JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2007-004654	IBM DB2 UDB における脆弱性	IBM DB2 UDB は、大量のファイルディスクリプタの使用を適切に処理しないため、不特定の影響を受ける脆弱性が存在します。	CVE-2007-6053	9.3	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004654.html	2007-11-20	2012-09-25	View
JVNDB-2007-004655	Liferay Portal の c/portal/login におけるクロスサイトスクリプティングの脆弱性	Liferay Portal の c/portal/login には、クロスサイトスクリプティングの脆弱性が存在します。	CVE-2007-6055	4.3	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004655.html	2007-11-20	2012-09-25	View
JVNDB-2007-004656	ngIRCd の irc-channel.c におけるサービス運用妨害 (DoS) の脆弱性	ngIRCd の irc-channel.c には、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。	CVE-2007-6062	5	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004656.html	2007-11-20	2012-09-25	View
JVNDB-2007-000806	Feed2JS におけるクロスサイトスクリプティングの脆弱性	オープンソースのウェブアプリケーションである Feed2JS (Feed to JavaScript) には、クロスサイトスクリプティングの脆弱性が存在します。	CVE-2007-6102	4.3	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000806.html	2007-11-20	2007-11-26	View
JVNDB-2007-002909	Cacti の graph.php における SQL インジェクションの脆弱性	Cacti の graph.php には、SQL インジェクションの脆弱性が存在します。	CVE-2007-6035	7.5	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002909.html	2007-11-20	2012-06-26	View

Page 2504 of 13768, showing 5 records out of 68839 total, starting on record 12516, ending on 12520

<<first <prev 2500 | 2501 | 2502 | 2503 | 2504 | 2505 | 2506 | 2507 | 2508 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page2504
  sortpublished_date
  directionasc
- pass(empty)
- paging(array)
  Jvninfo(array)
  page2504
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.published_dateasc
  limit5
  options(array)
  page2504
  order(array)
  Jvninfo.published_dateasc
  sortpublished_date
  directionasc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 3.82 MB

Message	Memory use
Component initialization	1.39 MB
Controller action start	1.49 MB
Controller render start	2.26 MB
View render complete	2.76 MB

Timers

Total Request Time: 157 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	5.22
Event: Controller.initialize	0.02
Event: Controller.startup	0.14
Controller action	125.93
Event: Controller.beforeRender	4.92
» Processing toolbar data	4.82
Rendering View	13.47
» Event: View.beforeRender	0.03
» Rendering APP/View/Jvninfos/index.ctp	11.82
» Event: View.afterRender	0.03
» Event: View.beforeLayout	0.03
» Rendering APP/View/Layouts/default.ctp	0.96
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.20
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id55962
  nameJVNDB-2007-004654
  titleIBM DB2 UDB における脆弱性
  summaryIBM DB2 UDB は、大量のファイルディスクリプタの使用を適切に処理しないため、不特定の影響を受ける脆弱性が存在します。
  cveinfo_nameCVE-2007-6053
  cveinfo_id29408
  nvdinfo_nameCVE-2007-6053
  nvdinfo_id58074
  cvssv29.3
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004654.html
  published_date2007-11-20
  registered_date2012-09-25
  last_updated_date2012-09-25
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id29408
  nameCVE-2007-6051
  statusCandidate
  descriptionIBM DB2 UDB 9.1 before Fixpak 4 assigns incorrect privileges to the (1) DB2ADMNS and (2) DB2USERS alternative groups, which has unknown impact. NOTE: the vendor description of this issue is too vague to be certain that it is security-related.
  phaseAssigned (20071120)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id58074
  nameCVE-2007-6053
  descriptionIBM DB2 UDB 9.1 before Fixpak 4 does not properly handle use of large numbers of file descriptors, which might allow attackers to have an unknown impact involving "memory corruption." NOTE: the vendor description of this issue is too vague to be certain that it is security-related.
  reject(null)
  CVSS_version2
  CVSS_score9.3
  severityHigh
  CVSS_base_score9.3
  CVSS_impact_subscore10
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-07
  published2007-11-20
  modified_date2011-03-07
  typeCVE
  seq2007-6053
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id55963
  nameJVNDB-2007-004655
  titleLiferay Portal の c/portal/login におけるクロスサイトスクリプティングの脆弱性
  summaryLiferay Portal の c/portal/login には、クロスサイトスクリプティングの脆弱性が存在します。
  cveinfo_nameCVE-2007-6055
  cveinfo_id29410
  nvdinfo_nameCVE-2007-6055
  nvdinfo_id58076
  cvssv24.3
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004655.html
  published_date2007-11-20
  registered_date2012-09-25
  last_updated_date2012-09-25
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id29410
  nameCVE-2007-6053
  statusCandidate
  descriptionIBM DB2 UDB 9.1 before Fixpak 4 does not properly handle use of large numbers of file descriptors, which might allow attackers to have an unknown impact involving "memory corruption." NOTE: the vendor description of this issue is too vague to be certain that it is security-related.
  phaseAssigned (20071120)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id58076
  nameCVE-2007-6055
  descriptionCross-site scripting (XSS) vulnerability in c/portal/login in Liferay Portal 4.1.0 and 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the login parameter. NOTE: this issue reportedly exists because of a regression that followed a fix at an unspecified earlier date.
  reject(null)
  CVSS_version2
  CVSS_score4.3
  severityMedium
  CVSS_base_score4.3
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:N/I:P/A:N)
  sourcecve
  pub_date2017-01-07
  published2007-11-20
  modified_date2009-04-23
  typeCVE
  seq2007-6055
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id55964
  nameJVNDB-2007-004656
  titlengIRCd の irc-channel.c におけるサービス運用妨害 (DoS) の脆弱性
  summaryngIRCd の irc-channel.c には、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。
  cveinfo_nameCVE-2007-6062
  cveinfo_id29417
  nvdinfo_nameCVE-2007-6062
  nvdinfo_id58083
  cvssv25
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004656.html
  published_date2007-11-20
  registered_date2012-09-25
  last_updated_date2012-09-25
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id29417
  nameCVE-2007-6060
  statusCandidate
  descriptionAhnLab Antivirus 3 Internet Security 2008 Platinum appends data to a filename string at a location indicated by the "Filename length" field in a ZIP header, which allows remote attackers to cause a denial of service (machine crash) and possibly execute arbitrary code via a ZIP file in which this field"s value is larger than the actual number of bytes in the filename.
  phaseAssigned (20071120)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id58083
  nameCVE-2007-6062
  descriptionirc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service (crash) via a JOIN command without a channel argument.
  reject(null)
  CVSS_version2
  CVSS_score5
  severityMedium
  CVSS_base_score5
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:N/I:N/A:P)
  sourcecve
  pub_date2017-01-07
  published2007-11-20
  modified_date2013-08-07
  typeCVE
  seq2007-6062
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id52143
  nameJVNDB-2007-000806
  titleFeed2JS におけるクロスサイトスクリプティングの脆弱性
  summaryオープンソースのウェブアプリケーションである Feed2JS (Feed to JavaScript) には、クロスサイトスクリプティングの脆弱性が存在します。
  cveinfo_nameCVE-2007-6102
  cveinfo_id29457
  nvdinfo_nameCVE-2007-6102
  nvdinfo_id58111
  cvssv24.3
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000806.html
  published_date2007-11-20
  registered_date2007-11-26
  last_updated_date2007-11-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id29457
  nameCVE-2007-6100
  statusCandidate
  descriptionCross-site scripting (XSS) vulnerability in libraries/auth/cookie.auth.lib.php in phpMyAdmin before 2.11.2.2, when logins are authenticated with the cookie auth_type, allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter to index.php, a different vulnerability than CVE-2005-0992.
  phaseAssigned (20071123)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id58111
  nameCVE-2007-6102
  descriptionCross-site scripting (XSS) vulnerability in Feed to JavaScript (Feed2JS) 1.91 allows remote attackers to inject arbitrary web script or HTML via a URL in a feed.
  reject(null)
  CVSS_version2
  CVSS_score4.3
  severityMedium
  CVSS_base_score4.3
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:N/I:P/A:N)
  sourcecve
  pub_date2017-01-07
  published2007-11-23
  modified_date2011-03-07
  typeCVE
  seq2007-6102
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id54217
  nameJVNDB-2007-002909
  titleCacti の graph.php における SQL インジェクションの脆弱性
  summaryCacti の graph.php には、SQL インジェクションの脆弱性が存在します。
  cveinfo_nameCVE-2007-6035
  cveinfo_id29390
  nvdinfo_nameCVE-2007-6035
  nvdinfo_id58056
  cvssv27.5
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002909.html
  published_date2007-11-20
  registered_date2012-06-26
  last_updated_date2012-06-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id29390
  nameCVE-2007-6033
  statusCandidate
  descriptionInvensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions (Everyone/Full Control), which allows remote authenticated attackers, and possibly anonymous users, to execute arbitrary programs.
  phaseAssigned (20071119)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id58056
  nameCVE-2007-6035
  descriptionSQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL commands via the local_graph_id parameter.
  reject(null)
  CVSS_version2
  CVSS_score7.5
  severityHigh
  CVSS_base_score7.5
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2017-01-07
  published2007-11-20
  modified_date2011-08-08
  typeCVE
  seq2007-6035
  deleted(null)
  created(null)
  modified(null)
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:2504/sort:published_date/direction:asc
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:2504/sort:published_date/direction:asc
Remote Port	44429
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	216.73.216.117
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Connection	close
Http Cache Control	max-age=259200
Http X Forwarded For	10.2.248.57
Http Via	1.1 squid-proxy-5b5d847c96-k8xf6 (squid/6.10)
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
X Dostranslated Ip	216.73.216.117
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	216.73.216.117
Unique Id	aIVREWk7bZRyFKA2RffIKQAAAbI
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect X Dostranslated Ip	216.73.216.117
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	216.73.216.117
Redirect Unique Id	aIVREWk7bZRyFKA2RffIKQAAAbI
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect X Dostranslated Ip	216.73.216.117
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	216.73.216.117
Redirect Redirect Unique Id	aIVREWk7bZRyFKA2RffIKQAAAbI
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1753567505.4244
Request Time	1753567505

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====