JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2015-004963	Web Reference Database の install.php における任意のコマンドを実行される脆弱性	Web Reference Database (別名 refbase) の install.php には、任意のコマンドを実行される脆弱性が存在します。	CVE-2015-6008	7.5	http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004963.html	2015-09-21	2015-09-30	View
JVNDB-2015-006499	IBM InfoSphere BigInsights などの製品で使用される Apache HBase におけるサービス運用妨害 (DoS) の脆弱性	IBM InfoSphere BigInsights およびその他の製品で使用される Apache HBase は、ZooKeeper コーディネーションステートに不正な ACL を使用するため、サービス運用妨害 (デーモン停止) 状態にされる、重要な情報を取得される、またはデータを変更される脆弱性が存在します。	CVE-2015-1836	7.5	http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006499.html	2015-05-25	2015-12-24	View
JVNDB-2015-007011	IBM Tivoli Storage Manager FastBack のサーバにおけるバッファオーバーフローの脆弱性	IBM Tivoli Storage Manager FastBack のサーバには、バッファオーバーフローの脆弱性が存在します。	CVE-2015-8519	7.5	http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007011.html	2015-12-08	2016-04-07	View
JVNDB-2014-004150	TYPO3 用 Flat Manager エクステンションにおける SQL インジェクションの脆弱性	TYPO3 用 Flat Manager (flatmgr) エクステンションには、SQL インジェクションの脆弱性が存在します。	CVE-2014-6233	7.5	http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004150.html	2014-09-02	2014-09-12	View
JVNDB-2014-004918	C97net Cart Engine の cart.php 内の sql_query 関数における SQL インジェクションの脆弱性	C97net Cart Engine の cart.php 内の sql_query 関数には、SQL インジェクションの脆弱性が存在します。	CVE-2014-8306	7.5	http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004918.html	2014-08-21	2014-10-23	View

Page 3196 of 13768, showing 5 records out of 68839 total, starting on record 15976, ending on 15980

<<first <prev 3192 | 3193 | 3194 | 3195 | 3196 | 3197 | 3198 | 3199 | 3200 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page3196
  sortcvssv2
  directiondesc
- pass(empty)
- paging(array)
  Jvninfo(array)
  page3196
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.cvssv2desc
  limit5
  options(array)
  page3196
  order(array)
  Jvninfo.cvssv2desc
  sortcvssv2
  directiondesc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 3.84 MB

Message	Memory use
Component initialization	1.39 MB
Controller action start	1.49 MB
Controller render start	2.29 MB
View render complete	2.79 MB

Timers

Total Request Time: 214 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	4.83
Event: Controller.initialize	0.02
Event: Controller.startup	0.07
Controller action	183.43
Event: Controller.beforeRender	4.70
» Processing toolbar data	4.61
Rendering View	13.32
» Event: View.beforeRender	0.03
» Rendering APP/View/Jvninfos/index.ctp	12.35
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.53
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.08
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id9643
  nameJVNDB-2015-004963
  titleWeb Reference Database の install.php における任意のコマンドを実行される脆弱性
  summaryWeb Reference Database (別名 refbase) の install.php には、任意のコマンドを実行される脆弱性が存在します。
  cveinfo_nameCVE-2015-6008
  cveinfo_id83233
  nvdinfo_nameCVE-2015-6008
  nvdinfo_id27041
  cvssv27.5
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004963.html
  published_date2015-09-21
  registered_date2015-09-30
  last_updated_date2015-09-30
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id83233
  nameCVE-2015-5956
  statusCandidate
  descriptionThe sanitizeLocalUrl function in TYPO3 6.x before 6.2.15, 7.x before 7.4.0, 4.5.40, and earlier allows remote authenticated users to bypass the XSS filter and conduct cross-site scripting (XSS) attacks via a base64 encoded data URI, as demonstrated by the (1) returnUrl parameter to show_rechis.php and the (2) redirect_url parameter to index.php.
  phaseAssigned (20150806)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id27041
  nameCVE-2015-6008
  descriptioninstall.php in Web Reference Database (aka refbase) through 0.9.6 allows remote attackers to execute arbitrary commands via the adminPassword parameter, a different issue than CVE-2015-7381.
  reject(null)
  CVSS_version2
  CVSS_score7.5
  severityHigh
  CVSS_base_score7.5
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2017-01-19
  published2015-09-27
  modified_date2015-09-28
  typeCVE
  seq2015-6008
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id11179
  nameJVNDB-2015-006499
  titleIBM InfoSphere BigInsights などの製品で使用される Apache HBase におけるサービス運用妨害 (DoS) の脆弱性
  summaryIBM InfoSphere BigInsights およびその他の製品で使用される Apache HBase は、ZooKeeper コーディネーションステートに不正な ACL を使用するため、サービス運用妨害 (デーモン停止) 状態にされる、重要な情報を取得される、またはデータを変更される脆弱性が存在します。
  cveinfo_nameCVE-2015-1836
  cveinfo_id79061
  nvdinfo_nameCVE-2015-1836
  nvdinfo_id24062
  cvssv27.5
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006499.html
  published_date2015-05-25
  registered_date2015-12-24
  last_updated_date2015-12-24
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id79061
  nameCVE-2015-1784
  statusCandidate
  description** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
  phaseAssigned (20150217)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id24062
  nameCVE-2015-1836
  descriptionApache HBase 0.98 before 0.98.12.1, 1.0 before 1.0.1.1, and 1.1 before 1.1.0.1, as used in IBM InfoSphere BigInsights 3.0, 3.0.0.1, and 3.0.0.2 and other products, uses incorrect ACLs for ZooKeeper coordination state, which allows remote attackers to cause a denial of service (daemon outage), obtain sensitive information, or modify data via unspecified client traffic.
  reject(null)
  CVSS_version2
  CVSS_score7.5
  severityHigh
  CVSS_base_score7.5
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2017-03-29
  published2015-12-21
  modified_date2017-03-23
  typeCVE
  seq2015-1836
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id11691
  nameJVNDB-2015-007011
  titleIBM Tivoli Storage Manager FastBack のサーバにおけるバッファオーバーフローの脆弱性
  summaryIBM Tivoli Storage Manager FastBack のサーバには、バッファオーバーフローの脆弱性が存在します。
  cveinfo_nameCVE-2015-8519
  cveinfo_id85744
  nvdinfo_nameCVE-2015-8519
  nvdinfo_id28656
  cvssv27.5
  cvssv39.8
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007011.html
  published_date2015-12-08
  registered_date2016-04-07
  last_updated_date2016-04-07
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id85744
  nameCVE-2015-8467
  statusCandidate
  descriptionThe samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not properly check for administrative privileges during creation of machine accounts, which allows remote authenticated users to bypass intended access restrictions by leveraging the existence of a domain with both a Samba DC and a Windows DC, a similar issue to CVE-2015-2535.
  phaseAssigned (20151204)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id28656
  nameCVE-2015-8519
  descriptionBuffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to execute arbitrary code via a crafted command, a different vulnerability than CVE-2015-8520, CVE-2015-8521, and CVE-2015-8522.
  reject(null)
  CVSS_version2
  CVSS_score7.5
  severityHigh
  CVSS_base_score7.5
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2017-01-19
  published2016-04-05
  modified_date2016-11-28
  typeCVE
  seq2015-8519
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id15275
  nameJVNDB-2014-004150
  titleTYPO3 用 Flat Manager エクステンションにおける SQL インジェクションの脆弱性
  summaryTYPO3 用 Flat Manager (flatmgr) エクステンションには、SQL インジェクションの脆弱性が存在します。
  cveinfo_nameCVE-2014-6233
  cveinfo_id73524
  nvdinfo_nameCVE-2014-6233
  nvdinfo_id33786
  cvssv27.5
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004150.html
  published_date2014-09-02
  registered_date2014-09-12
  last_updated_date2014-09-12
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id73524
  nameCVE-2014-6225
  statusCandidate
  description** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
  phaseAssigned (20140902)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id33786
  nameCVE-2014-6233
  descriptionSQL injection vulnerability in the Flat Manager (flatmgr) extension before 2.7.10 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
  reject(null)
  CVSS_version2
  CVSS_score7.5
  severityHigh
  CVSS_base_score7.5
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2017-01-19
  published2014-09-11
  modified_date2014-09-11
  typeCVE
  seq2014-6233
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id16043
  nameJVNDB-2014-004918
  titleC97net Cart Engine の cart.php 内の sql_query 関数における SQL インジェクションの脆弱性
  summaryC97net Cart Engine の cart.php 内の sql_query 関数には、SQL インジェクションの脆弱性が存在します。
  cveinfo_nameCVE-2014-8306
  cveinfo_id75599
  nvdinfo_nameCVE-2014-8306
  nvdinfo_id35401
  cvssv27.5
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004918.html
  published_date2014-08-21
  registered_date2014-10-23
  last_updated_date2014-10-23
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id75599
  nameCVE-2014-8298
  statusCandidate
  descriptionThe NVIDIA Linux Discrete GPU drivers before R304.125, R331.x before R331.113, R340.x before R340.65, R343.x before R343.36, and R346.x before R346.22, Linux for Tegra (L4T) driver before R21.2, and Chrome OS driver before R40 allows remote attackers to cause a denial of service (segmentation fault and X server crash) or possibly execute arbitrary code via a crafted GLX indirect rendering protocol request.
  phaseAssigned (20141016)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id35401
  nameCVE-2014-8306
  descriptionSQL injection vulnerability in the sql_query function in cart.php in C97net Cart Engine before 4.0 allows remote attackers to execute arbitrary SQL commands via the item_id variable, as demonstrated by the (1) item_id[0] or (2) item_id[] parameter.
  reject(null)
  CVSS_version2
  CVSS_score7.5
  severityHigh
  CVSS_base_score7.5
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2017-01-19
  published2014-10-16
  modified_date2014-12-16
  typeCVE
  seq2014-8306
  deleted(null)
  created(null)
  modified(null)
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Http Connection	close
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:3196/sort:cvssv2/direction:desc
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:3196/sort:cvssv2/direction:desc
Remote Port	3481
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	18.219.255.85
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Suspectdos	1
X Dostranslated Ip	18.219.255.85
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	18.219.255.85
Unique Id	aJlJ4dMurdHjvYf5XqwEMgAAAb8
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Suspectdos	1
Redirect X Dostranslated Ip	18.219.255.85
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	18.219.255.85
Redirect Unique Id	aJlJ4dMurdHjvYf5XqwEMgAAAb8
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect Suspectdos	1
Redirect Redirect X Dostranslated Ip	18.219.255.85
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	18.219.255.85
Redirect Redirect Unique Id	aJlJ4dMurdHjvYf5XqwEMgAAAb8
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1754876385.9793
Request Time	1754876385

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====