JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2012-001052	HP Easy Printer Care Software における任意のプログラムをダウンロードされる脆弱性	HP Easy Printer Care Software の HPTicketMgr.dll 内の ActiveX コントロールには、クライアントマシン上に任意のプログラムをダウンロードされる、およびそのプログラムを実行される脆弱性が存在します。	CVE-2011-4787	9.3	http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001052.html	2012-01-11	2012-01-16	View
JVNDB-2011-004700	HP Easy Printer Care Software の特定の ActiveX コントロールにおけるクライアントマシンで任意のプログラムを実行される脆弱性	HP Easy Printer Care Software の HPTicketMgr.dll の特定の ActiveX コントロールには、クライアントマシンに任意のプログラムをダウンロードされる、およびそのプログラムを実行される脆弱性が存在します。	CVE-2011-2404	7.5	http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004700.html	2011-08-08	2012-03-27	View
JVNDB-2009-002508	HP ECMT におけるデータベースにアクセスされる脆弱性	HP-UX 上で稼動する HP Enterprise Cluster Master Toolkit (ECMT) には、Oracle または Sybase データベースにアクセスされる脆弱性が存在します。	CVE-2009-4184	6.2	http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002508.html	2009-10-05	2010-02-24	View
JVNDB-2013-002451	HP ElitePad 900 の BIOS における BIOS 制限を回避される脆弱性	HP ElitePad 900 の BIOS は、セキュアブート機能が有効でないため、BIOS 制限を回避される、および意図しないオペレーティングシステムをブートされる脆弱性が存在します。	CVE-2012-5218	7.2	http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002451.html	2013-04-23	2013-04-25	View
JVNDB-2014-003044	HP Enterprise Maps における任意のファイルを読まれる脆弱性	HP Enterprise Maps には、任意のファイルを読まれる脆弱性が存在します。	CVE-2014-4669	3.5	http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003044.html	2014-06-26	2014-07-01	View

Page 4719 of 13768, showing 5 records out of 68839 total, starting on record 23591, ending on 23595

<<first <prev 4715 | 4716 | 4717 | 4718 | 4719 | 4720 | 4721 | 4722 | 4723 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page4719
  sorttitle
  directionasc
- pass(empty)
- paging(array)
  Jvninfo(array)
  page4719
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.titleasc
  limit5
  options(array)
  page4719
  order(array)
  Jvninfo.titleasc
  sorttitle
  directionasc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 4.02 MB

Message	Memory use
Component initialization	1.39 MB
Controller action start	1.49 MB
Controller render start	2.29 MB
View render complete	2.79 MB

Timers

Total Request Time: 358 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	2.76
Event: Controller.initialize	0.02
Event: Controller.startup	0.06
Controller action	337.88
Event: Controller.beforeRender	5.45
» Processing toolbar data	5.36
Rendering View	6.50
» Event: View.beforeRender	0.03
» Rendering APP/View/Jvninfos/index.ctp	5.55
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.53
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.08
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id25345
  nameJVNDB-2012-001052
  titleHP Easy Printer Care Software における任意のプログラムをダウンロードされる脆弱性
  summaryHP Easy Printer Care Software の HPTicketMgr.dll 内の ActiveX コントロールには、クライアントマシン上に任意のプログラムをダウンロードされる、およびそのプログラムを実行される脆弱性が存在します。
  cveinfo_nameCVE-2011-4787
  cveinfo_id52694
  nvdinfo_nameCVE-2011-4787
  nvdinfo_id11134
  cvssv29.3
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001052.html
  published_date2012-01-11
  registered_date2012-01-16
  last_updated_date2012-01-16
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id52694
  nameCVE-2011-4782
  statusCandidate
  descriptionCross-site scripting (XSS) vulnerability in libraries/config/ConfigFile.class.php in the setup interface in phpMyAdmin 3.4.x before 3.4.9 allows remote attackers to inject arbitrary web script or HTML via the host parameter.
  phaseAssigned (20111213)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id11134
  nameCVE-2011-4787
  descriptionA certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4786.
  reject(null)
  CVSS_version2
  CVSS_score9.3
  severityHigh
  CVSS_base_score9.3
  CVSS_impact_subscore10
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-07
  published2012-01-12
  modified_date2012-02-09
  typeCVE
  seq2011-4787
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id34458
  nameJVNDB-2011-004700
  titleHP Easy Printer Care Software の特定の ActiveX コントロールにおけるクライアントマシンで任意のプログラムを実行される脆弱性
  summaryHP Easy Printer Care Software の HPTicketMgr.dll の特定の ActiveX コントロールには、クライアントマシンに任意のプログラムをダウンロードされる、およびそのプログラムを実行される脆弱性が存在します。
  cveinfo_nameCVE-2011-2404
  cveinfo_id50311
  nvdinfo_nameCVE-2011-2404
  nvdinfo_id9188
  cvssv27.5
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004700.html
  published_date2011-08-08
  registered_date2012-03-27
  last_updated_date2012-03-27
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id50311
  nameCVE-2011-2399
  statusCandidate
  descriptionUnspecified vulnerability in the Media Management Daemon (mmd) in HP Data Protector 6.11 and earlier allows remote attackers to cause a denial of service via unknown vectors.
  phaseAssigned (20110606)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id9188
  nameCVE-2011-2404
  descriptionA certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-4786 and CVE-2011-4787.
  reject(null)
  CVSS_version2
  CVSS_score7.5
  severityHigh
  CVSS_base_score7.5
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2017-01-07
  published2011-08-11
  modified_date2012-01-13
  typeCVE
  seq2011-2404
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id41501
  nameJVNDB-2009-002508
  titleHP ECMT におけるデータベースにアクセスされる脆弱性
  summaryHP-UX 上で稼動する HP Enterprise Cluster Master Toolkit (ECMT) には、Oracle または Sybase データベースにアクセスされる脆弱性が存在します。
  cveinfo_nameCVE-2009-4184
  cveinfo_id41615
  nvdinfo_nameCVE-2009-4184
  nvdinfo_id51330
  cvssv26.2
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002508.html
  published_date2009-10-05
  registered_date2010-02-24
  last_updated_date2010-02-24
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id41615
  nameCVE-2009-4180
  statusCandidate
  descriptionStack-based buffer overflow in snmpviewer.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via a long HTTP Host header.
  phaseAssigned (20091203)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id51330
  nameCVE-2009-4184
  descriptionUnspecified vulnerability in HP Enterprise Cluster Master Toolkit (ECMT) B.05.00 on HP-UX B.11.23 (11i v2) and HP-UX B.11.31 (11i v3) allows local users to gain access to an Oracle or Sybase database via unknown vectors.
  reject(null)
  CVSS_version2
  CVSS_score6.2
  severityMedium
  CVSS_base_score6.2
  CVSS_impact_subscore9.2
  CVSS_exploit_subscore3.1
  nvd_xml_version(null)
  CVSS_vector(AV:L/AC:L/Au:S/C:C/I:C/A:N)
  sourcecve
  pub_date2017-01-07
  published2010-02-03
  modified_date2011-07-18
  typeCVE
  seq2009-4184
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id20876
  nameJVNDB-2013-002451
  titleHP ElitePad 900 の BIOS における BIOS 制限を回避される脆弱性
  summaryHP ElitePad 900 の BIOS は、セキュアブート機能が有効でないため、BIOS 制限を回避される、および意図しないオペレーティングシステムをブートされる脆弱性が存在します。
  cveinfo_nameCVE-2012-5218
  cveinfo_id58456
  nvdinfo_nameCVE-2012-5218
  nvdinfo_id46424
  cvssv27.2
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-002451.html
  published_date2013-04-23
  registered_date2013-04-25
  last_updated_date2013-04-25
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id58456
  nameCVE-2012-5213
  statusCandidate
  descriptionUnspecified vulnerability in HP Intelligent Management Center (iMC) and Intelligent Management Center for Automated Network Manager (ANM) before 5.2 E0401 allows remote attackers to obtain sensitive information via unknown vectors, aka ZDI-CAN-1662.
  phaseAssigned (20121001)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id46424
  nameCVE-2012-5218
  descriptionHP ElitePad 900 PCs with BIOS F.0x before F.01 Update 1.0.0.8 do not enable the Secure Boot feature, which allows local users to bypass intended BIOS restrictions and boot unintended operating systems via unspecified vectors.
  reject(null)
  CVSS_version2
  CVSS_score7.2
  severityHigh
  CVSS_base_score7.2
  CVSS_impact_subscore10
  CVSS_exploit_subscore3.9
  nvd_xml_version(null)
  CVSS_vector(AV:L/AC:L/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-19
  published2013-04-24
  modified_date2013-04-24
  typeCVE
  seq2012-5218
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id14169
  nameJVNDB-2014-003044
  titleHP Enterprise Maps における任意のファイルを読まれる脆弱性
  summaryHP Enterprise Maps には、任意のファイルを読まれる脆弱性が存在します。
  cveinfo_nameCVE-2014-4669
  cveinfo_id71958
  nvdinfo_nameCVE-2014-4669
  nvdinfo_id32618
  cvssv23.5
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003044.html
  published_date2014-06-26
  registered_date2014-07-01
  last_updated_date2014-07-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id71958
  nameCVE-2014-4661
  statusCandidate
  descriptionCross-site scripting (XSS) vulnerability in HP Records Manager before 7.3.5 and 8.x before 8.1 Patch 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
  phaseAssigned (20140625)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id32618
  nameCVE-2014-4669
  descriptionHP Enterprise Maps 1.00 allows remote authenticated users to read arbitrary files via a WSDL document containing an XML external entity declaration in conjunction with an entity reference within a GetQuote operation, related to an XML External Entity (XXE) issue.
  reject(null)
  CVSS_version2
  CVSS_score3.5
  severityLow
  CVSS_base_score3.5
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore6.8
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:S/C:P/I:N/A:N)
  sourcecve
  pub_date2017-01-19
  published2014-06-28
  modified_date2015-12-18
  typeCVE
  seq2014-4669
  deleted(null)
  created(null)
  modified(null)
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:4719/sort:title/direction:asc
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:4719/sort:title/direction:asc
Remote Port	36124
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	216.73.216.223
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Connection	close
Http Cache Control	max-age=259200
Http X Forwarded For	10.1.148.26
Http Via	1.1 squid-proxy-5b5d847c96-7f7gz (squid/6.13)
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Suspectharddos	1
Suspectdos	1
X Dostranslated Ip	216.73.216.223
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	216.73.216.223
Unique Id	aONELIHkD3PEnWl754967wAAAmY
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Suspectharddos	1
Redirect Suspectdos	1
Redirect X Dostranslated Ip	216.73.216.223
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	216.73.216.223
Redirect Unique Id	aONELIHkD3PEnWl754967wAAAmY
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect Suspectharddos	1
Redirect Redirect Suspectdos	1
Redirect Redirect X Dostranslated Ip	216.73.216.223
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	216.73.216.223
Redirect Redirect Unique Id	aONELIHkD3PEnWl754967wAAAmY
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1759724588.3719
Request Time	1759724588

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====