Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-107227
The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.2.0 until 3.0.14, WebSocket p...
|
7.5 High | — | 0,43% | 7 Okt 2026 |
|
CVE-2026-97717
CVE-2026-97717
is a vulnerability in the proxy sub-system of Secure Access servers prior to
14.60. Authenticated attackers can send malformed data to the server and cause...
|
6.0 Medium | — | 0,23% | 7 Okt 2026 |
|
CVE-2026-97716
CVE-2026-97716
is a vulnerability in the connection set up sub-system of Secure Access servers
prior to version 14.60. Unauthenticated attackers can send specially crafte...
|
8.7 High | — | 0,34% | 7 Okt 2026 |
|
CVE-2026-97715
CVE-2026-97715 is
a vulnerability in the client registration process of Secure Access servers
prior to version 14.60. Authenticated attackers can pass malformed data to t...
|
7.1 High | — | 0,23% | 7 Okt 2026 |
|
CVE-2026-97714
CVE-2026-97714
is a is a vulnerability in the authentication sub-system of Secure Access
servers prior to version 14.60. Attackers can send a malformed response during
au...
|
8.2 High | — | 0,25% | 7 Okt 2026 |
|
CVE-2026-34499
Use of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Sensitive Constants Within an Executable.
This issue affects ADVMS: before 3.10.
|
8.5 High | — | 0,10% | 7 Okt 2026 |
|
CVE-2026-107353
traverse (npm) versions 0.3.6 through 0.3.9, 0.4.0 through 0.4.6, 0.5.0 through 0.5.2, and 0.6.0 through 0.6.11 allow prototype pollution through set(). When the path pas...
|
6.5 Medium | — | 0,28% | 7 Okt 2026 |
|
CVE-2026-107176
A flaw was found in the cluster-samples-operator. The RBAC Role coreos-pull-secret-reader in namespace openshift-config grants get, list, and watch permissions on all Sec...
|
6.8 Medium | — | 0,16% | 7 Okt 2026 |
|
CVE-2026-107161
A heap-based buffer overflow flaw was found in Cyrus SASL. The add_to_challenge() function in the DIGEST-MD5 plugin computes the size of the buffer needed for a challenge...
|
7.5 High | — | 0,28% | 7 Okt 2026 |
|
CVE-2026-107313
pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 and 42.7.5 can send the previous contents of the GSS send buffer in place of the first part of a value on a connection...
|
4.2 Medium | — | 0,14% | 7 Okt 2026 |
|
CVE-2026-107225
excelize
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.0 to 2.11.0, GetStyle's fill, border, and font extraction predicates chec...
|
6.5 Medium | — | 0,25% | 7 Okt 2026 |
|
CVE-2026-107224
excelize
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, a Zip64 uncompressed size with the high bit set is converted...
|
6.5 Medium | — | 0,31% | 7 Okt 2026 |
|
CVE-2026-107223
excelize
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, flatCols expands file-loaded column ranges without validatin...
|
7.5 High | — | 0,35% | 7 Okt 2026 |
|
CVE-2026-107222
excelize
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.0 to 2.11.0, conditional-format extraction indexes required child slices...
|
6.5 Medium | — | 0,25% | 7 Okt 2026 |
|
CVE-2026-107221
excelize
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0, checkRow sizes its target cell slice from the last cell in X...
|
6.5 Medium | — | 0,27% | 7 Okt 2026 |
|
CVE-2026-107220
excelize
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.7.1 to 2.11.0, mergeCellsParser leaves the cached rectangle empty for an em...
|
6.5 Medium | — | 0,25% | 7 Okt 2026 |
|
CVE-2026-107219
excelize
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, agile decryption accepts an attacker-controlled spinCount an...
|
7.5 High | — | 0,34% | 7 Okt 2026 |
|
CVE-2026-107218
excelize
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.10.1 to 2.11.0, RIGHT validates the requested length with UTF-16 code-unit...
|
5.3 Medium | — | 0,29% | 7 Okt 2026 |
|
CVE-2026-107217
excelize
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.0.0 to 2.11.0 in github.com/xuri/excelize/v2 and from 1.1.0 to 1.4.1 in git...
|
7.5 High | — | 0,34% | 7 Okt 2026 |
|
CVE-2026-103371
Insertion of Sensitive Information into Log File in Apache Geode Web Management.
This issue affects Apache Geode: from 2.0.0 before 2.0.3.
Users are recommended to...
|
7.5 High | — | 0,29% | 7 Okt 2026 |
|
CVE-2026-106164
In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vulnerability exists when importing an XLS file with a...
|
7.3 High | — | 0,19% | 7 Okt 2026 |
|
CVE-2026-96335
Missing Authorization vulnerability in WPMU DEV Forminator allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects Forminator: from n...
|
7.5 High | — | 0,20% | 7 Okt 2026 |
|
CVE-2026-56851
The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.
|
7.5 High | — | 0,34% | 7 Okt 2026 |
|
CVE-2026-107216
excelize
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRAY recursively calls the exported CalcCellValue fun...
|
7.5 High | — | 0,33% | 7 Okt 2026 |
|
CVE-2026-107215
excelize
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPart allocates a byte slice directly from an attacker...
|
7.5 High | — | 0,23% | 7 Okt 2026 |
|
CVE-2026-107214
excelize
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, the decryption dispatch performs insufficient structural and...
|
7.5 High | — | 0,24% | 7 Okt 2026 |
|
CVE-2026-107213
excelize
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.9.0 to 2.11.0, GetSlicers checks for ExtLst but dereferences ws.Drawing wit...
|
5.5 Medium | — | 0,22% | 7 Okt 2026 |
|
CVE-2026-107212
excelize
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, Rows.Columns accepts a look-ahead row number above TotalRows...
|
7.5 High | — | 0,34% | 7 Okt 2026 |
|
CVE-2026-107211
excelize
Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, separately parsed pivot-table field indices are used to inde...
|
5.5 Medium | — | 0,22% | 7 Okt 2026 |
|
CVE-2026-106067
A heap-based buffer overflow was found in GIMP’s Hot color filter plug-in. For very large images, a pixel buffer is allocated using overflowing 32-bit width * height (and...
|
6.3 Medium | — | 0,11% | 7 Okt 2026 |
|
CVE-2026-106066
A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, g_malloc() sizing based on overflowing width * height * bytes-...
|
6.3 Medium | — | 0,11% | 7 Okt 2026 |
|
CVE-2026-95606
Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection.
This issue affects The Events Calendar: from n/a t...
|
9.8 Critical | — | 0,33% | 7 Okt 2026 |
|
CVE-2026-95605
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Passionate Programmer Peter WP Data Access allows Blind SQL Injectio...
|
9.3 Critical | — | 0,25% | 7 Okt 2026 |
|
CVE-2026-95595
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fontsplugin Disable and Remove Google Fonts | GDPR & DSGVO friendly...
|
7.1 High | — | 0,15% | 7 Okt 2026 |
|
CVE-2026-95534
Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Object Injection.
This is...
|
8.8 High | — | 0,29% | 7 Okt 2026 |
|
CVE-2026-94670
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest Forms allows Reflected XSS.
This issue affects Everest Form...
|
7.1 High | — | 0,15% | 7 Okt 2026 |
|
CVE-2026-94662
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, A...
|
7.1 High | — | 0,15% | 7 Okt 2026 |
|
CVE-2026-92543
Docker Engine classifies a registry hostname as insecure using an any-match DNS check. loadInsecureRegistries() injects 127.0.0.0/8 and ::1/128 as insecure CIDRs by defau...
|
7.6 High | — | 0,09% | 7 Okt 2026 |
|
CVE-2026-92542
The firewall rules which mark VXLAN datagrams for encryption indiscriminately match both authentic VXLAN datagrams sent from the kernel and forged datagrams sent by user...
|
6.9 Medium | — | 0,07% | 7 Okt 2026 |
|
CVE-2026-76501
A vulnerability in the Segment Routing over IPv6 (SRv6) Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an u...
|
9.8 Critical | — | 0,51% | 7 Okt 2026 |
|
CVE-2026-76500
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conduc...
|
9.8 Critical | — | 0,33% | 7 Okt 2026 |
|
CVE-2026-76499
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conduc...
|
9.8 Critical | — | 0,31% | 7 Okt 2026 |
|
CVE-2026-76498
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Application Policy Infrastructure Controller (APIC) engineering team has conduc...
|
9.8 Critical | — | 0,30% | 7 Okt 2026 |
|
CVE-2026-76488
A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access...
|
6.5 Medium | — | 0,29% | 7 Okt 2026 |
|
CVE-2026-76486
A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote atta...
|
9.8 Critical | — | 0,51% | 7 Okt 2026 |
|
CVE-2026-76485
A vulnerability in the VXLAN Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software, known as NGOAM, could allow an unauthenticated, remote atta...
|
9.8 Critical | — | 0,51% | 7 Okt 2026 |
|
CVE-2026-76484
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-...
|
8.8 High | — | 0,28% | 7 Okt 2026 |
|
CVE-2026-76483
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-...
|
9.1 Critical | — | 0,22% | 7 Okt 2026 |
|
CVE-2026-76482
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-...
|
10.0 Critical | — | 0,20% | 7 Okt 2026 |
|
CVE-2026-76480
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-...
|
9.8 Critical | — | 0,33% | 7 Okt 2026 |