JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2007-002396	ESET NOD32 Antivirus における任意のコードを実行される脆弱性	ESET NOD32 Antivirus は、競合状態の発生によって、任意のコードを実行される脆弱性が存在します。	CVE-2007-3970	5	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002396.html	2007-07-25	2012-06-26	View
JVNDB-2007-002397	ESET NOD32 Antivirus における整数オーバーフローの脆弱性	ESET NOD32 Antivirus には、整数オーバーフローの脆弱性が存在します。	CVE-2007-3971	5	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002397.html	2007-07-25	2012-06-26	View
JVNDB-2006-001782	ESET NOD32 Antivirus の OLE2 パーサーにおける整数オーバーフローの脆弱性	ESET NOD32 Antivirus の (a) OLE2 パーサーおよび (b) CHM パーサーには、整数オーバーフローの脆弱性が存在します。	CVE-2006-6676	9.3	http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001782.html	2006-12-20	2012-06-26	View
JVNDB-2008-003711	ESet NOD32 におけるサービス運用妨害 (DoS) の脆弱性	ESet NOD32 は、(1) 多数の MIME パーツを伴う複合部分 / 混在した電子メールメッセージおよび (2) 多数の "Content-type: message/rfc822" ヘッダを伴う電子メールメッセージを適切に処理しないため、サービス運用妨害 (スタック消費またはその他のリソース消費) 状態となる脆弱性が存在します。	CVE-2008-5425	4.3	http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003711.html	2008-12-11	2012-06-26	View
JVNDB-2015-007054	ESET NOD32 のアーカイブサポートモジュールにおけるヒープベースのバッファオーバーフローの脆弱性	ESET NOD32 のアーカイブサポートモジュールには、ヒープベースのバッファオーバーフローの脆弱性が存在します。	CVE-2015-8841	10	http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007054.html	2015-06-29	2016-04-19	View

Page 3714 of 13768, showing 5 records out of 68839 total, starting on record 18566, ending on 18570

<<first <prev 3710 | 3711 | 3712 | 3713 | 3714 | 3715 | 3716 | 3717 | 3718 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page3714
  sorttitle
  directionasc
- pass(empty)
- paging(array)
  Jvninfo(array)
  page3714
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.titleasc
  limit5
  options(array)
  page3714
  order(array)
  Jvninfo.titleasc
  sorttitle
  directionasc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 3.99 MB

Message	Memory use
Component initialization	1.39 MB
Controller action start	1.49 MB
Controller render start	2.29 MB
View render complete	2.80 MB

Timers

Total Request Time: 240 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	2.76
Event: Controller.initialize	0.02
Event: Controller.startup	0.06
Controller action	221.05
Event: Controller.beforeRender	4.70
» Processing toolbar data	4.61
Rendering View	6.40
» Event: View.beforeRender	0.03
» Rendering APP/View/Jvninfos/index.ctp	5.45
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.52
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.08
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id53704
  nameJVNDB-2007-002396
  titleESET NOD32 Antivirus における任意のコードを実行される脆弱性
  summaryESET NOD32 Antivirus は、競合状態の発生によって、任意のコードを実行される脆弱性が存在します。
  cveinfo_nameCVE-2007-3970
  cveinfo_id27325
  nvdinfo_nameCVE-2007-3970
  nvdinfo_id56106
  cvssv25
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002396.html
  published_date2007-07-25
  registered_date2012-06-26
  last_updated_date2012-06-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id27325
  nameCVE-2007-3968
  statusCandidate
  descriptionindex.php in dirLIST before 0.1.1 allows remote attackers to list the contents of an excluded folder via a modified URL containing the folder name.
  phaseAssigned (20070725)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id56106
  nameCVE-2007-3970
  descriptionRace condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CAB file, which triggers heap corruption.
  reject(null)
  CVSS_version2
  CVSS_score5
  severityMedium
  CVSS_base_score5
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:N/I:P/A:N)
  sourcecve
  pub_date2017-01-07
  published2007-07-25
  modified_date2011-03-07
  typeCVE
  seq2007-3970
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id53705
  nameJVNDB-2007-002397
  titleESET NOD32 Antivirus における整数オーバーフローの脆弱性
  summaryESET NOD32 Antivirus には、整数オーバーフローの脆弱性が存在します。
  cveinfo_nameCVE-2007-3971
  cveinfo_id27326
  nvdinfo_nameCVE-2007-3971
  nvdinfo_id56107
  cvssv25
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002397.html
  published_date2007-07-25
  registered_date2012-06-26
  last_updated_date2012-06-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id27326
  nameCVE-2007-3969
  statusCandidate
  descriptionBuffer overflow in Panda Antivirus before 20070720 allows remote attackers to execute arbitrary code via a crafted EXE file, resulting from an "Integer Cast Around."
  phaseAssigned (20070725)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id56107
  nameCVE-2007-3971
  descriptionInteger overflow in ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service (CPU and disk consumption) via a crafted ASPACK packed file, which triggers an infinite loop.
  reject(null)
  CVSS_version2
  CVSS_score5
  severityMedium
  CVSS_base_score5
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:N/I:N/A:P)
  sourcecve
  pub_date2017-01-07
  published2007-07-25
  modified_date2011-03-07
  typeCVE
  seq2007-3971
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id59516
  nameJVNDB-2006-001782
  titleESET NOD32 Antivirus の OLE2 パーサーにおける整数オーバーフローの脆弱性
  summaryESET NOD32 Antivirus の (a) OLE2 パーサーおよび (b) CHM パーサーには、整数オーバーフローの脆弱性が存在します。
  cveinfo_nameCVE-2006-6676
  cveinfo_id22778
  nvdinfo_nameCVE-2006-6676
  nvdinfo_id65220
  cvssv29.3
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001782.html
  published_date2006-12-20
  registered_date2012-06-26
  last_updated_date2012-06-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id22778
  nameCVE-2006-6674
  statusCandidate
  descriptionOzeki HTTP-SMS Gateway 1.0, and possibly earlier, stores usernames and passwords in plaintext in the HKLMSoftwareOzekiSMSServerCurrentVersionPluginshttpsmsgate registry key, which allows local users to obtain sensitive information.
  phaseAssigned (20061220)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id65220
  nameCVE-2006-6676
  descriptionInteger overflow in the (a) OLE2 and (b) CHM parsers for ESET NOD32 Antivirus before 1.1743 allows remote attackers to execute arbitrary code via a crafted (1) .DOC or (2) .CAB file that triggers a heap-based buffer overflow.
  reject(null)
  CVSS_version2
  CVSS_score9.3
  severityHigh
  CVSS_base_score9.3
  CVSS_impact_subscore10
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2016-12-20
  published2006-12-20
  modified_date2011-03-07
  typeCVE
  seq2006-6676
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id48401
  nameJVNDB-2008-003711
  titleESet NOD32 におけるサービス運用妨害 (DoS) の脆弱性
  summaryESet NOD32 は、(1) 多数の MIME パーツを伴う複合部分 / 混在した電子メールメッセージおよび (2) 多数の "Content-type: message/rfc822" ヘッダを伴う電子メールメッセージを適切に処理しないため、サービス運用妨害 (スタック消費またはその他のリソース消費) 状態となる脆弱性が存在します。
  cveinfo_nameCVE-2008-5425
  cveinfo_id35538
  nvdinfo_nameCVE-2008-5425
  nvdinfo_id5198
  cvssv24.3
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003711.html
  published_date2008-12-11
  registered_date2012-06-26
  last_updated_date2012-06-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id35538
  nameCVE-2008-5421
  statusCandidate
  descriptionThe SSL web administration service in NetWin SmsGate 1.1n and earlier allows remote attackers to cause a denial of service (hang) via (1) a large integer in the Content-Length HTTP header; (2) an invalid value in the Content-Length HTTP header, as demonstrated by a negative integer; or (3) a missing Content-Length HTTP header.
  phaseAssigned (20081211)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id5198
  nameCVE-2008-5425
  descriptionESet NOD32 2.70.0039.0000 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173.
  reject(null)
  CVSS_version2
  CVSS_score4.3
  severityMedium
  CVSS_base_score4.3
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:N/I:N/A:P)
  sourcecve
  pub_date2017-01-03
  published2008-12-11
  modified_date2009-01-29
  typeCVE
  seq2008-5425
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id11734
  nameJVNDB-2015-007054
  titleESET NOD32 のアーカイブサポートモジュールにおけるヒープベースのバッファオーバーフローの脆弱性
  summaryESET NOD32 のアーカイブサポートモジュールには、ヒープベースのバッファオーバーフローの脆弱性が存在します。
  cveinfo_nameCVE-2015-8841
  cveinfo_id86066
  nvdinfo_nameCVE-2015-8841
  nvdinfo_id28875
  cvssv210
  cvssv39.8
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007054.html
  published_date2015-06-29
  registered_date2016-04-19
  last_updated_date2016-04-19
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id86066
  nameCVE-2015-8789
  statusCandidate
  descriptionUse-after-free vulnerability in the EbmlMaster::Read function in libEBML before 1.3.3 allows context-dependent attackers to have unspecified impact via a "deeply nested element with infinite size" followed by another element of an upper level in an EBML document.
  phaseAssigned (20160129)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id28875
  nameCVE-2015-8841
  descriptionHeap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows remote attackers to execute arbitrary code via a large number of languages in an EPOC installation file of type SIS_FILE_MULTILANG.
  reject(null)
  CVSS_version2
  CVSS_score10
  severityHigh
  CVSS_base_score10
  CVSS_impact_subscore10
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-19
  published2016-04-11
  modified_date2016-04-18
  typeCVE
  seq2015-8841
  deleted(null)
  created(null)
  modified(null)
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:3714/sort:title/direction:asc
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:3714/sort:title/direction:asc
Remote Port	38723
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	216.73.216.223
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Connection	close
Http Cache Control	max-age=259200
Http X Forwarded For	10.1.148.26
Http Via	1.1 squid-proxy-5b5d847c96-7f7gz (squid/6.13)
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Suspectharddos	1
Suspectdos	1
X Dostranslated Ip	216.73.216.223
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	216.73.216.223
Unique Id	aONEMyeJXLkv2g8YW-LkAQAAAb4
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Suspectharddos	1
Redirect Suspectdos	1
Redirect X Dostranslated Ip	216.73.216.223
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	216.73.216.223
Redirect Unique Id	aONEMyeJXLkv2g8YW-LkAQAAAb4
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect Suspectharddos	1
Redirect Redirect Suspectdos	1
Redirect Redirect X Dostranslated Ip	216.73.216.223
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	216.73.216.223
Redirect Redirect Unique Id	aONEMyeJXLkv2g8YW-LkAQAAAb4
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1759724595.9235
Request Time	1759724595

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====