Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-105647
Ghost is a Node.js content management system. From 6.54.1 until 6.65.0, a validation issue allowed some functionality, such as Webmentions, to be abused by an unauthentic...
|
4.0 Medium | — | 0,23% | 5 Okt 2026 |
|
CVE-2026-105392
A vulnerability has been found in Lybbn Django-Vue-Lyadmin up to 3.2.12. The impacted element is an unknown function of the file backend/application/settings.py of the co...
|
7.3 High | — | 0,29% | 5 Okt 2026 |
|
CVE-2026-105389
A security vulnerability has been detected in feelec-yishu feelcrm-os 1.0.0. This issue affects some unknown processing of the file App/Feelcrm/Crm/Controller/UploadContr...
|
6.3 Medium | — | 0,21% | 5 Okt 2026 |
|
CVE-2026-105388
A weakness has been identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function index of the file App/Feelcrm/Index/Controller/MemberController.c...
|
6.3 Medium | — | 0,25% | 5 Okt 2026 |
|
CVE-2026-104030
A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service (DoS) by submitting a specially crafted passkey authentication token that la...
|
5.5 Medium | — | 0,12% | 5 Okt 2026 |
|
CVE-2026-104029
A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to improper buff...
|
3.3 Low | — | 0,10% | 5 Okt 2026 |
|
CVE-2026-103348
Deserialization of Untrusted Data vulnerability in Smackcoders Inc. WP Ultimate Exporter wp-ultimate-exporter allows Object Injection.This issue affects WP Ultimate Expor...
|
7.2 High | — | 0,37% | 5 Okt 2026 |
|
CVE-2026-103337
Missing Authorization vulnerability in Kirillbdev WC Ukraine Shipping wc-ukr-shipping allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a...
|
6.5 Medium | — | 0,21% | 5 Okt 2026 |
|
CVE-2026-103066
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and...
|
8.5 High | — | 0,26% | 5 Okt 2026 |
|
CVE-2026-100511
Deserialization of Untrusted Data vulnerability in Vektor Inc. VK Google Job Posting Manager vk-google-job-posting-manager allows Object Injection.This issue affects VK G...
|
8.8 High | — | 0,36% | 5 Okt 2026 |
|
CVE-2026-100506
Deserialization of Untrusted Data vulnerability in WP Spell Check WP Spell Check wp-spell-check allows Object Injection.This issue affects WP Spell Check: from n/a throug...
|
7.2 High | — | 0,37% | 5 Okt 2026 |
|
CVE-2026-97309
Missing Authorization vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Retrieve Embedded Sensitive Data.This issue affects RepairBuddy: from n/a...
|
7.1 High | — | 0,22% | 5 Okt 2026 |
|
CVE-2026-97305
Authorization Bypass Through User-Controlled Key vulnerability in Themeisle AI Chatbot for WordPress – Hyve Lite hyve-lite allows Exploiting Incorrectly Configured Access...
|
6.9 Medium | — | 0,25% | 5 Okt 2026 |
|
CVE-2026-97304
Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Timetics: fr...
|
6.5 Medium | — | 0,20% | 5 Okt 2026 |
|
CVE-2026-97303
Missing Authorization vulnerability in Apps Mav Scratch & Win – Giveaways and Contests scratch-win-giveaways-for-website-facebook allows Exploiting Incorrectly Configured...
|
7.6 High | — | 0,25% | 5 Okt 2026 |
|
CVE-2026-97283
Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP Advanced Post Manager advanced-post-manager allows Object Injection.This issue affects Advanced...
|
9.8 Critical | — | 0,36% | 5 Okt 2026 |
|
CVE-2026-95166
In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting (XSS) payload.
|
5.4 Medium | — | 0,14% | 5 Okt 2026 |
|
CVE-2026-95165
Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting (XSS) in the Organization name field.
|
6.1 Medium | — | 0,16% | 5 Okt 2026 |
|
CVE-2026-88424
FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter at ButtonService.GetListByFilter(). This vulnerability allows attacke...
|
9.8 Critical | — | 0,28% | 5 Okt 2026 |
|
CVE-2026-97275
Improper Validation of Specified Quantity in Input vulnerability in VillaTheme BuildKit – Product Builder for WooCommerce – Custom PC Builder woo-product-builder allows I...
|
5.3 Medium | — | 0,19% | 5 Okt 2026 |
|
CVE-2026-97070
Authorization Bypass Through User-Controlled Key vulnerability in CozyThemes Cozy Blocks cozy-addons allows Exploiting Incorrectly Configured Access Control Security Leve...
|
6.9 Medium | — | 0,27% | 5 Okt 2026 |
|
CVE-2026-58880
google android
In handle_app_val_response of btif_rc.cc, there is a possible way to achieve code execution due to a race condition. This could lead to local escalation of privilege with...
|
7.0 High | — | 0,07% | 5 Okt 2026 |
|
CVE-2026-58865
google android
In multiple functions of PduParser.java, there is a possible persistent denial of service due to a missing bounds check. This could lead to remote denial of service with...
|
7.5 High | — | 0,22% | 5 Okt 2026 |
|
CVE-2026-58859
google android
In multiple places, there is a possible denial of service due to an uncaught exception. This could lead to local escalation of privilege with no additional execution pri...
|
7.8 High | — | 0,07% | 5 Okt 2026 |
|
CVE-2026-58856
google android
In returnOutputBufferLocked of DeprecatedCamera3StreamSplitter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local informa...
|
3.3 Low | — | 0,06% | 5 Okt 2026 |
|
CVE-2026-58854
google android
In multiple locations, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileg...
|
7.8 High | — | 0,07% | 5 Okt 2026 |
|
CVE-2026-58841
google android
In multiple functions of VirtualAudioControllerTest.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of p...
|
7.8 High | — | 0,07% | 5 Okt 2026 |
|
CVE-2026-58835
google android
In cfg2prop of btif_storage.cc, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional executi...
|
8.8 High | — | 0,24% | 5 Okt 2026 |
|
CVE-2026-58834
google android
In setPermissionGrantState of DevicePolicyManagerService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local...
|
5.5 Medium | — | 0,06% | 5 Okt 2026 |
|
CVE-2026-58815
google android
In multiple locations, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execu...
|
7.8 High | — | 0,07% | 5 Okt 2026 |
|
CVE-2026-55286
google android
In stpropnci_process of stpropnci.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no a...
|
7.8 High | — | 0,07% | 5 Okt 2026 |
|
CVE-2026-55280
google android
In multiple locations, there is a possible out-of-bounds write due to uninitialized data. This could lead to remote escalation of privilege with no additional execution p...
|
8.8 High | — | 0,23% | 5 Okt 2026 |
|
CVE-2026-55270
google android
In dialInternal in multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional...
|
7.8 High | — | 0,07% | 5 Okt 2026 |
|
CVE-2026-55269
google android
In FilterCapturedPacket of snoop_logger.cc, there is a possible memory safety issue due to improper input validation. This could lead to local escalation of privilege wit...
|
7.8 High | — | 0,07% | 5 Okt 2026 |
|
CVE-2026-55266
google android
In qsort of libufdt_sysdeps_vendor.c, there is a possible out-of-bounds write due to resource exhaustion. This could lead to local escalation of privilege with no additio...
|
7.8 High | — | 0,07% | 5 Okt 2026 |
|
CVE-2026-55265
google android
In multiple functions of PduParser.java, there is a possible out of bounds read due to a missing bounds check. This could lead to a remote denial of service with no addit...
|
6.5 Medium | — | 0,25% | 5 Okt 2026 |
|
CVE-2026-49937
google android
In multiple functions of MessageQueueBase.h, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege wit...
|
7.8 High | — | 0,07% | 5 Okt 2026 |
|
CVE-2026-49880
google android
In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no...
|
7.8 High | — | 0,07% | 5 Okt 2026 |
|
CVE-2026-28648
google android
In Settings, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges need...
|
7.8 High | — | 0,07% | 5 Okt 2026 |
|
CVE-2026-28647
google android
In updateState of DeviceAdminAppsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of...
|
7.8 High | — | 0,07% | 5 Okt 2026 |
|
CVE-2026-28641
google android
In shouldDisableUninstallButton of ApplicationActionButtonsPreferenceController.java, there is a possible permission bypass due to a logic error in the code. This could l...
|
7.8 High | — | 0,07% | 5 Okt 2026 |
|
CVE-2026-49933
google android
In handle_le_monitor_device_event of msft.cc, there is a possible control-flow hijack in the privileged bluetooth process due to an uninitialized pointer dereference. Thi...
|
7.8 High | — | 0,07% | 5 Okt 2026 |
|
CVE-2026-49885
google android
In rw_t4t_update_file of rw_t4t.cc, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege with no additiona...
|
7.8 High | — | 0,07% | 5 Okt 2026 |
|
CVE-2026-49878
google android
In wpas_handle_robust_av_scs_recv_action of robust_av.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code executio...
|
7.2 High | — | 0,29% | 5 Okt 2026 |
|
CVE-2026-45524
google android
In isSystem of WifiPermissionsUtil.java, there is a possible sandbox escape due to a missing permission check. This could lead to local escalation of privilege with no ad...
|
8.8 High | — | 0,08% | 5 Okt 2026 |
|
CVE-2026-28667
google android
In multiple functions of rw_t5t.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with no addition...
|
5.5 Medium | — | 0,07% | 5 Okt 2026 |
|
CVE-2026-28640
google android
In checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input validation. This could lead to...
|
7.8 High | — | 0,07% | 5 Okt 2026 |
|
CVE-2026-28625
google android
In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional executi...
|
7.8 High | — | 0,07% | 5 Okt 2026 |
|
CVE-2026-105712
gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untrusted archive with --directory (aka -C) into an existing dir...
|
3.6 Low | — | 0,12% | 5 Okt 2026 |
|
CVE-2026-105646
Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, a crafted content import file could cause excessive CPU usage, making the Ghost server unresponsive...
|
4.9 Medium | — | 0,33% | 5 Okt 2026 |