JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2004-000173	GNU Emacs/XEmacs の FLIM (Faithful Library about Internet Message) におけるシンボリックリンク攻撃を受ける脆弱性	FLIM には、セキュリティ上不適切な方法で一時ファイルを作成してしまうため、シンボリックリンク攻撃を受ける脆弱性が存在します。	CVE-2004-0422	2.1	http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000173.html	2004-05-01	2007-04-01	View
JVNDB-2004-000429	Microsoft Windows の Windows シェルにおける任意のコードを実行される脆弱性	Microsoft Windows に含まれている Windows シェルには、アプリケーションの起動処理において、メッセージの長さを適切にチェックしていない脆弱性が存在します。	CVE-2004-0214	10	http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000429.html	2004-10-12	2007-04-01	View
JVNDB-2003-000069	IBM Lotus Domino Server の NRPC プロトコルによる認証時にバッファオーバーフローの脆弱性	IBM Lotus Domino Server には、 NRPC プロトコルを使用した認証時において、バッファオーバーフローが発生する脆弱性が存在します。	CVE-2003-0122	5	http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000069.html	2003-03-07	2007-04-01	View
JVNDB-2003-000325	Red Hat Linux の pan におけるバッファオーバーフローの脆弱性	Red Hat Linux に含まれる pan には、取り扱う電子メールアドレスの文字列に対するチェックが不適切であるため、バッファオーバフローが発生する脆弱性が存在します。	CVE-2003-0855	7.8	http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000325.html	2003-10-30	2007-04-01	View
JVNDB-2002-000182	Sun ONE Web Server のデータサイズの算出方法におけるバッファオーバーフローの脆弱性	Sun ONE Web Server において、チャンク形式でエンコーディングされたデータサイズの算出方法に問題があるため、不正なデータを送りつけられる事で、ヒープ領域にオーバーフローが発生する脆弱性が存在します。	CVE-2002-0845	7.5	http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000182.html	2002-08-08	2007-04-01	View

Page 279 of 13768, showing 5 records out of 68839 total, starting on record 1391, ending on 1395

<<first <prev 275 | 276 | 277 | 278 | 279 | 280 | 281 | 282 | 283 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page279
  sortlast_updated_date
  directionasc
  Jvninfoscveinfos
- pass(empty)
- paging(array)
  Jvninfo(array)
  page279
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.last_updated_dateasc
  limit5
  options(array)
  page279
  order(array)
  Jvninfo.last_updated_dateasc
  sortlast_updated_date
  directionasc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 4.03 MB

Message	Memory use
Component initialization	1.39 MB
Controller action start	1.49 MB
Controller render start	2.26 MB
View render complete	2.77 MB

Timers

Total Request Time: 78 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	3.06
Event: Controller.initialize	0.03
Event: Controller.startup	0.07
Controller action	56.78
Event: Controller.beforeRender	5.58
» Processing toolbar data	5.49
Rendering View	7.10
» Event: View.beforeRender	0.03
» Rendering APP/View/Jvninfos/index.ctp	6.04
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.59
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.08
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id62831
  nameJVNDB-2004-000173
  titleGNU Emacs/XEmacs の FLIM (Faithful Library about Internet Message) におけるシンボリックリンク攻撃を受ける脆弱性
  summaryFLIM には、セキュリティ上不適切な方法で一時ファイルを作成してしまうため、シンボリックリンク攻撃を受ける脆弱性が存在します。
  cveinfo_nameCVE-2004-0422
  cveinfo_id8849
  nvdinfo_nameCVE-2004-0422
  nvdinfo_id70869
  cvssv22.1
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000173.html
  published_date2004-05-01
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id8849
  nameCVE-2004-0421
  statusCandidate
  descriptionThe Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.
  phaseAssigned (20040419)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id70869
  nameCVE-2004-0422
  descriptionflim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack.
  reject
  CVSS_version2
  CVSS_score2.1
  severityLow
  CVSS_base_score2.1
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore3.9
  nvd_xml_version
  CVSS_vector(AV:L/AC:L/Au:N/C:N/I:P/A:N)
  sourcecve
  pub_date2017-07-18
  published2004-07-07
  modified_date2017-07-10
  typeCVE
  seq2004-0422
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  1(array)
  Jvninfo(array)
  id63087
  nameJVNDB-2004-000429
  titleMicrosoft Windows の Windows シェルにおける任意のコードを実行される脆弱性
  summaryMicrosoft Windows に含まれている Windows シェルには、アプリケーションの起動処理において、メッセージの長さを適切にチェックしていない脆弱性が存在します。
  cveinfo_nameCVE-2004-0214
  cveinfo_id8641
  nvdinfo_nameCVE-2004-0214
  nvdinfo_id70667
  cvssv210
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000429.html
  published_date2004-10-12
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id8641
  nameCVE-2004-0213
  statusCandidate
  descriptionUtility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter" style attack that sends a Windows message to cause Utility Manager to launch winhlp32 by directly accessing the context sensitive help and bypassing the GUI, then sending another message to winhlp32 in order to open a user-selected file, a different vulnerability than CVE-2003-0908.
  phaseAssigned (20040311)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id70667
  nameCVE-2004-0214
  descriptionBuffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.
  reject
  CVSS_version2
  CVSS_score10
  severityHigh
  CVSS_base_score10
  CVSS_impact_subscore10
  CVSS_exploit_subscore10
  nvd_xml_version
  CVSS_vector(AV:N/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-07-18
  published2004-11-03
  modified_date2017-07-10
  typeCVE
  seq2004-0214
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  2(array)
  Jvninfo(array)
  id63343
  nameJVNDB-2003-000069
  titleIBM Lotus Domino Server の NRPC プロトコルによる認証時にバッファオーバーフローの脆弱性
  summaryIBM Lotus Domino Server には、 NRPC プロトコルを使用した認証時において、バッファオーバーフローが発生する脆弱性が存在します。
  cveinfo_nameCVE-2003-0122
  cveinfo_id6950
  nvdinfo_nameCVE-2003-0122
  nvdinfo_id73269
  cvssv25
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000069.html
  published_date2003-03-07
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id6950
  nameCVE-2003-0121
  statusCandidate
  descriptionClearswift MAILsweeper 4.x allows remote attackers to bypass attachment detection via an attachment that does not specify a MIME-Version header field, which is processed by some mail clients.
  phaseAssigned (20030303)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id73269
  nameCVE-2003-0122
  descriptionBuffer overflow in Notes server before Lotus Notes R4, R5 before 5.0.11, and early R6 allows remote attackers to execute arbitrary code via a long distinguished name (DN) during NotesRPC authentication and an outer field length that is less than that of the DN field.
  reject(null)
  CVSS_version2
  CVSS_score5
  severityMedium
  CVSS_base_score5
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:N/I:N/A:P)
  sourcecve
  pub_date2017-01-03
  published2003-03-18
  modified_date2016-10-17
  typeCVE
  seq2003-0122
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id63599
  nameJVNDB-2003-000325
  titleRed Hat Linux の pan におけるバッファオーバーフローの脆弱性
  summaryRed Hat Linux に含まれる pan には、取り扱う電子メールアドレスの文字列に対するチェックが不適切であるため、バッファオーバフローが発生する脆弱性が存在します。
  cveinfo_nameCVE-2003-0855
  cveinfo_id7678
  nvdinfo_nameCVE-2003-0855
  nvdinfo_id73953
  cvssv27.8
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000325.html
  published_date2003-10-30
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id7678
  nameCVE-2003-0854
  statusCandidate
  descriptionls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd.
  phaseAssigned (20031010)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id73953
  nameCVE-2003-0855
  descriptionPan 0.13.3 and earlier allows remote attackers to cause a denial of service (crash) via a news post with a long author email address.
  reject(null)
  CVSS_version2
  CVSS_score7.8
  severityHigh
  CVSS_base_score7.8
  CVSS_impact_subscore6.9
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:N/I:N/A:C)
  sourcecve
  pub_date2017-01-03
  published2003-11-03
  modified_date2008-09-05
  typeCVE
  seq2003-0855
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id63855
  nameJVNDB-2002-000182
  titleSun ONE Web Server のデータサイズの算出方法におけるバッファオーバーフローの脆弱性
  summarySun ONE Web Server において、チャンク形式でエンコーディングされたデータサイズの算出方法に問題があるため、不正なデータを送りつけられる事で、ヒープ領域にオーバーフローが発生する脆弱性が存在します。
  cveinfo_nameCVE-2002-0845
  cveinfo_id5235
  nvdinfo_nameCVE-2002-0845
  nvdinfo_id79844
  cvssv27.5
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000182.html
  published_date2002-08-08
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id5235
  nameCVE-2002-0845
  statusEntry
  descriptionBuffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chunked transfer encoding.
  phase(null)
  votes(null)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id79844
  nameCVE-2002-0845
  descriptionBuffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chunked transfer encoding.
  reject(null)
  CVSS_version2
  CVSS_score7.5
  severityHigh
  CVSS_base_score7.5
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2017-01-05
  published2002-08-12
  modified_date2016-10-17
  typeCVE
  seq2002-0845
  deleted(null)
  created(null)
  modified(null)
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Http Connection	close
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:279/sort:last_updated_date/direction:asc/Jvninfos:cveinfos
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:279/sort:last_updated_date/direction:asc/Jvninfos:cveinfos
Remote Port	18682
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	18.191.5.237
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
X Dostranslated Ip	18.191.5.237
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	18.191.5.237
Unique Id	aCRwIqJfXbDh38sphKrbaQAAAMI
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect X Dostranslated Ip	18.191.5.237
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	18.191.5.237
Redirect Unique Id	aCRwIqJfXbDh38sphKrbaQAAAMI
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect X Dostranslated Ip	18.191.5.237
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	18.191.5.237
Redirect Redirect Unique Id	aCRwIqJfXbDh38sphKrbaQAAAMI
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1747218466.4202
Request Time	1747218466

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====