JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2015-007128	Linux Kernel の fs_pin の実装におけるサービス運用妨害 (DoS) の脆弱性	Linux Kernel の fs_pin の実装は、特定のリストのデータ構造の内部整合性 (internal consistency) を確認しないため、サービス運用妨害 (システムクラッシュ) 状態にされる脆弱性が存在します。	CVE-2015-4178	4.9	http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007128.html	2015-06-06	2016-05-11	View
JVNDB-2011-005090	Moodle のカレンダー設定ページにおけるオープンリダイレクトの脆弱性	Moodle のカレンダー設定ページには、オープンリダイレクトの脆弱性が存在します。	CVE-2011-4582	4.9	http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005090.html	2011-12-06	2012-07-23	View
JVNDB-2008-001166	Sun Solaris の ipsecah カーネルモジュールにおけるサービス運用妨害 (DoS) の脆弱性	Sun Solaris には、IPsec Secrurity Associations の鍵管理デーモンが動作している場合、ipsecah カーネルモジュールにおいて、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。	CVE-2008-1205	4.9	http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001166.html	2008-02-28	2008-03-24	View
JVNDB-2007-000407	Sun Solaris 10 の inetd デーモンにおけるサービス運用妨害 (DoS) の脆弱性	Sun Solaris 10 の inetd デーモンにおいて、/var/run/.inetd.uds ソケットファイルの処理に不備があり、inetd デーモンがサービス運用妨害 (DoS) 状態となる脆弱性が存在します。	CVE-2007-2990	4.9	http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000407.html	2007-05-29	2007-06-07	View
JVNDB-2005-000698	Linux Kernel の set_mempolicy システムコールにおけるサービス運用妨害 (DoS) の脆弱性	------------	CVE-2005-3358	4.9	http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000698.html	2005-11-23	2007-04-01	View

Page 4839 of 13768, showing 5 records out of 68839 total, starting on record 24191, ending on 24195

<<first <prev 4835 | 4836 | 4837 | 4838 | 4839 | 4840 | 4841 | 4842 | 4843 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page4839
  sortcvssv2
  directionasc
- pass(empty)
- paging(array)
  Jvninfo(array)
  page4839
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.cvssv2asc
  limit5
  options(array)
  page4839
  order(array)
  Jvninfo.cvssv2asc
  sortcvssv2
  directionasc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 3.98 MB

Message	Memory use
Component initialization	1.39 MB
Controller action start	1.49 MB
Controller render start	2.27 MB
View render complete	2.77 MB

Timers

Total Request Time: 302 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	3.28
Event: Controller.initialize	0.02
Event: Controller.startup	0.06
Controller action	281.23
Event: Controller.beforeRender	5.06
» Processing toolbar data	4.98
Rendering View	7.46
» Event: View.beforeRender	0.03
» Rendering APP/View/Jvninfos/index.ctp	6.55
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.49
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.09
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id11808
  nameJVNDB-2015-007128
  titleLinux Kernel の fs_pin の実装におけるサービス運用妨害 (DoS) の脆弱性
  summaryLinux Kernel の fs_pin の実装は、特定のリストのデータ構造の内部整合性 (internal consistency) を確認しないため、サービス運用妨害 (システムクラッシュ) 状態にされる脆弱性が存在します。
  cveinfo_nameCVE-2015-4178
  cveinfo_id81403
  nvdinfo_nameCVE-2015-4178
  nvdinfo_id25659
  cvssv24.9
  cvssv35.5
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-007128.html
  published_date2015-06-06
  registered_date2016-05-11
  last_updated_date2016-05-11
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id81403
  nameCVE-2015-4126
  statusCandidate
  description** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
  phaseAssigned (20150528)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id25659
  nameCVE-2015-4178
  descriptionThe fs_pin implementation in the Linux kernel before 4.0.5 does not ensure the internal consistency of a certain list data structure, which allows local users to cause a denial of service (system crash) by leveraging user-namespace root access for an MNT_DETACH umount2 system call, related to fs/fs_pin.c and include/linux/fs_pin.h.
  reject(null)
  CVSS_version2
  CVSS_score4.9
  severityMedium
  CVSS_base_score4.9
  CVSS_impact_subscore6.9
  CVSS_exploit_subscore3.9
  nvd_xml_version(null)
  CVSS_vector(AV:L/AC:L/Au:N/C:N/I:N/A:C)
  sourcecve
  pub_date2017-01-19
  published2016-05-02
  modified_date2016-05-06
  typeCVE
  seq2015-4178
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id34848
  nameJVNDB-2011-005090
  titleMoodle のカレンダー設定ページにおけるオープンリダイレクトの脆弱性
  summaryMoodle のカレンダー設定ページには、オープンリダイレクトの脆弱性が存在します。
  cveinfo_nameCVE-2011-4582
  cveinfo_id52489
  nvdinfo_nameCVE-2011-4582
  nvdinfo_id10970
  cvssv24.9
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005090.html
  published_date2011-12-06
  registered_date2012-07-23
  last_updated_date2012-07-23
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id52489
  nameCVE-2011-4577
  statusCandidate
  descriptionOpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate containing certificate-extension data associated with (1) IP address blocks or (2) Autonomous System (AS) identifiers.
  phaseAssigned (20111129)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id10970
  nameCVE-2011-4582
  descriptionOpen redirect vulnerability in the Calendar set page in Moodle 2.1.x before 2.1.3 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via a redirection URL.
  reject(null)
  CVSS_version2
  CVSS_score4.9
  severityMedium
  CVSS_base_score4.9
  CVSS_impact_subscore4.9
  CVSS_exploit_subscore6.8
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:S/C:P/I:P/A:N)
  sourcecve
  pub_date2017-01-07
  published2012-07-20
  modified_date2012-07-23
  typeCVE
  seq2011-4582
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id45856
  nameJVNDB-2008-001166
  titleSun Solaris の ipsecah カーネルモジュールにおけるサービス運用妨害 (DoS) の脆弱性
  summarySun Solaris には、IPsec Secrurity Associations の鍵管理デーモンが動作している場合、ipsecah カーネルモジュールにおいて、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。
  cveinfo_nameCVE-2008-1205
  cveinfo_id31318
  nvdinfo_nameCVE-2008-1205
  nvdinfo_id1165
  cvssv24.9
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001166.html
  published_date2008-02-28
  registered_date2008-03-24
  last_updated_date2008-03-24
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id31318
  nameCVE-2008-1201
  statusCandidate
  descriptionMultiple unspecified vulnerabilities in FLA file parsing in Adobe Flash CS3 Professional, Flash Professional 8, and Flash Basic 8 on Windows allow user-assisted remote attackers to execute arbitrary code via a crafted .FLA file.
  phaseAssigned (20080307)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id1165
  nameCVE-2008-1205
  descriptionUnspecified vulnerability in the ipsecah kernel module in Sun Solaris 10, when a key management daemon for IPsec security associations is running, allows local users to cause a denial of service (panic) via unspecified vectors.
  reject(null)
  CVSS_version2
  CVSS_score4.9
  severityMedium
  CVSS_base_score4.9
  CVSS_impact_subscore6.9
  CVSS_exploit_subscore3.9
  nvd_xml_version(null)
  CVSS_vector(AV:L/AC:L/Au:N/C:N/I:N/A:C)
  sourcecve
  pub_date2017-01-03
  published2008-03-07
  modified_date2011-03-07
  typeCVE
  seq2008-1205
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id51744
  nameJVNDB-2007-000407
  titleSun Solaris 10 の inetd デーモンにおけるサービス運用妨害 (DoS) の脆弱性
  summarySun Solaris 10 の inetd デーモンにおいて、/var/run/.inetd.uds ソケットファイルの処理に不備があり、inetd デーモンがサービス運用妨害 (DoS) 状態となる脆弱性が存在します。
  cveinfo_nameCVE-2007-2990
  cveinfo_id26345
  nvdinfo_nameCVE-2007-2990
  nvdinfo_id55149
  cvssv24.9
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000407.html
  published_date2007-05-29
  registered_date2007-06-07
  last_updated_date2007-06-07
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id26345
  nameCVE-2007-2988
  statusCandidate
  descriptionA certain admin script in Inout Meta Search Engine sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to inject arbitrary PHP code, as demonstrated by a request to admin/create_engine.php followed by a request to admin/generate_tabs.php.
  phaseAssigned (20070531)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id55149
  nameCVE-2007-2990
  descriptionUnspecified vulnerability in inetd in Sun Solaris 10 before 20070529 allows local users to cause a denial of service (daemon termination) via unspecified manipulations of the /var/run/.inetd.uds Unix domain socket file.
  reject(null)
  CVSS_version2
  CVSS_score4.9
  severityMedium
  CVSS_base_score4.9
  CVSS_impact_subscore6.9
  CVSS_exploit_subscore3.9
  nvd_xml_version(null)
  CVSS_vector(AV:L/AC:L/Au:N/C:N/I:N/A:C)
  sourcecve
  pub_date2017-01-07
  published2007-06-01
  modified_date2011-03-07
  typeCVE
  seq2007-2990
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id62496
  nameJVNDB-2005-000698
  titleLinux Kernel の set_mempolicy システムコールにおけるサービス運用妨害 (DoS) の脆弱性
  summary------------
  cveinfo_nameCVE-2005-3358
  cveinfo_id14562
  nvdinfo_nameCVE-2005-3358
  nvdinfo_id69020
  cvssv24.9
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000698.html
  published_date2005-11-23
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id14562
  nameCVE-2005-3356
  statusCandidate
  descriptionThe mq_open system call in Linux kernel 2.6.9, in certain situations, can decrement a counter twice ("double decrement") as a result of multiple calls to the mntput function when the dentry_open function call fails, which allows local users to cause a denial of service (panic) via unspecified attack vectors.
  phaseAssigned (20051027)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id69020
  nameCVE-2005-3358
  descriptionLinux kernel before 2.6.15 allows local users to cause a denial of service (panic) via a set_mempolicy call with a 0 bitmask, which causes a panic when a page fault occurs.
  reject(null)
  CVSS_version2
  CVSS_score4.9
  severityMedium
  CVSS_base_score4.9
  CVSS_impact_subscore6.9
  CVSS_exploit_subscore3.9
  nvd_xml_version(null)
  CVSS_vector(AV:L/AC:L/Au:N/C:N/I:N/A:C)
  sourcecve
  pub_date2017-01-03
  published2005-12-14
  modified_date2012-03-19
  typeCVE
  seq2005-3358
  deleted(null)
  created(null)
  modified(null)
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:4839/sort:cvssv2/direction:asc
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:4839/sort:cvssv2/direction:asc
Remote Port	15367
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	216.73.216.1
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Connection	close
Http Cache Control	max-age=259200
Http X Forwarded For	10.1.145.128
Http Via	1.1 squid-proxy-5b5d847c96-56z77 (squid/6.13)
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
X Dostranslated Ip	216.73.216.1
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	216.73.216.1
Unique Id	aOmLN9NTRdoZeNs7Er4JfgAAAfU
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect X Dostranslated Ip	216.73.216.1
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	216.73.216.1
Redirect Unique Id	aOmLN9NTRdoZeNs7Er4JfgAAAfU
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect X Dostranslated Ip	216.73.216.1
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	216.73.216.1
Redirect Redirect Unique Id	aOmLN9NTRdoZeNs7Er4JfgAAAfU
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1760135991.3184
Request Time	1760135991

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====