JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2010-003000	HP Data Protector Express および Data Protector Express SSE における権限を取得される脆弱性	HP Data Protector Express および Data Protector Express Single Server Edition (SSE) には、権限を取得される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。	CVE-2010-3007	7.2	http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003000.html	2010-09-08	2012-03-27	View
JVNDB-2007-002035	Comodo Firewall Pro における Microsoft Windows API 機能が呼び出される脆弱性	Comodo Firewall Pro および Comodo Personal Firewall は、NT カーネルの特定の Microsoft Windows API 機能に対してプロセス識別子が同一か適切にテストしないため、Microsoft Windows API 機能が呼び出される、ファイアーウォールルールを回避される、または権限を取得される脆弱性が存在します。	CVE-2007-2729	7.2	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002035.html	2007-05-16	2012-06-26	View
JVNDB-2007-006387	Debian GNU/Linux 上で稼動している sing における任意のファイルを追加される脆弱性	Debian GNU/Linux 上で稼動している Send ICMP Nasty Garbage (sing) には、任意のファイルを追加される、および権限を取得される脆弱性が存在します。	CVE-2007-6211	7.2	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006387.html	2007-12-03	2012-12-20	View
JVNDB-2006-000659	Apple Mac OS X の Mach 例外ポートにおけるカーネルエラー処理の脆弱性	Apple Mac OS X の Mach 例外ポートと呼ばれるカーネルのエラー処理メカニズムにおいて不備が存在し、特定の種類のエラー発生時に権限を持った細工されたプログラムの実行を許してしまう脆弱性が存在します。	CVE-2006-4392	7.2	http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000659.html	2006-09-29	2007-04-01	View
JVNDB-2004-000156	IBM AIX の LVM コマンドにおけるシンボリックリンクの脆弱性	------------	CVE-2004-0545	7.2	http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000156.html	2004-04-22	2007-04-01	View

Page 4062 of 13768, showing 5 records out of 68839 total, starting on record 20306, ending on 20310

<<first <prev 4058 | 4059 | 4060 | 4061 | 4062 | 4063 | 4064 | 4065 | 4066 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page4062
  sortcvssv2
  directiondesc
- pass(empty)
- paging(array)
  Jvninfo(array)
  page4062
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.cvssv2desc
  limit5
  options(array)
  page4062
  order(array)
  Jvninfo.cvssv2desc
  sortcvssv2
  directiondesc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 4.19 MB

Message	Memory use
Component initialization	1.38 MB
Controller action start	1.48 MB
Controller render start	2.30 MB
View render complete	2.80 MB

Timers

Total Request Time: 303 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	6.26
Event: Controller.initialize	0.02
Event: Controller.startup	0.11
Controller action	265.55
Event: Controller.beforeRender	5.54
» Processing toolbar data	5.45
Rendering View	17.43
» Event: View.beforeRender	0.02
» Rendering APP/View/Jvninfos/index.ctp	16.06
» Event: View.afterRender	0.03
» Event: View.beforeLayout	0.03
» Rendering APP/View/Layouts/default.ctp	0.82
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.15
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id37215
  nameJVNDB-2010-003000
  titleHP Data Protector Express および Data Protector Express SSE における権限を取得される脆弱性
  summaryHP Data Protector Express および Data Protector Express Single Server Edition (SSE) には、権限を取得される、またはサービス運用妨害 (DoS) 状態となる脆弱性が存在します。
  cveinfo_nameCVE-2010-3007
  cveinfo_id45587
  nvdinfo_nameCVE-2010-3007
  nvdinfo_id14437
  cvssv27.2
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003000.html
  published_date2010-09-08
  registered_date2012-03-27
  last_updated_date2012-03-27
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id45587
  nameCVE-2010-3003
  statusCandidate
  descriptionCross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.0-11 on Linux allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
  phaseAssigned (20100813)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id14437
  nameCVE-2010-3007
  descriptionUnspecified vulnerability in HP Data Protector Express, and Data Protector Express Single Server Edition (SSE), 3.x before build 56936 and 4.x before build 56906 allows local users to gain privileges or cause a denial of service via unknown vectors.
  reject(null)
  CVSS_version2
  CVSS_score7.2
  severityHigh
  CVSS_base_score7.2
  CVSS_impact_subscore10
  CVSS_exploit_subscore3.9
  nvd_xml_version(null)
  CVSS_vector(AV:L/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-18
  published2010-09-09
  modified_date2010-09-10
  typeCVE
  seq2010-3007
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id53343
  nameJVNDB-2007-002035
  titleComodo Firewall Pro における Microsoft Windows API 機能が呼び出される脆弱性
  summaryComodo Firewall Pro および Comodo Personal Firewall は、NT カーネルの特定の Microsoft Windows API 機能に対してプロセス識別子が同一か適切にテストしないため、Microsoft Windows API 機能が呼び出される、ファイアーウォールルールを回避される、または権限を取得される脆弱性が存在します。
  cveinfo_nameCVE-2007-2729
  cveinfo_id26084
  nvdinfo_nameCVE-2007-2729
  nvdinfo_id54893
  cvssv27.2
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002035.html
  published_date2007-05-16
  registered_date2012-06-26
  last_updated_date2012-06-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id26084
  nameCVE-2007-2727
  statusCandidate
  descriptionThe mcrypt_create_iv function in ext/mcrypt/mcrypt.c in PHP before 4.4.7, 5.2.1, and possibly 5.0.x and other PHP 5 versions, calls php_rand_r with an uninitialized seed variable and therefore always generates the same initialization vector (IV), which might allow context-dependent attackers to decrypt certain data more easily because of the guessable encryption keys.
  phaseAssigned (20070516)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id54893
  nameCVE-2007-2729
  descriptionComodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do not properly test for equivalence of process identifiers for certain Microsoft Windows API functions in the NT kernel 5.0 and greater, which allows local users to call these functions, and bypass firewall rules or gain privileges, via a modified identifier that is one, two, or three greater than the canonical identifier.
  reject(null)
  CVSS_version2
  CVSS_score7.2
  severityHigh
  CVSS_base_score7.2
  CVSS_impact_subscore10
  CVSS_exploit_subscore3.9
  nvd_xml_version(null)
  CVSS_vector(AV:L/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-07
  published2007-05-16
  modified_date2008-11-15
  typeCVE
  seq2007-2729
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id57695
  nameJVNDB-2007-006387
  titleDebian GNU/Linux 上で稼動している sing における任意のファイルを追加される脆弱性
  summaryDebian GNU/Linux 上で稼動している Send ICMP Nasty Garbage (sing) には、任意のファイルを追加される、および権限を取得される脆弱性が存在します。
  cveinfo_nameCVE-2007-6211
  cveinfo_id29566
  nvdinfo_nameCVE-2007-6211
  nvdinfo_id58214
  cvssv27.2
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006387.html
  published_date2007-12-03
  registered_date2012-12-20
  last_updated_date2012-12-20
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id29566
  nameCVE-2007-6209
  statusCandidate
  descriptionUtil/difflog.pl in zsh 4.3.4 allows local users to overwrite arbitrary files via a symlink attack on temporary files.
  phaseAssigned (20071203)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id58214
  nameCVE-2007-6211
  descriptionSend ICMP Nasty Garbage (sing) on Debian GNU/Linux allows local users to append to arbitrary files and gain privileges via the -L (output log file) option. NOTE: this issue is only a vulnerability in limited environments, since sing is not installed setuid, and the administrator would need to override a non-setuid default during installation.
  reject(null)
  CVSS_version2
  CVSS_score7.2
  severityHigh
  CVSS_base_score7.2
  CVSS_impact_subscore10
  CVSS_exploit_subscore3.9
  nvd_xml_version(null)
  CVSS_vector(AV:L/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-07
  published2007-12-03
  modified_date2009-01-20
  typeCVE
  seq2007-6211
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id58463
  nameJVNDB-2006-000659
  titleApple Mac OS X の Mach 例外ポートにおけるカーネルエラー処理の脆弱性
  summaryApple Mac OS X の Mach 例外ポートと呼ばれるカーネルのエラー処理メカニズムにおいて不備が存在し、特定の種類のエラー発生時に権限を持った細工されたプログラムの実行を許してしまう脆弱性が存在します。
  cveinfo_nameCVE-2006-4392
  cveinfo_id20494
  nvdinfo_nameCVE-2006-4392
  nvdinfo_id63030
  cvssv27.2
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000659.html
  published_date2006-09-29
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id20494
  nameCVE-2006-4390
  statusCandidate
  descriptionCFNetwork in Apple Mac OS X 10.4 through 10.4.7 and 10.3.9 allows remote SSL sites to appear as trusted sites by using encryption without authentication, which can cause the lock icon in Safari to be displayed even when the site"s identity cannot be trusted.
  phaseAssigned (20060828)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id63030
  nameCVE-2006-4392
  descriptionThe Mach kernel, as used in operating systems including (1) Mac OS X 10.4 through 10.4.7 and (2) OpenStep before 4.2, allows local users to gain privileges via a parent process that forces an exception in a setuid child and uses Mach exception ports to modify the child"s thread context and task address space in a way that causes the child to call a parent-controlled function.
  reject(null)
  CVSS_version2
  CVSS_score7.2
  severityHigh
  CVSS_base_score7.2
  CVSS_impact_subscore10
  CVSS_exploit_subscore3.9
  nvd_xml_version(null)
  CVSS_vector(AV:L/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2016-12-20
  published2006-10-03
  modified_date2011-03-07
  typeCVE
  seq2006-4392
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id62815
  nameJVNDB-2004-000156
  titleIBM AIX の LVM コマンドにおけるシンボリックリンクの脆弱性
  summary------------
  cveinfo_nameCVE-2004-0545
  cveinfo_id8972
  nvdinfo_nameCVE-2004-0545
  nvdinfo_id70977
  cvssv27.2
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000156.html
  published_date2004-04-22
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id8972
  nameCVE-2004-0544
  statusCandidate
  descriptionMultiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands.
  phaseAssigned (20040608)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id70977
  nameCVE-2004-0545
  descriptionLVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack.
  reject
  CVSS_version2
  CVSS_score7.2
  severityHigh
  CVSS_base_score7.2
  CVSS_impact_subscore10
  CVSS_exploit_subscore3.9
  nvd_xml_version
  CVSS_vector(AV:L/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-07-18
  published2004-08-06
  modified_date2017-07-10
  typeCVE
  seq2004-0545
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:4062/sort:cvssv2/direction:desc
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:4062/sort:cvssv2/direction:desc
Remote Port	19219
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	216.73.216.1
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Connection	close
Http Cache Control	max-age=259200
Http X Forwarded For	10.1.145.128
Http Via	1.1 squid-proxy-5b5d847c96-56z77 (squid/6.13)
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Suspectdos	1
X Dostranslated Ip	216.73.216.1
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	216.73.216.1
Unique Id	aO4I-gPPG8Q6D13ap3-GTAAAAao
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Suspectdos	1
Redirect X Dostranslated Ip	216.73.216.1
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	216.73.216.1
Redirect Unique Id	aO4I-gPPG8Q6D13ap3-GTAAAAao
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect Suspectdos	1
Redirect Redirect X Dostranslated Ip	216.73.216.1
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	216.73.216.1
Redirect Redirect Unique Id	aO4I-gPPG8Q6D13ap3-GTAAAAao
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1760430330.5069
Request Time	1760430330

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====