JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2008-004039	LightBlog の cp_upload_image.php における任意のコードを実行される脆弱性	LightBlog の cp_upload_image.php は、ファイルアップロードされることにより、任意のコードを実行される脆弱性が存在します。	CVE-2008-0632	9.3	http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004039.html	2008-02-06	2012-09-25	View
JVNDB-2007-003053	Gnome Office Gnumeric の plugins/excel/ms-excel-read.c における任意のコードを実行される脆弱性	Gnome Office Gnumeric の plugins/excel/ms-excel-read.c の excel_read_HLINK 関数は、整数符号化エラーが発生するため、任意のコードを実行される脆弱性が存在します。	CVE-2008-0668	9.3	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003053.html	2007-12-24	2012-06-26	View
JVNDB-2017-002221	複数の F-Secure 製品で配布される F-Secure Software Updater における脆弱性	複数の F-Secure 製品で配布される F-Secure Software Updater は、インストールパッケージのダウンロード後にファイルを検証しないため、任意の実行ファイルに置き換えられ、SYSTEM アカウントで実行される脆弱性が存在します。	CVE-2017-6466	9.3	http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002221.html	2017-03-08	2017-04-04	View
JVNDB-2016-001631	Google Chrome の content/browser/web_contents/web_contents_impl.cc におけるサービス運用妨害 (DoS) の脆弱性	Google Chrome の content/browser/web_contents/web_contents_impl.cc には、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (DoS) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。	CVE-2016-1641	9.3	http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001631.html	2016-03-02	2016-03-09	View
JVNDB-2016-001887	Apple OS X のグラフィックスドライバサブシステムの Intel ドライバにおける特権付きコンテキスト内で任意のコードを実行される脆弱性	Apple OS X のグラフィックスドライバサブシステムの Intel ドライバには、特権付きコンテキスト内で任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。	CVE-2016-1744	9.3	http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001887.html	2016-03-21	2016-03-28	View

Page 401 of 13768, showing 5 records out of 68839 total, starting on record 2001, ending on 2005

<<first <prev 397 | 398 | 399 | 400 | 401 | 402 | 403 | 404 | 405 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page401
  sortcvssv2
  directiondesc
- pass(empty)
- paging(array)
  Jvninfo(array)
  page401
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.cvssv2desc
  limit5
  options(array)
  page401
  order(array)
  Jvninfo.cvssv2desc
  sortcvssv2
  directiondesc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 3.74 MB

Message	Memory use
Component initialization	1.38 MB
Controller action start	1.48 MB
Controller render start	2.27 MB
View render complete	2.77 MB

Timers

Total Request Time: 126 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	3.06
Event: Controller.initialize	0.04
Event: Controller.startup	0.06
Controller action	106.69
Event: Controller.beforeRender	5.64
» Processing toolbar data	5.54
Rendering View	6.49
» Event: View.beforeRender	0.03
» Rendering APP/View/Jvninfos/index.ctp	5.58
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.49
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.08
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id48729
  nameJVNDB-2008-004039
  titleLightBlog の cp_upload_image.php における任意のコードを実行される脆弱性
  summaryLightBlog の cp_upload_image.php は、ファイルアップロードされることにより、任意のコードを実行される脆弱性が存在します。
  cveinfo_nameCVE-2008-0632
  cveinfo_id30745
  nvdinfo_nameCVE-2008-0632
  nvdinfo_id607
  cvssv29.3
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004039.html
  published_date2008-02-06
  registered_date2012-09-25
  last_updated_date2012-09-25
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id30745
  nameCVE-2008-0628
  statusCandidate
  descriptionThe XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the "external general entities" property is false, which allows remote attackers to conduct XML external entity (XXE) attacks and cause a denial of service or access restricted resources.
  phaseAssigned (20080206)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id607
  nameCVE-2008-0632
  descriptionUnrestricted file upload vulnerability in cp_upload_image.php in LightBlog 9.5 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in the blog"s root directory.
  reject(null)
  CVSS_version2
  CVSS_score9.3
  severityHigh
  CVSS_base_score9.3
  CVSS_impact_subscore10
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-03
  published2008-02-06
  modified_date2008-10-11
  typeCVE
  seq2008-0632
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id54361
  nameJVNDB-2007-003053
  titleGnome Office Gnumeric の plugins/excel/ms-excel-read.c における任意のコードを実行される脆弱性
  summaryGnome Office Gnumeric の plugins/excel/ms-excel-read.c の excel_read_HLINK 関数は、整数符号化エラーが発生するため、任意のコードを実行される脆弱性が存在します。
  cveinfo_nameCVE-2008-0668
  cveinfo_id30781
  nvdinfo_nameCVE-2008-0668
  nvdinfo_id641
  cvssv29.3
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003053.html
  published_date2007-12-24
  registered_date2012-06-26
  last_updated_date2012-06-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id30781
  nameCVE-2008-0664
  statusCandidate
  descriptionThe XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of other blog users via unknown vectors.
  phaseAssigned (20080207)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id641
  nameCVE-2008-0668
  descriptionThe excel_read_HLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing XLS HLINK opcodes, possibly because of an integer signedness error that leads to an integer overflow. NOTE: some of these details are obtained from third party information.
  reject(null)
  CVSS_version2
  CVSS_score9.3
  severityHigh
  CVSS_base_score9.3
  CVSS_impact_subscore10
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-03
  published2008-02-11
  modified_date2011-03-07
  typeCVE
  seq2008-0668
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id65882
  nameJVNDB-2017-002221
  title複数の F-Secure 製品で配布される F-Secure Software Updater における脆弱性
  summary複数の F-Secure 製品で配布される F-Secure Software Updater は、インストールパッケージのダウンロード後にファイルを検証しないため、任意の実行ファイルに置き換えられ、SYSTEM アカウントで実行される脆弱性が存在します。
  cveinfo_nameCVE-2017-6466
  cveinfo_id(null)
  nvdinfo_nameCVE-2017-6466
  nvdinfo_id83363
  cvssv29.3
  cvssv38.1
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002221.html
  published_date2017-03-08
  registered_date2017-04-04
  last_updated_date2017-04-04
  deleted(null)
  created0000-00-00 00:00:00
  modified2017-04-28 16:31:18
  Cveinfo(array)
  id(null)
  name(null)
  status(null)
  description(null)
  phase(null)
  votes(null)
  comments(null)
  deleted(null)
  created(null)
  modified(null)
  Nvdinfo(array)
  id83363
  nameCVE-2017-6466
  descriptionF-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the SYSTEM account. Note that when Software Updater is configured to install updates automatically, it checks if the downloaded file is digitally signed by default, but does not check the author of the signature. When running in manual mode (default), no signature check is performed.
  reject
  CVSS_version2
  CVSS_score9.3
  severityHigh
  CVSS_base_score9.3
  CVSS_impact_subscore10
  CVSS_exploit_subscore8.6
  nvd_xml_version
  CVSS_vector(AV:N/AC:M/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-03-18
  published2017-03-11
  modified_date2017-03-14
  typeCVE
  seq2017-6466
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  3(array)
  Jvninfo(array)
  id858
  nameJVNDB-2016-001631
  titleGoogle Chrome の content/browser/web_contents/web_contents_impl.cc におけるサービス運用妨害 (DoS) の脆弱性
  summaryGoogle Chrome の content/browser/web_contents/web_contents_impl.cc には、解放済みメモリの使用 (Use-after-free) により、サービス運用妨害 (DoS) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。
  cveinfo_nameCVE-2016-1641
  cveinfo_id88147
  nvdinfo_nameCVE-2016-1641
  nvdinfo_id17991
  cvssv29.3
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001631.html
  published_date2016-03-02
  registered_date2016-03-09
  last_updated_date2016-03-09
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id88147
  nameCVE-2016-1328
  statusCandidate
  descriptiongoform/WClientMACList on Cisco EPC3928 devices allows remote attackers to cause a denial of service (device crash) via a long h_sortWireless parameter, related to a "Gateway Client List Denial of Service" issue, aka Bug ID CSCux24948.
  phaseAssigned (20160104)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id17991
  nameCVE-2016-1641
  descriptionUse-after-free vulnerability in content/browser/web_contents/web_contents_impl.cc in Google Chrome before 49.0.2623.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering an image download after a certain data structure is deleted, as demonstrated by a favicon.ico download.
  reject(null)
  CVSS_version2
  CVSS_score9.3
  severityHigh
  CVSS_base_score9.3
  CVSS_impact_subscore10
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-19
  published2016-03-05
  modified_date2016-12-02
  typeCVE
  seq2016-1641
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id1114
  nameJVNDB-2016-001887
  titleApple OS X のグラフィックスドライバサブシステムの Intel ドライバにおける特権付きコンテキスト内で任意のコードを実行される脆弱性
  summaryApple OS X のグラフィックスドライバサブシステムの Intel ドライバには、特権付きコンテキスト内で任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。
  cveinfo_nameCVE-2016-1744
  cveinfo_id88250
  nvdinfo_nameCVE-2016-1744
  nvdinfo_id18092
  cvssv29.3
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001887.html
  published_date2016-03-21
  registered_date2016-03-28
  last_updated_date2016-03-28
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id88250
  nameCVE-2016-1431
  statusCandidate
  descriptionCross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516.
  phaseAssigned (20160104)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id18092
  nameCVE-2016-1744
  descriptionThe Intel driver in the Graphics Drivers subsystem in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app, a different vulnerability than CVE-2016-1743.
  reject(null)
  CVSS_version2
  CVSS_score9.3
  severityHigh
  CVSS_base_score9.3
  CVSS_impact_subscore10
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-19
  published2016-03-23
  modified_date2016-12-02
  typeCVE
  seq2016-1744
  deleted(null)
  created(null)
  modified(null)
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Http Connection	close
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:401/sort:cvssv2/direction:desc
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:401/sort:cvssv2/direction:desc
Remote Port	25303
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	3.23.86.150
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
X Dostranslated Ip	3.23.86.150
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	3.23.86.150
Unique Id	aBqEJ8JhYBjmQLZMjxdeRwAAAYw
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect X Dostranslated Ip	3.23.86.150
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	3.23.86.150
Redirect Unique Id	aBqEJ8JhYBjmQLZMjxdeRwAAAYw
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect X Dostranslated Ip	3.23.86.150
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	3.23.86.150
Redirect Redirect Unique Id	aBqEJ8JhYBjmQLZMjxdeRwAAAYw
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1746568231.2875
Request Time	1746568231

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====