JVN/CVE Demo: Jvninfos

JVN List

Name	Title	Summary	Cveinfo	Cvssv2	Jvnurl	Published Date	Last Updated Date	Actions
JVNDB-2016-003712	Android One デバイス上で稼動する Android の MediaTek ビデオドライバにおける権限を取得される脆弱性	Android One デバイス上で稼動する Android の MediaTek ビデオドライバには、権限を取得される脆弱性が存在します。	CVE-2016-3799	9.3	http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003712.html	2016-07-06	2016-07-19	View
JVNDB-2016-003713	Android One デバイス上で稼動する Android の MediaTek ビデオドライバにおける権限を取得される脆弱性	Android One デバイス上で稼動する Android の MediaTek ビデオドライバには、権限を取得される脆弱性が存在します。	CVE-2016-3800	9.3	http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003713.html	2016-07-06	2016-07-19	View
JVNDB-2016-003737	複数の Google デバイス上で稼動する Android のネットワークコンポーネントにおける重要な情報を取得される脆弱性	Android One、Nexus 5、5X、6、6P、7 (2013)、9、Player、および Pixel C デバイス上で稼動する Android のネットワークコンポーネントには、重要な情報を取得される脆弱性が存在します。	CVE-2016-3809	4.3	http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003737.html	2016-07-06	2016-07-19	View
JVNDB-2016-000129	Android OS が CRIME 攻撃による影響を受けてしまう問題	Android OS での TLS プロトコルの実装には、平文の HTTP ヘッダを取得されてしまう脆弱性が存在します。	CVE-2012-4929	2.6	http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000129.html	2016-07-22	2016-07-22	View
JVNDB-2013-000111	Android OS において任意の Java のメソッドが実行される脆弱性	Android OS には、任意の Java のメソッドが実行される脆弱性が存在します。	CVE-2013-4710	6.8	http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-000111.html	2013-12-17	2014-03-05	View

Page 813 of 13768, showing 5 records out of 68839 total, starting on record 4061, ending on 4065

<<first <prev 809 | 810 | 811 | 812 | 813 | 814 | 815 | 816 | 817 next> last>>

Actions

List NVD

History
+
Request History
4 previous requests available
====
Session
+
Session
- 0(null)
====
Request
+
Request

Cake Params
- plugin(null)
- controllerjvninfos
- actionindex
- named(array)
  page813
  sortsummary
  directionasc
- pass(empty)
- paging(array)
  Jvninfo(array)
  page813
  current5
  count68839
  prevPage(true)
  nextPage(true)
  pageCount13768
  order(array)
  Jvninfo.summaryasc
  limit5
  options(array)
  page813
  order(array)
  Jvninfo.summaryasc
  sortsummary
  directionasc
  conditions(empty)
  paramTypenamed
Post data

No post data.

Query string

No querystring data.

Cookie

To view Cookies, add CookieComponent to Controller

Current Route
- keys(array)
  0controller
  1action
- options(array)
  defaultRoute(true)
- defaults(array)
  plugin(null)
- template/:controller/:action/*
====
Sql Log
+

Sql Logs

default
No query logs.

====

Timer

+

Memory

Peak Memory Use 4.03 MB

Message	Memory use
Component initialization	1.39 MB
Controller action start	1.49 MB
Controller render start	2.27 MB
View render complete	2.77 MB

Timers

Total Request Time: 171 (ms)

Message	Time in ms	Graph
Core Processing (Derived from $_SERVER["REQUEST_TIME"])	3.29
Event: Controller.initialize	0.02
Event: Controller.startup	0.07
Controller action	150.95
Event: Controller.beforeRender	4.77
» Processing toolbar data	4.67
Rendering View	6.65
» Event: View.beforeRender	0.03
» Rendering APP/View/Jvninfos/index.ctp	5.62
» Event: View.afterRender	0.02
» Event: View.beforeLayout	0.02
» Rendering APP/View/Layouts/default.ctp	0.58
» » Rendering CORE/Cake/View/Elements/sql_dump.ctp	0.11
Event: View.afterLayout	0.00

====

Log
+

Logs

There were no log entries made this request

====
Variables
+
View Variables
- jvninfos(array)
  0(array)
  Jvninfo(array)
  id2939
  nameJVNDB-2016-003712
  titleAndroid One デバイス上で稼動する Android の MediaTek ビデオドライバにおける権限を取得される脆弱性
  summaryAndroid One デバイス上で稼動する Android の MediaTek ビデオドライバには、権限を取得される脆弱性が存在します。
  cveinfo_nameCVE-2016-3799
  cveinfo_id90305
  nvdinfo_nameCVE-2016-3799
  nvdinfo_id19542
  cvssv29.3
  cvssv37.8
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003712.html
  published_date2016-07-06
  registered_date2016-07-19
  last_updated_date2016-07-19
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id90305
  nameCVE-2016-3486
  statusCandidate
  descriptionUnspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: FTS.
  phaseAssigned (20160317)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id19542
  nameCVE-2016-3799
  descriptionThe MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28175025 and MediaTek internal bug ALPS02693738.
  reject(null)
  CVSS_version2
  CVSS_score9.3
  severityHigh
  CVSS_base_score9.3
  CVSS_impact_subscore10
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-19
  published2016-07-10
  modified_date2016-07-12
  typeCVE
  seq2016-3799
  deleted(null)
  created(null)
  modified(null)
  1(array)
  Jvninfo(array)
  id2940
  nameJVNDB-2016-003713
  titleAndroid One デバイス上で稼動する Android の MediaTek ビデオドライバにおける権限を取得される脆弱性
  summaryAndroid One デバイス上で稼動する Android の MediaTek ビデオドライバには、権限を取得される脆弱性が存在します。
  cveinfo_nameCVE-2016-3800
  cveinfo_id90306
  nvdinfo_nameCVE-2016-3800
  nvdinfo_id19543
  cvssv29.3
  cvssv37.8
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003713.html
  published_date2016-07-06
  registered_date2016-07-19
  last_updated_date2016-07-19
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id90306
  nameCVE-2016-3487
  statusCandidate
  descriptionUnspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11.1.1.8, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
  phaseAssigned (20160317)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id19543
  nameCVE-2016-3800
  descriptionThe MediaTek video driver in Android before 2016-07-05 on Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28175027 and MediaTek internal bug ALPS02693739.
  reject(null)
  CVSS_version2
  CVSS_score9.3
  severityHigh
  CVSS_base_score9.3
  CVSS_impact_subscore10
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-19
  published2016-07-10
  modified_date2016-07-12
  typeCVE
  seq2016-3800
  deleted(null)
  created(null)
  modified(null)
  2(array)
  Jvninfo(array)
  id2964
  nameJVNDB-2016-003737
  title複数の Google デバイス上で稼動する Android のネットワークコンポーネントにおける重要な情報を取得される脆弱性
  summaryAndroid One、Nexus 5、5X、6、6P、7 (2013)、9、Player、および Pixel C デバイス上で稼動する Android のネットワークコンポーネントには、重要な情報を取得される脆弱性が存在します。
  cveinfo_nameCVE-2016-3809
  cveinfo_id90315
  nvdinfo_nameCVE-2016-3809
  nvdinfo_id19552
  cvssv24.3
  cvssv35.5
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003737.html
  published_date2016-07-06
  registered_date2016-07-19
  last_updated_date2016-07-19
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id90315
  nameCVE-2016-3496
  statusCandidate
  descriptionUnspecified vulnerability in the Enterprise Manager for Fusion Middleware component in Oracle Enterprise Manager Grid Control 11.1.1.7, and 11.1.1.9 allows remote attackers to affect confidentiality via vectors related to SOA Topology Viewer.
  phaseAssigned (20160317)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id19552
  nameCVE-2016-3809
  descriptionThe networking component in Android before 2016-07-05 on Android One, Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus 9, Nexus Player, and Pixel C devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 27532522.
  reject(null)
  CVSS_version2
  CVSS_score4.3
  severityMedium
  CVSS_base_score4.3
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:P/I:N/A:N)
  sourcecve
  pub_date2017-01-19
  published2016-07-10
  modified_date2016-07-12
  typeCVE
  seq2016-3809
  deleted(null)
  created(null)
  modified(null)
  3(array)
  Jvninfo(array)
  id125
  nameJVNDB-2016-000129
  titleAndroid OS が CRIME 攻撃による影響を受けてしまう問題
  summaryAndroid OS での TLS プロトコルの実装には、平文の HTTP ヘッダを取得されてしまう脆弱性が存在します。
  cveinfo_nameCVE-2012-4929
  cveinfo_id58167
  nvdinfo_nameCVE-2012-4929
  nvdinfo_id46189
  cvssv22.6
  cvssv33.7
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000129.html
  published_date2016-07-22
  registered_date2016-07-22
  last_updated_date2016-07-22
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id58167
  nameCVE-2012-4924
  statusCandidate
  descriptionBuffer overflow in the CxDbgPrint function in the ipswcom.dll ActiveX component 1.0.0.1 for ASUS Net4Switch 1.0.0020 allows remote attackers to execute arbitrary code via a long parameter to the Alert method.
  phaseAssigned (20120915)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id46189
  nameCVE-2012-4929
  descriptionThe TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compressed data without properly obfuscating the length of the unencrypted data, which allows man-in-the-middle attackers to obtain plaintext HTTP headers by observing length differences during a series of guesses in which a string in an HTTP request potentially matches an unknown string in an HTTP header, aka a "CRIME" attack.
  reject(null)
  CVSS_version2
  CVSS_score2.6
  severityLow
  CVSS_base_score2.6
  CVSS_impact_subscore2.9
  CVSS_exploit_subscore4.9
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:H/Au:N/C:P/I:N/A:N)
  sourcecve
  pub_date2017-01-19
  published2012-09-15
  modified_date2016-08-22
  typeCVE
  seq2012-4929
  deleted(null)
  created(null)
  modified(null)
  4(array)
  Jvninfo(array)
  id19413
  nameJVNDB-2013-000111
  titleAndroid OS において任意の Java のメソッドが実行される脆弱性
  summaryAndroid OS には、任意の Java のメソッドが実行される脆弱性が存在します。
  cveinfo_nameCVE-2013-4710
  cveinfo_id64652
  nvdinfo_nameCVE-2013-4710
  nvdinfo_id40258
  cvssv26.8
  cvssv3(null)
  jvnurlhttp://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-000111.html
  published_date2013-12-17
  registered_date2013-12-17
  last_updated_date2014-03-05
  deleted(null)
  created0000-00-00 00:00:00
  modified(null)
  Cveinfo(array)
  id64652
  nameCVE-2013-4705
  statusCandidate
  descriptionCross-site scripting (XSS) vulnerability in Opera before 15.00 allows remote attackers to inject arbitrary web script or HTML by leveraging UTF-8 encoding.
  phaseAssigned (20130626)
  votesNone (candidate not yet proposed)
  comments(null)
  deleted(null)
  created0000-00-00 00:00:00
  modified0000-00-00 00:00:00
  Nvdinfo(array)
  id40258
  nameCVE-2013-4710
  descriptionAndroid 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly implement the WebView class, which allows remote attackers to execute arbitrary methods of Java objects or cause a denial of service (reboot) via a crafted web page, as demonstrated by use of the WebView.addJavascriptInterface method, a related issue to CVE-2012-6636.
  reject(null)
  CVSS_version2
  CVSS_score9.3
  severityHigh
  CVSS_base_score9.3
  CVSS_impact_subscore10
  CVSS_exploit_subscore8.6
  nvd_xml_version(null)
  CVSS_vector(AV:N/AC:M/Au:N/C:C/I:C/A:C)
  sourcecve
  pub_date2017-01-18
  published2014-03-02
  modified_date2014-03-10
  typeCVE
  seq2013-4710
  deleted(null)
  created(null)
  modified(null)
- $request->data(empty)
- $this->validationErrors(array)
  Jvninfo(empty)
  Cveinfo(empty)
  Nvdinfo(empty)
- Loaded Helpers(array)
  0Number
  1SimpleGraph
  2Paginator
  3DebugTimer
  4Toolbar
  5Html
  6Text
  7Form
  8Session
  9HtmlToolbar
====

+

App Constants

No application environment available.

CakePHP Constants

Constant	Value
APP	/virtual/inogo77/public_html/jvn/app/
APP_DIR	app
APPLIBS	/virtual/inogo77/public_html/jvn/app/Lib/
CACHE	/virtual/inogo77/public_html/jvn/app/tmp/cache/
CAKE	/virtual/inogo77/public_html/jvn/lib/Cake/
CAKE_CORE_INCLUDE_PATH	/virtual/inogo77/public_html/jvn/lib
CORE_PATH	/virtual/inogo77/public_html/jvn/lib/
CAKE_VERSION	2.6.0
CSS	/virtual/inogo77/public_html/jvn/app/webroot/css/
CSS_URL	css/
DS	/
FULL_BASE_URL	http://inogo77.s500.xrea.com
IMAGES	/virtual/inogo77/public_html/jvn/app/webroot/img/
IMAGES_URL	img/
JS	/virtual/inogo77/public_html/jvn/app/webroot/js/
JS_URL	js/
LOGS	/virtual/inogo77/public_html/jvn/app/tmp/logs/
ROOT	/virtual/inogo77/public_html/jvn
TESTS	/virtual/inogo77/public_html/jvn/app/Test/
TMP	/virtual/inogo77/public_html/jvn/app/tmp/
VENDORS	/virtual/inogo77/public_html/jvn/vendors/
WEBROOT_DIR	webroot
WWW_ROOT	/virtual/inogo77/public_html/jvn/app/webroot/

PHP Environment

Environment Variable	Value
Php Version	5.6.40
Phprc	php56.ini
Php Fcgi Children	1
Pwd	/virtual/inogo77/public_html/.fast-cgi-bin
Php Fcgi Max Requests	10000
Shlvl	0
Path	/usr/local/bin:/usr/bin:/bin
Script Name	/jvn/app/webroot/index.php
Request Uri	/jvn/jvninfos/index/page:813/sort:summary/direction:asc
Query String
Request Method	GET
Server Protocol	HTTP/1.1
Gateway Interface	CGI/1.1
Redirect Url	/jvn/app/webroot/jvninfos/index/page:813/sort:summary/direction:asc
Remote Port	25043
Script Filename	/virtual/inogo77/public_html/jvn/app/webroot/index.php
Server Admin	[no address given]
Context Document Root	/virtual/inogo77/public_html
Context Prefix
Request Scheme	http
Document Root	/virtual/inogo77/public_html
Remote Addr	216.73.216.157
Server Port	80
Server Addr	160.251.151.205
Server Name	inogo77.s500.xrea.com
Server Software	Apache
Server Signature
Http Connection	close
Http Cache Control	max-age=259200
Http X Forwarded For	10.6.10.142
Http Via	1.1 squid-proxy-5b5d847c96-4rch5 (squid/6.10)
Http Host	inogo77.s500.xrea.com
Http Accept Encoding	gzip, br, zstd, deflate
Http Cookie	advanced-frontend=uofejnqq364uigjtnl5blruoq6
Http User Agent	Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
Http Accept	/
Gem Home	/usr/local/rvm/gems/ruby-2.3.0
X Dostranslated Ip	216.73.216.157
Mm Country Code	US
Mmdb Info	result found
Mmdb Addr	216.73.216.157
Unique Id	aD4tP5KfUJZLoWfpaCZ4XAAAAXA
Redirect Status	200
Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect X Dostranslated Ip	216.73.216.157
Redirect Mm Country Code	US
Redirect Mmdb Info	result found
Redirect Mmdb Addr	216.73.216.157
Redirect Unique Id	aD4tP5KfUJZLoWfpaCZ4XAAAAXA
Redirect Redirect Status	200
Redirect Redirect Gem Home	/usr/local/rvm/gems/ruby-2.3.0
Redirect Redirect X Dostranslated Ip	216.73.216.157
Redirect Redirect Mm Country Code	US
Redirect Redirect Mmdb Info	result found
Redirect Redirect Mmdb Addr	216.73.216.157
Redirect Redirect Unique Id	aD4tP5KfUJZLoWfpaCZ4XAAAAXA
Fcgi Role	RESPONDER
Php Self	/jvn/app/webroot/index.php
Request Time Float	1748905279.5881
Request Time	1748905279

====

Include
+
Included Files

Include Paths
- 0/virtual/inogo77/public_html/jvn/lib
- 2/opt/remi/php56/root/usr/share/pear
- 3/opt/remi/php56/root/usr/share/php
- 4/usr/share/pear
- 5/usr/share/php
- 6-> /virtual/inogo77/public_html/jvn/lib/Cake/
Included Files
- core(array)
  Cache(array)
  0CORE/Cache/Cache.php
  1CORE/Cache/Engine/FileEngine.php
  2CORE/Cache/CacheEngine.php
  Component(array)
  0CORE/Controller/Component/SessionComponent.php
  1CORE/Controller/Component/PaginatorComponent.php
  Config(array)
  0CORE/Config/routes.php
  1CORE/Config/config.php
  Controller(array)
  0CORE/Controller/Controller.php
  1CORE/Controller/ComponentCollection.php
  2CORE/Controller/Component.php
  Datasource(array)
  0CORE/Model/Datasource/CakeSession.php
  1CORE/Model/Datasource/Database/Mysql.php
  2CORE/Model/Datasource/DboSource.php
  3CORE/Model/Datasource/DataSource.php
  Error(array)
  0CORE/Error/exceptions.php
  1CORE/Error/ErrorHandler.php
  I18n(array)
  0CORE/I18n/I18n.php
  1CORE/I18n/L10n.php
  Log(array)
  0CORE/Log/CakeLog.php
  1CORE/Log/LogEngineCollection.php
  2CORE/Log/Engine/FileLog.php
  3CORE/Log/Engine/BaseLog.php
  4CORE/Log/CakeLogInterface.php
  Model(array)
  0CORE/Model/Model.php
  1CORE/Model/BehaviorCollection.php
  2CORE/Model/ConnectionManager.php
  Network(array)
  0CORE/Network/CakeRequest.php
  1CORE/Network/CakeResponse.php
  Other(array)
  0CORE/bootstrap.php
  1CORE/basics.php
  2CORE/Core/App.php
  3CORE/Core/Configure.php
  4CORE/Core/CakePlugin.php
  5CORE/Event/CakeEventListener.php
  6CORE/Event/CakeEvent.php
  7CORE/Event/CakeEventManager.php
  8CORE/Core/Object.php
  Routing(array)
  0CORE/Routing/Dispatcher.php
  1CORE/Routing/Filter/AssetDispatcher.php
  2CORE/Routing/DispatcherFilter.php
  3CORE/Routing/Filter/CacheDispatcher.php
  4CORE/Routing/Router.php
  5CORE/Routing/Route/CakeRoute.php
  6CORE/Routing/Route/PluginShortRoute.php
  Utility(array)
  0CORE/Utility/Hash.php
  1CORE/Utility/Inflector.php
  2CORE/Utility/ObjectCollection.php
  3CORE/Utility/Debugger.php
  4CORE/Utility/String.php
  5CORE/Utility/ClassRegistry.php
  View(array)
  0CORE/View/HelperCollection.php
- app(array)
  Component(array)
  0APP/Controller/Component/CommonComponent.php
  Config(array)
  0APP/Config/core.php
  1APP/Config/bootstrap.php
  2APP/Config/routes.php
  3APP/Config/database.php
  Controller(array)
  0APP/Controller/JvninfosController.php
  1APP/Controller/AppController.php
  Model(array)
  0APP/Model/Jvninfo.php
  1APP/Model/AppModel.php
  2APP/Model/Cveinfo.php
  3APP/Model/Nvdinfo.php
  Other(array)
  0APP/webroot/index.php
- plugins(array)
  DebugKit(array)
  Component(array)
  0DebugKit/Controller/Component/ToolbarComponent.php
  Other(array)
  0DebugKit/Lib/DebugMemory.php
  1DebugKit/Lib/Panel/HistoryPanel.php
  2DebugKit/Lib/DebugPanel.php
  3DebugKit/Lib/Panel/SessionPanel.php
  4DebugKit/Lib/Panel/RequestPanel.php
  5DebugKit/Lib/Panel/SqlLogPanel.php
  6DebugKit/Lib/Panel/TimerPanel.php
  7DebugKit/Lib/Panel/LogPanel.php
  8DebugKit/Lib/Panel/VariablesPanel.php
  9DebugKit/Lib/Panel/EnvironmentPanel.php
  10DebugKit/Lib/Panel/IncludePanel.php
  11DebugKit/Lib/DebugTimer.php
  Log(array)
  0DebugKit/Lib/Log/Engine/DebugKitLog.php
====