックが発生する脆弱性が存在します。	CVE-2006-4139	5.4	http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000645.html	2006-08-14	2007-04-01	View
JVNDB-2005-000235	Vixie cron の crontab コマンドにおけるシンボリックリンク攻撃を受ける脆弱性	Vixie cron には、crontab コマンドにより設定ファイルを編集する際、セキュリティ上不適切な方法で一時ファイルの処理を行うため、シンボリックリンク攻撃が可能となる脆弱性が存在します。	CVE-2005-1038	2.1	http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000235.html	2005-04-06	2007-04-01	View
JVNDB-2005-000491	PHP に含まれる PEAR XML-RPC の不正な XMLRPC リクエスト処理による任意の PHP コードを実行される脆弱性	PHP の PEAR XML-RPC には、XMLRPC 要求、および応答処理に不備が存在するため、解釈した XML ドキュメント内の特定の XML タグがネスト化されている場合に任意の PHP コードが eval() 関数に挿入される脆弱性が存在します。	CVE-2005-2498	5	http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000491.html	2005-08-15	2007-04-01	View
JVNDB-2005-000747	Cisco IOS のMD5 ハッシュ値を含む EIGRP が盗聴される脆弱性	------------	CVE-2005-4437	7.5	http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000747.html	2005-12-20	2007-04-01	View

Page 203 of 13768, showing 5 records out of 68839 total, starting on record 1011, ending on 1015

<<first <prev 199 | 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page203
  sortlast_updated_date
  directionasc
- pass(empty)
- paging(array)
  Jvninfo(array)
  page203
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.last_updated_dateasc
  limit5
  options(array)
  page203
  order(array)
  Jvninfo.last_updated_dateasc
  sortlast_updated_date
  directionasc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 3.84 MB

Message	Memory use
Component initialization	1.38 MB
Controller action start	1.49 MB
Controller render start	2.28 MB
View render complete	2.78 MB

Timers

Total Request Time: 84 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	5.24
Event: Controller.initialize	0.02
Event: Controller.startup	0.06
Controller action	63.61
Event: Controller.beforeRender	4.32
» Processing toolbar data	4.22
Rendering View	6.71
» Event: View.beforeRender	0.03
» Rendering APP/View/Jvninfos/index.ctp	5.75
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.53
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.08
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id58193
  nameJVNDB-2006-000389
  titleMicrosoft Office のプロパティの解析におけるメモリ領域が破壊される脆弱性
  summary------------
  cveinfo_nameCVE-2006-2389
  cveinfo_id18491
  nvdinfo_nameCVE-2006-2389
  nvdinfo_id61088
  cvssv25.1
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000389.html
  published_date2006-07-11
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id18491
  nameCVE-2006-2387
  statusCandidate
  descriptionUnspecified vulnerability in Microsoft Excel 2000, 2002, 2003, 2004 for Mac, v.X for Mac, Excel Viewer 2003, and Microsoft Works Suite 2004 through 2006 allows user-assisted attackers to execute arbitrary code via a crafted DATETIME record in an XLS file, a different vulnerability than CVE-2006-3867 and CVE-2006-3875.
  phaseAssigned (20060515)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id61088
  nameCVE-2006-2389
  descriptionUnspecified vulnerability in Microsoft Office 2003 SP1 and SP2, Office XP SP3, Office 2000 SP3, and other products, allows user-assisted attackers to execute arbitrary code via an Office file with a malformed property that triggers memory corruption related to record lengths, aka "Microsoft Office Property Vulnerability," a different vulnerability than CVE-2006-1316.
  reject(null)
  CVSS_version2
  CVSS_score9.3
  severityHigh
  CVSS_base_score9.3
  CVSS_impact_subscore10
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2016-12-20
  published2006-07-11
  modified_date2011-04-12
  typeCVE
  seq2006-2389
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id58449
  nameJVNDB-2006-000645
  titleSun Solaris の ifconfig/netstat の実行時における競合状態の脆弱性
  summarySun Solaris には、ifconfig あるいは netstat の実行時と関連して特定の SNMP クエリを処理した場合に、競合状態によるシステムパニックが発生する脆弱性が存在します。
  cveinfo_nameCVE-2006-4139
  cveinfo_id20241
  nvdinfo_nameCVE-2006-4139
  nvdinfo_id62793
  cvssv25.4
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000645.html
  published_date2006-08-14
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id20241
  nameCVE-2006-4137
  statusCandidate
  descriptionIBM WebSphere Application Server before 6.1.0.1 allows attackers to obtain sensitive information via unspecified vectors related to (1) the log file, (2) "script generated syntax on wsadmin command line," and (3) traces.
  phaseAssigned (20060814)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id62793
  nameCVE-2006-4139
  descriptionRace condition in Sun Solaris 10 allows attackers to cause a denial of service (system panic) via unspecified vectors related to ifconfig and either netstat or SNMP queries.
  reject(null)
  CVSS_version2
  CVSS_score5.4
  severityMedium
  CVSS_base_score5.4
  CVSS_impact_subscore6.9
  CVSS_exploit_subscore4.9
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:H/Au:N/C:N/I:N/A:C)
  sourcecve
  pub_date2016-12-20
  published2006-08-14
  modified_date2011-03-07
  typeCVE
  seq2006-4139
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id62033
  nameJVNDB-2005-000235
  titleVixie cron の crontab コマンドにおけるシンボリックリンク攻撃を受ける脆弱性
  summaryVixie cron には、crontab コマンドにより設定ファイルを編集する際、セキュリティ上不適切な方法で一時ファイルの処理を行うため、シンボリックリンク攻撃が可能となる脆弱性が存在します。
  cveinfo_nameCVE-2005-1038
  cveinfo_id12242
  nvdinfo_nameCVE-2005-1038
  nvdinfo_id66787
  cvssv22.1
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000235.html
  published_date2005-04-06
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id12242
  nameCVE-2005-1036
  statusCandidate
  descriptionFreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO permission bitmap used to allow user access to certain hardware, which allows local users to bypass intended access restrictions to cause a denial of service, obtain sensitive information, and possibly gain privileges.
  phaseAssigned (20050410)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id66787
  nameCVE-2005-1038
  descriptioncrontab in Vixie cron 4.1, when running with the -e option, allows local users to read the cron files of other users by changing the file being edited to a symlink. NOTE: there is insufficient information to know whether this is a duplicate of CVE-2001-0235.
  reject(null)
  CVSS_version2
  CVSS_score2.1
  severityLow
  CVSS_base_score2.1
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore3.9
  nvd_xml_version(null)
  CVSS_vector(AV:L/AC:L/Au:N/C:P/I:N/A:N)
  sourcecve
  pub_date2017-01-03
  published2005-05-02
  modified_date2010-08-21
  typeCVE
  seq2005-1038
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id62289
  nameJVNDB-2005-000491
  titlePHP に含まれる PEAR XML-RPC の不正な XMLRPC リクエスト処理による任意の PHP コードを実行される脆弱性
  summaryPHP の PEAR XML-RPC には、XMLRPC 要求、および応答処理に不備が存在するため、解釈した XML ドキュメント内の特定の XML タグがネスト化されている場合に任意の PHP コードが eval() 関数に挿入される脆弱性が存在します。
  cveinfo_nameCVE-2005-2498
  cveinfo_id13702
  nvdinfo_nameCVE-2005-2498
  nvdinfo_id68188
  cvssv25
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000491.html
  published_date2005-08-15
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id13702
  nameCVE-2005-2496
  statusCandidate
  descriptionThe xntpd ntp (ntpd) daemon before 4.2.0b, when run with the -u option and using a string to specify the group, uses the group ID of the user instead of the group, which causes xntpd to run with different privileges than intended.
  phaseAssigned (20050808)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id68188
  nameCVE-2005-2498
  descriptionEval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in multiple products including (1) Drupal, (2) phpAdsNew, (3) phpPgAds, and (4) phpgroupware, allows remote attackers to execute arbitrary PHP code via certain nested XML tags in a PHP document that should not be nested, which are injected into an eval function call, a different vulnerability than CVE-2005-1921.
  reject(null)
  CVSS_version2
  CVSS_score5
  severityMedium
  CVSS_base_score5
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:N/I:P/A:N)
  sourcecve
  pub_date2017-01-03
  published2005-08-15
  modified_date2016-10-17
  typeCVE
  seq2005-2498
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id62545
  nameJVNDB-2005-000747
  titleCisco IOS のMD5 ハッシュ値を含む EIGRP が盗聴される脆弱性
  summary------------
  cveinfo_nameCVE-2005-4437
  cveinfo_id15639
  nvdinfo_nameCVE-2005-4437
  nvdinfo_id70035
  cvssv27.5
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000747.html
  published_date2005-12-20
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id15639
  nameCVE-2005-4435
  statusCandidate
  descriptionCross-site scripting (XSS) vulnerability in index.php AbleDesign D-Man 3.x allows remote attackers to inject arbitrary web script or HTML via the title parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
  phaseAssigned (20051221)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id70035
  nameCVE-2005-4437
  descriptionMD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code (MAC) in the checksum, which allows remote attackers to sniff message hashes and (1) replay EIGRP HELLO messages or (2) cause a denial of service by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network.
  reject(null)
  CVSS_version2
  CVSS_score7.5
  severityHigh
  CVSS_base_score7.5
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2017-01-03
  published2005-12-20
  modified_date2016-10-17
  typeCVE
  seq2005-4437
  deleted(null)
  created(null)
  modified(null)
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Http Connection	close
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:203/sort:last_updated_date/direction:asc
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:203/sort:last_updated_date/direction:asc
Remote Port	37765
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	3.138.178.107
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
X Dostranslated Ip	3.138.178.107
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	3.138.178.107
Unique Id	aBehj9RUSg_oMokzISd6uQAAAUg
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect X Dostranslated Ip	3.138.178.107
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	3.138.178.107
Redirect Unique Id	aBehj9RUSg_oMokzISd6uQAAAUg
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect X Dostranslated Ip	3.138.178.107
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	3.138.178.107
Redirect Redirect Unique Id	aBehj9RUSg_oMokzISd6uQAAAUg
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1746379151.1229
Request Time	1746379151

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====