JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2006-000069	OpenSSH の scp コマンドにおけるシェルコマンドを挿入される脆弱性	OpenSSH に含まれる scp コマンドには、ローカルホストからローカルホスト、あるいはリモートホストからリモートホストにファイルをコピーする際、ファイル名にメタキャラクタあるいはスペースが含まれているファイルを処理した場合に、system() 関数によるサブシェルが二回呼び出されてしまう脆弱性が存在します。	CVE-2006-0225	4.6	http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000069.html	2006-01-24	2009-07-01	View
JVNDB-2006-003721	FreeBSD のカーネルにおけるカーネルメモリの一部を読まれる脆弱性	FreeBSD のカーネルには、論理エラーにより、カーネルメモリの一部を読まれる脆弱性が存在します。	CVE-2006-0380	2.1	http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003721.html	2006-01-25	2013-12-26	View
JVNDB-2006-003722	FreeBSD および OpenBSD の IP フラグメントキャッシュ機能におけるサービス運用妨害 (DoS) の脆弱性	FreeBSD および OpenBSD の IP フラグメントキャッシュ機能には、論理エラーにより、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。	CVE-2006-0381	5	http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003722.html	2006-01-25	2013-12-26	View
JVNDB-2006-000070	Oracle PL/SQL におけるアクセス制限回避の脆弱性 (PLSQL01)	Oracle 製品の mod_plsql (ModPL/SQL for Apache) には、特定の文字を含むパッケージ名がリクエストされた場合に、排除リストとのマッチングによるブロックが回避され、本来アクセスが許可されていないパッケージやプロシージャにアクセスされてしまう脆弱性 (PLSQL01) が存在します。	CVE-2006-0435	7.5	http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000070.html	2006-01-25	2007-04-01	View
JVNDB-2006-000071	Cisco IOS の TCL shell における任意のコマンドを実行される脆弱性	------------	CVE-2006-0485	4.6	http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000071.html	2006-01-25	2007-04-01	View

Page 548 of 13768, showing 5 records out of 68839 total, starting on record 2736, ending on 2740

<<first <prev 544 | 545 | 546 | 547 | 548 | 549 | 550 | 551 | 552 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page548
  sortpublished_date
  directionasc
- pass(empty)
- paging(array)
  Jvninfo(array)
  page548
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.published_dateasc
  limit5
  options(array)
  page548
  order(array)
  Jvninfo.published_dateasc
  sortpublished_date
  directionasc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 3.98 MB

Message	Memory use
Component initialization	1.38 MB
Controller action start	1.49 MB
Controller render start	2.27 MB
View render complete	2.77 MB

Timers

Total Request Time: 81 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	3.71
Event: Controller.initialize	0.02
Event: Controller.startup	0.07
Controller action	60.09
Event: Controller.beforeRender	4.28
» Processing toolbar data	4.20
Rendering View	6.74
» Event: View.beforeRender	0.03
» Rendering APP/View/Jvninfos/index.ctp	5.82
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.51
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.09
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id57873
  nameJVNDB-2006-000069
  titleOpenSSH の scp コマンドにおけるシェルコマンドを挿入される脆弱性
  summaryOpenSSH に含まれる scp コマンドには、ローカルホストからローカルホスト、あるいはリモートホストからリモートホストにファイルをコピーする際、ファイル名にメタキャラクタあるいはスペースが含まれているファイルを処理した場合に、system() 関数によるサブシェルが二回呼び出されてしまう脆弱性が存在します。
  cveinfo_nameCVE-2006-0225
  cveinfo_id16327
  nvdinfo_nameCVE-2006-0225
  nvdinfo_id58965
  cvssv24.6
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000069.html
  published_date2006-01-24
  registered_date2007-04-01
  last_updated_date2009-07-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id16327
  nameCVE-2006-0223
  statusCandidate
  descriptionDirectory traversal vulnerability in Shanghai TopCMM 123 Flash Chat Server Software 5.1 allows attackers to create or overwrite arbitrary files on the server via ".." (dot dot) sequences in the username field.
  phaseAssigned (20060116)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id58965
  nameCVE-2006-0225
  descriptionscp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metacharacters or spaces, which are expanded twice.
  reject(null)
  CVSS_version2
  CVSS_score4.6
  severityMedium
  CVSS_base_score4.6
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore3.9
  nvd_xml_version(null)
  CVSS_vector(AV:L/AC:L/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2016-12-20
  published2006-01-25
  modified_date2016-11-18
  typeCVE
  seq2006-0225
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id61455
  nameJVNDB-2006-003721
  titleFreeBSD のカーネルにおけるカーネルメモリの一部を読まれる脆弱性
  summaryFreeBSD のカーネルには、論理エラーにより、カーネルメモリの一部を読まれる脆弱性が存在します。
  cveinfo_nameCVE-2006-0380
  cveinfo_id16482
  nvdinfo_nameCVE-2006-0380
  nvdinfo_id59119
  cvssv22.1
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003721.html
  published_date2006-01-25
  registered_date2013-12-26
  last_updated_date2013-12-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id16482
  nameCVE-2006-0378
  statusCandidate
  descriptionCross-site scripting (XSS) vulnerability in Netrix X-Site Manager allows remote attackers to inject arbitrary web script or HTML via the product_id parameter, as originally demonstrated for a custom mp3players_details.php program. NOTE: the name of the affected program might be installation-dependent, but it has been identified as "product_details.php" by some sources.
  phaseAssigned (20060123)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id59119
  nameCVE-2006-0380
  descriptionA logic error in FreeBSD kernel 5.4-STABLE and 6.0 causes the kernel to calculate an incorrect buffer length, which causes more data to be copied to userland than intended, which could allow local users to read portions of kernel memory.
  reject(null)
  CVSS_version2
  CVSS_score2.1
  severityLow
  CVSS_base_score2.1
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore3.9
  nvd_xml_version(null)
  CVSS_vector(AV:L/AC:L/Au:N/C:P/I:N/A:N)
  sourcecve
  pub_date2016-12-20
  published2006-01-25
  modified_date2008-09-05
  typeCVE
  seq2006-0380
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id61456
  nameJVNDB-2006-003722
  titleFreeBSD および OpenBSD の IP フラグメントキャッシュ機能におけるサービス運用妨害 (DoS) の脆弱性
  summaryFreeBSD および OpenBSD の IP フラグメントキャッシュ機能には、論理エラーにより、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。
  cveinfo_nameCVE-2006-0381
  cveinfo_id16483
  nvdinfo_nameCVE-2006-0381
  nvdinfo_id59120
  cvssv25
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003722.html
  published_date2006-01-25
  registered_date2013-12-26
  last_updated_date2013-12-26
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id16483
  nameCVE-2006-0379
  statusCandidate
  descriptionFreeBSD kernel 5.4-STABLE and 6.0 does not completely initialize a buffer before making it available to userland, which could allow local users to read portions of kernel memory.
  phaseAssigned (20060124)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id59120
  nameCVE-2006-0381
  descriptionA logic error in the IP fragment cache functionality in pf in FreeBSD 5.3, 5.4, and 6.0, and OpenBSD, when a "scrub fragment crop" or "scrub fragment drop-ovl" rule is being used, allows remote attackers to cause a denial of service (crash) via crafted packets that cause a packet fragment to be inserted twice.
  reject(null)
  CVSS_version2
  CVSS_score5
  severityMedium
  CVSS_base_score5
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:N/I:N/A:P)
  sourcecve
  pub_date2016-12-20
  published2006-01-25
  modified_date2008-09-05
  typeCVE
  seq2006-0381
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id57874
  nameJVNDB-2006-000070
  titleOracle PL/SQL におけるアクセス制限回避の脆弱性 (PLSQL01)
  summaryOracle 製品の mod_plsql (ModPL/SQL for Apache) には、特定の文字を含むパッケージ名がリクエストされた場合に、排除リストとのマッチングによるブロックが回避され、本来アクセスが許可されていないパッケージやプロシージャにアクセスされてしまう脆弱性 (PLSQL01) が存在します。
  cveinfo_nameCVE-2006-0435
  cveinfo_id16537
  nvdinfo_nameCVE-2006-0435
  nvdinfo_id59173
  cvssv27.5
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000070.html
  published_date2006-01-25
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id16537
  nameCVE-2006-0433
  statusCandidate
  descriptionSelective Acknowledgement (SACK) in FreeBSD 5.3 and 5.4 does not properly handle an incoming selective acknowledgement when there is insufficient memory, which might allow remote attackers to cause a denial of service (infinite loop).
  phaseAssigned (20060125)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id59173
  nameCVE-2006-0435
  descriptionUnspecified vulnerability in Oracle PL/SQL (PLSQL), as used in Database Server DS 9.2.0.7 and 10.1.0.5, Application Server 1.0.2.2, 9.0.4.2, 10.1.2.0.2, 10.1.2.1.0, and 10.1.3.0.0, E-Business Suite and Applications 11.5.10, and Collaboration Suite 10.1.1, 10.1.2.0, 10.1.2.1, and 9.0.4.2, allows attackers to bypass the PLSQLExclusion list and access excluded packages and procedures, aka Vuln# PLSQL01.
  reject(null)
  CVSS_version2
  CVSS_score7.5
  severityHigh
  CVSS_base_score7.5
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore10
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:L/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2016-12-20
  published2006-01-26
  modified_date2012-10-22
  typeCVE
  seq2006-0435
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id57875
  nameJVNDB-2006-000071
  titleCisco IOS の TCL shell における任意のコマンドを実行される脆弱性
  summary------------
  cveinfo_nameCVE-2006-0485
  cveinfo_id16587
  nvdinfo_nameCVE-2006-0485
  nvdinfo_id59223
  cvssv24.6
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000071.html
  published_date2006-01-25
  registered_date2007-04-01
  last_updated_date2007-04-01
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id16587
  nameCVE-2006-0483
  statusCandidate
  descriptionCisco VPN 3000 series concentrators running software 4.7.0 through 4.7.2.A allow remote attackers to cause a denial of service (device reload or user disconnect) via a crafted HTTP packet.
  phaseAssigned (20060131)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id59223
  nameCVE-2006-0485
  descriptionThe TCL shell in Cisco IOS 12.2(14)S before 12.2(14)S16, 12.2(18)S before 12.2(18)S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting (AAA) command authorization checks, which may allow local users to execute IOS EXEC commands that were prohibited via the AAA configuration, aka Bug ID CSCeh73049.
  reject(null)
  CVSS_version2
  CVSS_score4.6
  severityMedium
  CVSS_base_score4.6
  CVSS_impact_subscore6.4
  CVSS_exploit_subscore3.9
  nvd_xml_version(null)
  CVSS_vector(AV:L/AC:L/Au:N/C:P/I:P/A:P)
  sourcecve
  pub_date2016-12-20
  published2006-01-31
  modified_date2011-03-07
  typeCVE
  seq2006-0485
  deleted(null)
  created(null)
  modified(null)
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Http Connection	close
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:548/sort:published_date/direction:asc
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:548/sort:published_date/direction:asc
Remote Port	32052
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	3.23.92.159
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
X Dostranslated Ip	3.23.92.159
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	3.23.92.159
Unique Id	aCaaa-N9_E6522htg08C0AAAAAY
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect X Dostranslated Ip	3.23.92.159
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	3.23.92.159
Redirect Unique Id	aCaaa-N9_E6522htg08C0AAAAAY
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect X Dostranslated Ip	3.23.92.159
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	3.23.92.159
Redirect Redirect Unique Id	aCaaa-N9_E6522htg08C0AAAAAY
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1747360363.2475
Request Time	1747360363

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====