JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2006-003715	427BB における認証を回避される脆弱性	427BB には、認証を回避される脆弱性が存在します。	CVE-2006-0153	7.5	http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003715.html	2006-01-10	2013-12-26	View
JVNDB-2006-003823	phpChamber におけるクロスサイトスクリプティングの脆弱性	phpChamber には、クロスサイトスクリプティングの脆弱性が存在します。	CVE-2006-0152	4.3	http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003823.html	2006-01-10	2014-03-11	View
JVNDB-2006-000012	Microsoft 製品における不正な TNEF メッセージにより任意のコードを実行される脆弱性	Microsoft Outlook および Microsoft Exchange Server には、Transport Neutral Encapsulation (TNEF) 形式の電子メールメッセージのデコード処理において不備があり、不正な TNEF メッセージを Microsoft Outlook で開く、あるいはプレビュー表示する、または Microsoft Exchange Server Information Store サービスにメッセージを処理させた場合に、任意のコードを実行される脆弱性が存在します。	CVE-2006-0002	7.5	http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000012.html	2006-01-10	2007-04-01	View
JVNDB-2006-000013	Microsoft Windows の T2EMBED.DLL におけるヒープオーバーフローの脆弱性	Microsoft Windows に含まれる T2EMBED.DLL には、圧縮された Web フォントファイルのデータに関して、メモリ割り当て処理を行う MTX_LZCOMP_UnPackMemory 関数において、取り扱うデータの妥当性の確認が不適切であるため、ヒープオーバーフローが発生する脆弱性が存在します。	CVE-2006-0010	7.5	http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000013.html	2006-01-10	2007-04-01	View
JVNDB-2006-003716	MyPhPim の addresses.php3 における任意の PHP コードを実行される脆弱性	MyPhPim の addresses.php3 には、任意の PHP コードを実行される脆弱性が存在します。	CVE-2006-0169	7.5	http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003716.html	2006-01-11	2013-12-26	View

Page 530 of 13768, showing 5 records out of 68839 total, starting on record 2646, ending on 2650

<<first <prev 526 | 527 | 528 | 529 | 530 | 531 | 532 | 533 | 534 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page530
  sortpublished_date
  directionasc
- pass(empty)
- paging(array)
  Jvninfo(array)
  page530
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.published_dateasc
  limit5
  options(array)
  page530
  order(array)
  Jvninfo.published_dateasc
  sortpublished_date
  directionasc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 3.86 MB

Message	Memory use
Component initialization	1.39 MB
Controller action start	1.49 MB
Controller render start	2.26 MB
View render complete	2.76 MB

Timers

Total Request Time: 89 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	4.33
Event: Controller.initialize	0.02
Event: Controller.startup	0.09
Controller action	66.87
Event: Controller.beforeRender	4.31
» Processing toolbar data	4.23
Rendering View	7.38
» Event: View.beforeRender	0.03
» Rendering APP/View/Jvninfos/index.ctp	6.07
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.03
» Rendering APP/View/Layouts/default.ctp	0.81
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.15
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id61449
  nameJVNDB-2006-003715
  title427BB における認証を回避される脆弱性
  summary427BB には、認証を回避される脆弱性が存在します。
  cveinfo_nameCVE-2006-0153
  cveinfo_id16255
  nvdinfo_nameCVE-2006-0153
  nvdinfo_id58893
  cvssv27.5
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003715.html
  published_date2006-01-10
  registered_date2013-12-26
  last_updated_date2013-12-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id16255
  nameCVE-2006-0151
  statusCandidate
  descriptionsudo 1.6.8 and other versions does not clear the PYTHONINSPECT environment variable, which allows limited local users to gain privileges via a Python script, a variant of CVE-2005-4158.
  phaseAssigned (20060109)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id58893
  nameCVE-2006-0153
  description427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote attackers to bypass authentication by using a valid username and usertype and setting the authenticated cookie.
  reject(null)
  CVSS_version2
  CVSS_score7.5
  severityHigh
  CVSS_base_score7.5
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2016-12-20
  published2006-01-10
  modified_date2011-03-07
  typeCVE
  seq2006-0153
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id61557
  nameJVNDB-2006-003823
  titlephpChamber におけるクロスサイトスクリプティングの脆弱性
  summaryphpChamber には、クロスサイトスクリプティングの脆弱性が存在します。
  cveinfo_nameCVE-2006-0152
  cveinfo_id16254
  nvdinfo_nameCVE-2006-0152
  nvdinfo_id58892
  cvssv24.3
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003823.html
  published_date2006-01-10
  registered_date2014-03-11
  last_updated_date2014-03-11
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id16254
  nameCVE-2006-0150
  statusCandidate
  descriptionMultiple format string vulnerabilities in the auth_ldap_log_reason function in Apache auth_ldap 1.6.0 and earlier allows remote attackers to execute arbitrary code via various vectors, including the username.
  phaseAssigned (20060109)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id58892
  nameCVE-2006-0152
  descriptionCross-site scripting (XSS) in search_result.php in phpChamber 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
  reject(null)
  CVSS_version2
  CVSS_score4.3
  severityMedium
  CVSS_base_score4.3
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:N/I:P/A:N)
  sourcecve
  pub_date2016-12-20
  published2006-01-10
  modified_date2011-03-07
  typeCVE
  seq2006-0152
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id57816
  nameJVNDB-2006-000012
  titleMicrosoft 製品における不正な TNEF メッセージにより任意のコードを実行される脆弱性
  summaryMicrosoft Outlook および Microsoft Exchange Server には、Transport Neutral Encapsulation (TNEF) 形式の電子メールメッセージのデコード処理において不備があり、不正な TNEF メッセージを Microsoft Outlook で開く、あるいはプレビュー表示する、または Microsoft Exchange Server Information Store サービスにメッセージを処理させた場合に、任意のコードを実行される脆弱性が存在します。
  cveinfo_nameCVE-2006-0002
  cveinfo_id16104
  nvdinfo_nameCVE-2006-0002
  nvdinfo_id58749
  cvssv27.5
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000012.html
  published_date2006-01-10
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id16104
  nameCVE-2005-4900
  statusCandidate
  descriptionSHA-1 is not collision resistant, which makes it easier for context-dependent attackers to conduct spoofing attacks, as demonstrated by attacks on the use of SHA-1 in TLS 1.2. NOTE: this CVE exists to provide a common identifier for referencing this SHA-1 issue; the existence of an identifier is not, by itself, a technology recommendation.
  phaseAssigned (20161014)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id58749
  nameCVE-2006-0002
  descriptionUnspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.
  reject
  CVSS_version2
  CVSS_score7.5
  severityHigh
  CVSS_base_score7.5
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore10
  nvd_xml_version
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2017-07-18
  published2006-01-10
  modified_date2017-07-10
  typeCVE
  seq2006-0002
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  3(array)
  Jvninfo(array)
  id57817
  nameJVNDB-2006-000013
  titleMicrosoft Windows の T2EMBED.DLL におけるヒープオーバーフローの脆弱性
  summaryMicrosoft Windows に含まれる T2EMBED.DLL には、圧縮された Web フォントファイルのデータに関して、メモリ割り当て処理を行う MTX_LZCOMP_UnPackMemory 関数において、取り扱うデータの妥当性の確認が不適切であるため、ヒープオーバーフローが発生する脆弱性が存在します。
  cveinfo_nameCVE-2006-0010
  cveinfo_id16112
  nvdinfo_nameCVE-2006-0010
  nvdinfo_id58757
  cvssv27.5
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000013.html
  published_date2006-01-10
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id16112
  nameCVE-2006-0008
  statusCandidate
  descriptionThe ShellAbout API call in Korean Input Method Editor (IME) in Korean versions of Microsoft Windows XP SP1 and SP2, Windows Server 2003 up to SP1, and Office 2003, allows local users to gain privileges by launching the "shell about dialog box" and clicking the "End-User License Agreement" link, which executes Notepad with the privileges of the program that displays the about box.
  phaseAssigned (20051109)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id58757
  nameCVE-2006-0010
  descriptionHeap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server 2003 up to SP1, Windows 98, and Windows ME allows remote attackers to execute arbitrary code via an e-mail message or web page with a crafted Embedded Open Type (EOT) web font that triggers the overflow during decompression.
  reject
  CVSS_version2
  CVSS_score9.3
  severityHigh
  CVSS_base_score9.3
  CVSS_impact_subscore10
  CVSS_exploit_subscore8.6
  nvd_xml_version
  CVSS_vector(AV:N/AC:M/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-07-18
  published2006-01-10
  modified_date2017-07-10
  typeCVE
  seq2006-0010
  deleted0000-00-00 00:00:00
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  4(array)
  Jvninfo(array)
  id61450
  nameJVNDB-2006-003716
  titleMyPhPim の addresses.php3 における任意の PHP コードを実行される脆弱性
  summaryMyPhPim の addresses.php3 には、任意の PHP コードを実行される脆弱性が存在します。
  cveinfo_nameCVE-2006-0169
  cveinfo_id16271
  nvdinfo_nameCVE-2006-0169
  nvdinfo_id58909
  cvssv27.5
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003716.html
  published_date2006-01-11
  registered_date2013-12-26
  last_updated_date2013-12-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id16271
  nameCVE-2006-0167
  statusCandidate
  descriptionSQL injection vulnerability in MyPhPim 01.05 allows remote attackers to execute arbitrary SQL commands via the (1) cal_id parameter in calendar.php3 and the (2) password field on the login page.
  phaseAssigned (20060111)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id58909
  nameCVE-2006-0169
  descriptionaddresses.php3 in MyPhPim 01.05 does not restrict uploaded files, which allows remote attackers to execute arbitrary PHP code via the pdbfile variable, then directly accessing those files from the uploads directory.
  reject(null)
  CVSS_version2
  CVSS_score7.5
  severityHigh
  CVSS_base_score7.5
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2016-12-20
  published2006-01-11
  modified_date2011-03-07
  typeCVE
  seq2006-0169
  deleted(null)
  created(null)
  modified(null)
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Http Connection	close
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:530/sort:published_date/direction:asc
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:530/sort:published_date/direction:asc
Remote Port	55408
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	18.117.85.73
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http Cookie	advanced-frontend=00c49cpmpprq8am6ojlqomvlk4
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Suspectdos	1
X Dostranslated Ip	18.117.85.73
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	18.117.85.73
Unique Id	aCVvGfRoHmsg9-KesvVEmQAAAJ8
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Suspectdos	1
Redirect X Dostranslated Ip	18.117.85.73
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	18.117.85.73
Redirect Unique Id	aCVvGfRoHmsg9-KesvVEmQAAAJ8
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect Suspectdos	1
Redirect Redirect X Dostranslated Ip	18.117.85.73
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	18.117.85.73
Redirect Redirect Unique Id	aCVvGfRoHmsg9-KesvVEmQAAAJ8
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1747283737.1848
Request Time	1747283737

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====