Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-84035
ibm guardium data protection
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.
|
9.8 Critical | — | 0,38% | 8 Okt 2026 |
|
CVE-2026-84032
ibm guardium data protection
IBM Guardium Data Protection 12.2.2 could allow a remote attacker to conduct a man-in-the-middle attack due to improper certificate validation.
|
8.1 High | — | 0,16% | 8 Okt 2026 |
|
CVE-2026-82900
ibm guardium data protection
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory.
|
9.1 Critical | — | 0,38% | 8 Okt 2026 |
|
CVE-2026-82895
ibm guardium data protection
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
|
9.8 Critical | — | 0,38% | 8 Okt 2026 |
|
CVE-2026-81932
ibm guardium data protection
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which cou...
|
9.8 Critical | — | 0,29% | 8 Okt 2026 |
|
CVE-2026-80381
ibm guardium data protection
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection.
|
9.8 Critical | — | 0,32% | 8 Okt 2026 |
|
CVE-2026-75875
ibm guardium data protection
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal.
|
9.8 Critical | — | 0,58% | 8 Okt 2026 |
|
CVE-2026-107831
Jivejdon through 5.0 contains a cross-site request forgery vulnerability that allows remote attackers to perform state-changing actions by abusing GET endpoints lacking a...
|
4.3 Medium | — | 0,18% | 8 Okt 2026 |
|
CVE-2026-107830
Jivejdon from commit e0306088 through commit ee67a65e lacks rate limiting on the unauthenticated /account/smsVRAction endpoint handled by SmsQQAction, allowing unlimited...
|
5.3 Medium | — | 0,38% | 8 Okt 2026 |
|
CVE-2026-107829
Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash() in AccountDaoSql. Attackers...
|
5.9 Medium | — | 0,20% | 8 Okt 2026 |
|
CVE-2026-107828
Jivejdon through 5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to access Weibo-created accounts by deriving predictable creden...
|
6.5 Medium | — | 0,34% | 8 Okt 2026 |
|
CVE-2026-107801
Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to execute JavaScript by uploading attachments with an attac...
|
5.4 Medium | — | 0,22% | 8 Okt 2026 |
|
CVE-2026-107800
Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject script into private short messages because receive...
|
5.4 Medium | — | 0,25% | 8 Okt 2026 |
|
CVE-2026-107799
Jivejdon through 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject script by posting unsanitized forum message bodies...
|
5.4 Medium | — | 0,22% | 8 Okt 2026 |
|
CVE-2026-107798
jivejdon from commit 595d8d22 through commit ee67a65e contains a stored cross-site scripting vulnerability in the default-enabled TextStyle filter that inserts unvalidate...
|
5.4 Medium | — | 0,22% | 8 Okt 2026 |
|
CVE-2026-107797
Jivejdon through 5.0 contains a reflected cross-site scripting vulnerability in application/message/postThread.jsp that allows attackers to inject script via the to and t...
|
6.1 Medium | — | 0,24% | 8 Okt 2026 |
|
CVE-2026-107796
Jivejdon from commit 5489372d through commit ee67a65e contains a reflected cross-site scripting vulnerability in application/query/taggedThreadList.jsp that allows unauth...
|
6.1 Medium | — | 0,27% | 8 Okt 2026 |
|
CVE-2026-107793
Jivejdon through 5.0 contains an authorization bypass vulnerability in SubscriptionServiceImp.deleteSubscription that allows authenticated users to delete other users' su...
|
4.3 Medium | — | 0,27% | 8 Okt 2026 |
|
CVE-2026-107792
Jivejdon from commit d58a36b0 through commit ee67a65e contains a missing authorization vulnerability in UpdateThreadToForumAction that allows authenticated users to move...
|
4.3 Medium | — | 0,25% | 8 Okt 2026 |
|
CVE-2026-107726
Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, improper validation of data supplied...
|
9.3 Critical | — | 0,38% | 8 Okt 2026 |
|
CVE-2026-107725
Hazelcast is a unified real-time data platform combining stream processing with a fast data store. Prior to 5.4.5, 5.5.10, and 5.6.1, missing authorization checks in the...
|
8.7 High | — | 0,39% | 8 Okt 2026 |
|
CVE-2026-107724
fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.2.4, fast-jwt can classify raw serialized public JWK or JWKS JSON as an HMAC secret because src/crypto.js...
|
7.4 High | — | 0,22% | 8 Okt 2026 |
|
CVE-2026-107723
fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.3.0, fast-jwt createVerifier accepts a validly signed JWT whose payload is a JSON array because src...
|
8.1 High | — | 0,36% | 8 Okt 2026 |
|
CVE-2026-107722
fast-jwt provides fast JSON Web Token (JWT) implementation. From 6.2.0 until 6.3.0, fast-jwt can misclassify RSA public-key text as an HMAC secret when the key has non-wh...
|
9.8 Critical | — | 0,27% | 8 Okt 2026 |
|
CVE-2026-107721
fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.3.0, fast-jwt createVerifier accepts Infinity for clockTolerance because its option validation chec...
|
5.9 Medium | — | 0,33% | 8 Okt 2026 |
|
CVE-2026-107720
fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.3.1, fast-jwt createVerifier accepts an unsigned JWT when key is an empty string or null and algori...
|
7.4 High | — | 0,26% | 8 Okt 2026 |
|
CVE-2026-107719
fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 6.3.4, the fast-jwt createVerifier cache can continue accepting a previously valid, signed JWT after...
|
4.2 Medium | — | 0,23% | 8 Okt 2026 |
|
CVE-2026-107718
AdonisJS HTTP Server is a package for handling HTTP requests in the AdonisJS framework. Prior to 8.2.3 and 9.3.0, AdonisJS HTTP Server inserts route parameter values into...
|
6.1 Medium | — | 0,28% | 8 Okt 2026 |
|
CVE-2026-107717
Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.0, Banks Prompt.chat_messages() attempts to parse every line of rendered template ou...
|
6.5 Medium | — | 0,28% | 8 Okt 2026 |
|
CVE-2026-107716
Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.1, Banks DirectoryPromptRegistry does not reject symbolic links for index.json or di...
|
7.3 High | — | 0,13% | 8 Okt 2026 |
|
CVE-2026-107715
The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize sends caller-supplied credential headers to a different host after an H...
|
6.8 Medium | — | 0,40% | 8 Okt 2026 |
|
CVE-2026-107714
The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize::HTTP::Agent#response_redirect treats redirects as same-origin when the...
|
5.9 Medium | — | 0,23% | 8 Okt 2026 |
|
CVE-2026-107406
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC.
NetScaler ADC or NetScaler Gateway must be configure...
|
9.5 Critical | — | 0,47% | 8 Okt 2026 |
|
CVE-2026-107399
The Mechanize library is used for automating interaction with websites. Prior to 2.14.1, Mechanize applies no origin trust boundary in Mechanize::HTTP::Agent#response_fol...
|
6.8 Medium | — | 0,36% | 8 Okt 2026 |
|
CVE-2026-105275
Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data import functionality. An authenticated user with Viewer privilege...
|
4.3 Medium | — | 0,26% | 8 Okt 2026 |
|
CVE-2026-105269
Satel Netco Design versions prior to v2.1.7 contains a stored cross site scripting vulnerability. An authenticated user with Network Operator privileges could store untru...
|
6.8 Medium | — | 0,36% | 8 Okt 2026 |
|
CVE-2026-104628
Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity vulnerability. An authenticated user with Viewer privileges could submit...
|
6.5 Medium | — | 0,31% | 8 Okt 2026 |
|
CVE-2025-71428
Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike() that allows authenticated administrators to inject SQL via the usernam...
|
4.9 Medium | — | 0,36% | 8 Okt 2026 |
|
CVE-2026-95116
An issue in libming through 0.4.8 allows a remote attacker to cause a denial of service via the readtag_file() in src/blocks/fromswf.c.
|
7.5 High | — | 0,39% | 8 Okt 2026 |
|
CVE-2026-79842
An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713
|
9.1 Critical | — | 0,33% | 8 Okt 2026 |
|
CVE-2026-78407
ibm security verify access, ibm security verify access container +2 lainnya
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 are vulnerable to cross-site scripting. This vulnerability allows an a...
|
5.4 Medium | — | 0,14% | 8 Okt 2026 |
|
CVE-2026-78406
ibm security verify access, ibm security verify access container +2 lainnya
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary cod...
|
9.8 Critical | — | 0,50% | 8 Okt 2026 |
|
CVE-2026-78401
ibm security verify access, ibm security verify access container +2 lainnya
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated attacker to execute arbitrary cod...
|
9.8 Critical | — | 0,57% | 8 Okt 2026 |
|
CVE-2026-78399
ibm security verify access, ibm security verify access container +2 lainnya
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow an authenticated user to cause a denial of service using a...
|
6.5 Medium | — | 0,27% | 8 Okt 2026 |
|
CVE-2026-78388
ibm security verify access, ibm security verify access container +2 lainnya
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to cross-site request forgery which could allow an attac...
|
8.8 High | — | 0,11% | 8 Okt 2026 |
|
CVE-2026-19878
ibm security verify access, ibm security verify access container +2 lainnya
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass additional authe...
|
6.5 Medium | — | 0,23% | 8 Okt 2026 |
|
CVE-2026-19498
ibm security verify access, ibm security verify access container +2 lainnya
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to cause a denial of service due to unco...
|
7.5 High | — | 0,28% | 8 Okt 2026 |
|
CVE-2026-19494
ibm security verify access, ibm security verify access container +2 lainnya
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to bypass security restric...
|
6.5 Medium | — | 0,29% | 8 Okt 2026 |
|
CVE-2026-19493
ibm security verify access, ibm security verify access container +2 lainnya
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to perform an arbitrary file write due t...
|
7.5 High | — | 0,36% | 8 Okt 2026 |
|
CVE-2026-19491
ibm security verify access, ibm security verify access container +2 lainnya
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass authentication due to improper...
|
7.5 High | — | 0,33% | 8 Okt 2026 |