JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2017-002808	Ghostscript に任意のコードが実行可能な脆弱性	Ghostscript には、任意のコードが実行可能な脆弱性が存在します。	CVE-2017-8291	6.8	http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002808.html	2017-04-28	2017-05-01	View
JVNDB-2017-004298	Schneider Electric Wonderware Historian Client における XML 外部エンティティの脆弱性	Schneider Electric Wonderware Historian Client には、XML 外部エンティティの脆弱性が存在します。	CVE-2017-7907	3.3	http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004298.html	2017-04-28	2017-06-21	View
JVNDB-2017-004533	VideoLAN VLC media player の ParseJSS におけるヒープメモリの境界外読み取りの脆弱性	VideoLAN VLC media player の ParseJSS には、文字列の長さのチェックが欠如しているため、ヒープメモリの境界外読み取りの脆弱性が存在します。	CVE-2017-8312	4.3	http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004533.html	2017-04-28	2017-06-28	View
JVNDB-2017-004103	Admidio の adm_program/modules/members/members_function.php におけるクロスサイトリクエストフォージェリの脆弱性	Admidio の adm_program/modules/members/members_function.php には、クロスサイトリクエストフォージェリの脆弱性が存在します。	CVE-2017-8382	3.5	http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004103.html	2017-04-28	2017-06-16	View
JVNDB-2017-003672	複数の Novell および NetIQ 製品における暗号に関する脆弱性	複数の Novell および NetIQ 製品には、暗号に関する脆弱性が存在します。	CVE-2017-5186	4.3	http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-003672.html	2017-04-27	2017-06-02	View

Page 281 of 13768, showing 5 records out of 68839 total, starting on record 1401, ending on 1405

<<first <prev 277 | 278 | 279 | 280 | 281 | 282 | 283 | 284 | 285 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page281
  sortpublished_date
  directiondesc
- pass(empty)
- paging(array)
  Jvninfo(array)
  page281
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.published_datedesc
  limit5
  options(array)
  page281
  order(array)
  Jvninfo.published_datedesc
  sortpublished_date
  directiondesc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 3.91 MB

Message	Memory use
Component initialization	1.38 MB
Controller action start	1.49 MB
Controller render start	2.26 MB
View render complete	2.76 MB

Timers

Total Request Time: 73 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	2.84
Event: Controller.initialize	0.02
Event: Controller.startup	0.06
Controller action	55.13
Event: Controller.beforeRender	4.20
» Processing toolbar data	4.12
Rendering View	6.24
» Event: View.beforeRender	0.03
» Rendering APP/View/Jvninfos/index.ctp	5.39
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.45
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.07
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id66470
  nameJVNDB-2017-002808
  titleGhostscript に任意のコードが実行可能な脆弱性
  summaryGhostscript には、任意のコードが実行可能な脆弱性が存在します。
  cveinfo_nameCVE-2017-8291
  cveinfo_id0
  nvdinfo_nameCVE-2017-8291
  nvdinfo_id85069
  cvssv26.8
  cvssv37.8
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002808.html
  published_date2017-04-28
  registered_date2017-05-01
  last_updated_date2017-05-01
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified2017-05-08 12:32:16
  Cveinfo(array)
  id(null)
  name(null)
  status(null)
  description(null)
  phase(null)
  votes(null)
  comments(null)
  deleted(null)
  created(null)
  modified(null)
  Nvdinfo(array)
  id85069
  nameCVE-2017-8291
  descriptionArtifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a /OutputFile (%pipe% substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017.
  reject
  CVSS_version2
  CVSS_score6.8
  severityMedium
  CVSS_base_score6.8
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore8.6
  nvd_xml_version
  CVSS_vector(AV:N/AC:M/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2017-05-27
  published2017-04-26
  modified_date2017-05-26
  typeCVE
  seq2017-8291
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  1(array)
  Jvninfo(array)
  id68016
  nameJVNDB-2017-004298
  titleSchneider Electric Wonderware Historian Client における XML 外部エンティティの脆弱性
  summarySchneider Electric Wonderware Historian Client には、XML 外部エンティティの脆弱性が存在します。
  cveinfo_nameCVE-2017-7907
  cveinfo_id0
  nvdinfo_nameCVE-2017-7907
  nvdinfo_id86049
  cvssv23.3
  cvssv36.6
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004298.html
  published_date2017-04-28
  registered_date2017-06-21
  last_updated_date2017-06-21
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified2017-06-29 09:07:53
  Cveinfo(array)
  id(null)
  name(null)
  status(null)
  description(null)
  phase(null)
  votes(null)
  comments(null)
  deleted(null)
  created(null)
  modified(null)
  Nvdinfo(array)
  id86049
  nameCVE-2017-7907
  descriptionAn Improper XML Parser Configuration issue was discovered in Schneider Electric Wonderware Historian Client 2014 R2 SP1 and prior. An improperly restricted XML parser (with improper restriction of XML external entity reference, or XXE) may allow an attacker to enter malicious input through the application which could cause a denial of service or disclose file contents from a server or connected network.
  reject
  CVSS_version2
  CVSS_score3.3
  severityLow
  CVSS_base_score3.3
  CVSS_impact_subscore4.9
  CVSS_exploit_subscore3.4
  nvd_xml_version
  CVSS_vector(AV:L/AC:M/Au:N/C:P/I:N/A:P)
  sourcecve
  pub_date2017-07-18
  published2017-05-18
  modified_date2017-07-07
  typeCVE
  seq2017-7907
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  2(array)
  Jvninfo(array)
  id68276
  nameJVNDB-2017-004533
  titleVideoLAN VLC media player の ParseJSS におけるヒープメモリの境界外読み取りの脆弱性
  summaryVideoLAN VLC media player の ParseJSS には、文字列の長さのチェックが欠如しているため、ヒープメモリの境界外読み取りの脆弱性が存在します。
  cveinfo_nameCVE-2017-8312
  cveinfo_id0
  nvdinfo_nameCVE-2017-8312
  nvdinfo_id86062
  cvssv24.3
  cvssv35.5
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004533.html
  published_date2017-04-28
  registered_date2017-06-28
  last_updated_date2017-06-28
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified2017-07-19 10:27:44
  Cveinfo(array)
  id(null)
  name(null)
  status(null)
  description(null)
  phase(null)
  votes(null)
  comments(null)
  deleted(null)
  created(null)
  modified(null)
  Nvdinfo(array)
  id86062
  nameCVE-2017-8312
  descriptionHeap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data via a crafted subtitles file.
  reject
  CVSS_version2
  CVSS_score4.3
  severityMedium
  CVSS_base_score4.3
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore8.6
  nvd_xml_version
  CVSS_vector(AV:N/AC:M/Au:N/C:P/I:N/A:N)
  sourcecve
  pub_date2017-07-18
  published2017-05-23
  modified_date2017-07-10
  typeCVE
  seq2017-8312
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  3(array)
  Jvninfo(array)
  id67814
  nameJVNDB-2017-004103
  titleAdmidio の adm_program/modules/members/members_function.php におけるクロスサイトリクエストフォージェリの脆弱性
  summaryAdmidio の adm_program/modules/members/members_function.php には、クロスサイトリクエストフォージェリの脆弱性が存在します。
  cveinfo_nameCVE-2017-8382
  cveinfo_id0
  nvdinfo_nameCVE-2017-8382
  nvdinfo_id86068
  cvssv23.5
  cvssv34.5
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004103.html
  published_date2017-04-28
  registered_date2017-06-16
  last_updated_date2017-06-16
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified2017-06-18 15:32:02
  Cveinfo(array)
  id(null)
  name(null)
  status(null)
  description(null)
  phase(null)
  votes(null)
  comments(null)
  deleted(null)
  created(null)
  modified(null)
  Nvdinfo(array)
  id86068
  nameCVE-2017-8382
  descriptionadmidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user accounts.
  reject
  CVSS_version2
  CVSS_score3.5
  severityLow
  CVSS_base_score3.5
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore6.8
  nvd_xml_version
  CVSS_vector(AV:N/AC:M/Au:S/C:N/I:N/A:P)
  sourcecve
  pub_date2017-06-12
  published2017-05-16
  modified_date2017-06-04
  typeCVE
  seq2017-8382
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  4(array)
  Jvninfo(array)
  id67360
  nameJVNDB-2017-003672
  title複数の Novell および NetIQ 製品における暗号に関する脆弱性
  summary複数の Novell および NetIQ 製品には、暗号に関する脆弱性が存在します。
  cveinfo_nameCVE-2017-5186
  cveinfo_id0
  nvdinfo_nameCVE-2017-5186
  nvdinfo_id85438
  cvssv24.3
  cvssv37.5
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-003672.html
  published_date2017-04-27
  registered_date2017-06-02
  last_updated_date2017-06-02
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified2017-06-05 08:38:47
  Cveinfo(array)
  id(null)
  name(null)
  status(null)
  description(null)
  phase(null)
  votes(null)
  comments(null)
  deleted(null)
  created(null)
  modified(null)
  Nvdinfo(array)
  id85438
  nameCVE-2017-5186
  descriptionNovell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before 3.0.2.1, Novell eDirectory 8.8.x before 8.8 SP8 Patch 9 Hotfix 2, and NetIQ eDirectory 9.x before 9.0.2 Hotfix 2 (9.0.2.2) use the deprecated MD5 hashing algorithm in a communications certificate.
  reject
  CVSS_version2
  CVSS_score4.3
  severityMedium
  CVSS_base_score4.3
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore8.6
  nvd_xml_version
  CVSS_vector(AV:N/AC:M/Au:N/C:N/I:N/A:P)
  sourcecve
  pub_date2017-05-27
  published2017-04-27
  modified_date2017-05-11
  typeCVE
  seq2017-5186
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Http Connection	close
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:281/sort:published_date/direction:desc
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:281/sort:published_date/direction:desc
Remote Port	28013
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	3.145.68.176
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
X Dostranslated Ip	3.145.68.176
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	3.145.68.176
Unique Id	aBoHvmayqkZssRdS02wXJgAAAhk
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect X Dostranslated Ip	3.145.68.176
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	3.145.68.176
Redirect Unique Id	aBoHvmayqkZssRdS02wXJgAAAhk
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect X Dostranslated Ip	3.145.68.176
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	3.145.68.176
Redirect Redirect Unique Id	aBoHvmayqkZssRdS02wXJgAAAhk
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1746536382.0077
Request Time	1746536382

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====