Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-96332
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in yalla ya! Simple Payment simple-payment allows Reflected XSS.This is...
|
7.1 High | — | 0,14% | 9 Okt 2026 |
|
CVE-2026-96331
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdreams Ajax Search Pro ajax-search-pro allows Blind SQL Injection....
|
9.3 Critical | — | 0,24% | 9 Okt 2026 |
|
CVE-2026-96330
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Inject...
|
9.3 Critical | — | 0,23% | 9 Okt 2026 |
|
CVE-2026-96329
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in tagDiv tagDiv Opt-In Builder td-subscription allows Blind SQL Inject...
|
8.5 High | — | 0,21% | 9 Okt 2026 |
|
CVE-2026-96328
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in jegtheme JNews - Pay Writer jnews-pay-writer allows Blind SQL Inject...
|
9.3 Critical | — | 0,23% | 9 Okt 2026 |
|
CVE-2026-96327
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms_plugin allows Blind SQL Injection.This issue...
|
9.3 Critical | — | 0,25% | 9 Okt 2026 |
|
CVE-2026-95610
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UpSolution UpSolution Core us-core allows Blind SQL Injection.This i...
|
8.5 High | — | 0,21% | 9 Okt 2026 |
|
CVE-2026-95609
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant media-library-assistant allows...
|
7.1 High | — | 0,18% | 9 Okt 2026 |
|
CVE-2026-95608
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net HUSKY woocommerce-products-filter allows Reflected XSS....
|
7.1 High | — | 0,18% | 9 Okt 2026 |
|
CVE-2026-95607
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VibeThemes WPLMS wplms allows Blind SQL Injection.This issue affect...
|
8.5 High | — | 0,21% | 9 Okt 2026 |
|
CVE-2026-95599
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Taskbuilder Taskbuilder taskbuilder allows Blind SQL Injection.This...
|
8.5 High | — | 0,21% | 9 Okt 2026 |
|
CVE-2026-95598
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codepeople Search in Place search-in-place allows Reflected XSS.This...
|
7.1 High | — | 0,18% | 9 Okt 2026 |
|
CVE-2026-95597
Missing Authorization vulnerability in codemstory 워드프레스 결제 심플페이 pgall-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.T...
|
6.5 Medium | — | 0,24% | 9 Okt 2026 |
|
CVE-2026-95596
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons sh...
|
7.1 High | — | 0,18% | 9 Okt 2026 |
|
CVE-2026-95591
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Ref...
|
7.1 High | — | 0,18% | 9 Okt 2026 |
|
CVE-2026-95589
Missing Authorization vulnerability in Magepeople inc. Deposits and Partial Payments for WooCommerce advanced-partial-payment-or-deposit-for-woocommerce allows Exploiting...
|
6.5 Medium | — | 0,21% | 9 Okt 2026 |
|
CVE-2026-94668
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Refl...
|
7.1 High | — | 0,18% | 9 Okt 2026 |
|
CVE-2026-94667
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetReviews jet-reviews allows Stored XSS.This issue affec...
|
6.5 Medium | — | 0,16% | 9 Okt 2026 |
|
CVE-2026-94666
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-fo...
|
7.5 High | — | 0,36% | 9 Okt 2026 |
|
CVE-2026-94665
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid Classified Listing classified-listing allows Stored X...
|
6.5 Medium | — | 0,16% | 9 Okt 2026 |
|
CVE-2026-94664
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Path Trav...
|
7.5 High | — | 0,36% | 9 Okt 2026 |
|
CVE-2026-94663
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communiti...
|
8.5 High | — | 0,21% | 9 Okt 2026 |
|
CVE-2026-94661
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlog jet-blog allows Reflected XSS.This issue affects...
|
7.1 High | — | 0,18% | 9 Okt 2026 |
|
CVE-2026-94641
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan UsersWP userswp allows Reflected XSS.This issue affects User...
|
7.1 High | — | 0,18% | 9 Okt 2026 |
|
CVE-2026-94632
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan BlockStrap Page Builder - Bootstrap Blocks blockstrap-page-b...
|
7.1 High | — | 0,18% | 9 Okt 2026 |
|
CVE-2026-94568
Deserialization of Untrusted Data vulnerability in WP Hosting AS Pay with Vipps for WooCommerce woo-vipps allows Object Injection.This issue affects Pay with Vipps for Wo...
|
7.2 High | — | 0,36% | 9 Okt 2026 |
|
CVE-2026-94503
Unrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Upload a Web Shell to a Web Server.This issue affects Zombify: from n/a thr...
|
10.0 Critical | — | 0,28% | 9 Okt 2026 |
|
CVE-2026-94415
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Muffingroup Betheme betheme allows Reflected XSS.This issue affects...
|
7.1 High | — | 0,18% | 9 Okt 2026 |
|
CVE-2026-94170
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Heateor Support Sassy Social Share sassy-social-share allows Reflect...
|
7.1 High | — | 0,18% | 9 Okt 2026 |
|
CVE-2026-94167
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder kubio allows Reflected XSS.This...
|
7.1 High | — | 0,18% | 9 Okt 2026 |
|
CVE-2026-94166
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UpSolution UpSolution Core us-core allows Reflected XSS.This issue a...
|
7.1 High | — | 0,18% | 9 Okt 2026 |
|
CVE-2026-94161
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Grand Restaurant grandrestaurant allows Reflected XSS.Thi...
|
7.1 High | — | 0,18% | 9 Okt 2026 |
|
CVE-2026-94159
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KlbTheme Total Donations totaldonations allows Stored XSS.This issue...
|
7.1 High | — | 0,18% | 9 Okt 2026 |
|
CVE-2026-94158
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bkninja Gloria Admin Panel gloria-admin-panel allows Reflected XSS.T...
|
7.1 High | — | 0,18% | 9 Okt 2026 |
|
CVE-2026-93947
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Shinetheme Traveler traveler allows Blind SQL Injection.This issue a...
|
9.3 Critical | — | 0,24% | 9 Okt 2026 |
|
CVE-2026-78341
dell policy manager for secure connect gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability. A high privileged attacker with remote...
|
7.2 High | — | 0,30% | 9 Okt 2026 |
|
CVE-2026-78340
dell policy manager for secure connect gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')...
|
6.7 Medium | — | 0,15% | 9 Okt 2026 |
|
CVE-2026-78339
dell policy manager for secure connect gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low pri...
|
7.1 High | — | 0,09% | 9 Okt 2026 |
|
CVE-2026-78027
dell policy manager for secure connect gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker wi...
|
6.8 Medium | — | 0,19% | 9 Okt 2026 |
|
CVE-2026-78026
dell policy manager for secure connect gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileg...
|
8.8 High | — | 0,19% | 9 Okt 2026 |
|
CVE-2026-78025
dell policy manager for secure connect gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated...
|
7.5 High | — | 0,40% | 9 Okt 2026 |
|
CVE-2026-78024
dell policy manager for secure connect gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker wi...
|
8.7 High | — | 0,19% | 9 Okt 2026 |
|
CVE-2026-78023
dell policy manager for secure connect gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileg...
|
8.8 High | — | 0,19% | 9 Okt 2026 |
|
CVE-2026-71884
In Bouncy Castle for Java LTS before 2.73.13, the native one-shot CTR packet cipher did not check that the requested input length fitted the counter space the IV left. In...
|
8.2 High | — | 0,41% | 9 Okt 2026 |
|
CVE-2026-62049
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetBlocks For Elementor jet-blocks allows Stored XSS.This...
|
6.5 Medium | — | 0,17% | 9 Okt 2026 |
|
CVE-2026-107935
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoi...
|
9.3 Critical | — | 0,30% | 9 Okt 2026 |
|
CVE-2026-84224
The Kirki WordPress plugin before 6.3.2 does not validate the host of a URL it is given before fetching it, allowing users with editor-level access and above to make the...
|
4.1 Medium | — | 0,18% | 9 Okt 2026 |
|
CVE-2026-84220
The Kirki WordPress plugin before 6.3.2 does not prevent shortcodes held in comments from being executed when it renders them, and displays comments regardless of their m...
|
4.8 Medium | — | 0,15% | 9 Okt 2026 |
|
CVE-2026-78022
dell policy manager for secure connect gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerability. A low privileged attacker...
|
8.1 High | — | 0,20% | 9 Okt 2026 |
|
CVE-2026-78021
dell policy manager for secure connect gateway
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error Message Containing Sensitive Information vulnerability. An...
|
5.3 Medium | — | 0,18% | 9 Okt 2026 |