Katalog CVE (hal. 150)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 259.103 (Critical 35.956 · High 103.619 · KEV 1.746 · sejak 2020) · Pembaruan terakhir: 17 Okt 2026, 00:27 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 7.451–7.500 dari 259.103 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-105301 A flaw was found in the X.509 client-certificate authenticator of Keycloak, a solution for identity and access management. The issue occurs when the server is configured...	4.0 Medium	—	0,12%	5 Okt 2026
CVE-2026-105237 A vulnerability was detected in linlinjava litemall up to 1.8.0. This affects an unknown part of the file litemall-admin-api/src/main/java/org/linlinjava/litemall/admin/w...	3.7 Low	—	0,40%	5 Okt 2026
CVE-2026-105233 A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects a...	6.3 Medium	—	0,23%	5 Okt 2026
CVE-2026-105232 A flaw has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is...	7.3 High	—	0,26%	5 Okt 2026
CVE-2026-105231 A vulnerability was detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected ele...	7.3 High	—	0,26%	5 Okt 2026
CVE-2026-105230 A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Im...	7.3 High	—	0,26%	5 Okt 2026
CVE-2026-105229 A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue aff...	7.3 High	—	0,26%	5 Okt 2026
CVE-2026-105226 A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the comp...	4.7 Medium	—	0,25%	5 Okt 2026
CVE-2026-105225 A vulnerability was identified in osCommerce osCommerce2 up to 2.3.4.1. This affects the function include of the file includes/classes/payment.php of the component Paymen...	4.3 Medium	—	0,19%	5 Okt 2026
CVE-2026-105188 A vulnerability was found in code-projects Human Resource Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /views/admin/liveE...	3.5 Low	—	0,20%	5 Okt 2026
CVE-2026-105187 A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument I...	6.3 Medium	—	0,20%	5 Okt 2026
CVE-2026-105186 A flaw has been found in itsourcecode Online Admission System 1.0. This impacts an unknown function of the file /new.php. Executing a manipulation of the argument schedid...	6.3 Medium	—	0,20%	5 Okt 2026
CVE-2026-105185 A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipulation of t...	7.3 High	—	0,26%	5 Okt 2026
CVE-2026-105184 A security vulnerability has been detected in itsourcecode Online Admission System 1.0. The impacted element is an unknown function of the file /admin/creteria.php. Such...	7.3 High	—	0,26%	5 Okt 2026
CVE-2026-105183 A weakness has been identified in itsourcecode Online Admission System 1.0. The affected element is an unknown function of the file /admin/confirm.php. This manipulation...	7.3 High	—	0,26%	5 Okt 2026
CVE-2026-105182 A security flaw has been discovered in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer_0/admins/assessments/ac...	7.3 High	—	0,26%	5 Okt 2026
CVE-2026-105181 A vulnerability was identified in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file register1.php. The manipulation of the...	6.3 Medium	—	0,20%	5 Okt 2026
CVE-2026-20589 mediatek mt2718 firmware, mediatek mt6768 firmware +23 lainnya In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the Sys...	6.7 Medium	—	0,11%	5 Okt 2026
CVE-2026-20588 mediatek mt2718 firmware, mediatek mt6768 firmware +23 lainnya In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obta...	6.7 Medium	—	0,11%	5 Okt 2026
CVE-2026-20587 mediatek mt2718 firmware, mediatek mt6768 firmware +23 lainnya In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the...	6.7 Medium	—	0,11%	5 Okt 2026
CVE-2026-20586 mediatek mt8910 firmware, mediatek mt2718 firmware +23 lainnya In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges...	8.8 High	—	0,38%	5 Okt 2026
CVE-2026-20579 mediatek mt2718 firmware, mediatek mt6768 firmware +23 lainnya In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actor has already obtained the Sys...	6.7 Medium	—	0,11%	5 Okt 2026
CVE-2026-20544 mediatek mt8910 firmware, mediatek mt6739 firmware +57 lainnya In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to th...	6.8 Medium	—	0,17%	5 Okt 2026
CVE-2026-20543 mediatek mt2716 firmware, mediatek mt2735 firmware +58 lainnya In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosure with no additional execution privileges needed....	5.5 Medium	—	0,12%	5 Okt 2026
CVE-2026-20542 mediatek mt2718 firmware, mediatek mt6878 firmware +17 lainnya In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the Sys...	6.7 Medium	—	0,11%	5 Okt 2026
CVE-2026-20541 mediatek mt6985 firmware, mediatek mt6986 firmware +58 lainnya In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base sta...	5.3 Medium	—	0,18%	5 Okt 2026
CVE-2026-20540 mediatek mt2716 firmware, mediatek mt2735 firmware +58 lainnya In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station...	5.3 Medium	—	0,18%	5 Okt 2026
CVE-2026-20539 mediatek mt2716 firmware, mediatek mt2735 firmware +58 lainnya In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station...	5.3 Medium	—	0,18%	5 Okt 2026
CVE-2026-20538 mediatek mt2716 firmware, mediatek mt2735 firmware +58 lainnya In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of service, if a UE has connected to a rogue base sta...	5.3 Medium	—	0,18%	5 Okt 2026
CVE-2026-20537 mediatek mt6878 firmware, mediatek mt6881 firmware +9 lainnya In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the Syste...	6.7 Medium	—	0,11%	5 Okt 2026
CVE-2026-20536 mediatek mt6878 firmware, mediatek mt6881 firmware +11 lainnya In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the Syste...	6.7 Medium	—	0,11%	5 Okt 2026
CVE-2026-20535 mediatek mt8910 firmware, mediatek mt6878 firmware +10 lainnya In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already...	6.7 Medium	—	0,11%	5 Okt 2026
CVE-2026-20534 mediatek mt2716 firmware, mediatek mt2735 firmware +58 lainnya In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base stat...	5.3 Medium	—	0,18%	5 Okt 2026
CVE-2026-20533 mediatek mt6739 firmware, mediatek mt6761 firmware +31 lainnya In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation of privilege if a malicious actor has already obta...	6.7 Medium	—	0,11%	5 Okt 2026
CVE-2026-20532 mediatek mt6899 firmware, mediatek mt6993 firmware +3 lainnya In apu, there is a possible application crash due to double free. This could lead to local denial of service with no additional execution privileges needed. User interact...	6.2 Medium	—	0,12%	5 Okt 2026
CVE-2026-20531 mediatek mt8910 firmware, mediatek mt6899 firmware +4 lainnya In apu, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User...	8.4 High	—	0,13%	5 Okt 2026
CVE-2026-20530 mediatek mt2718 firmware, mediatek mt6991 firmware +9 lainnya In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtai...	6.7 Medium	—	0,11%	5 Okt 2026
CVE-2026-20529 mediatek mt6761 firmware, mediatek mt6765 firmware +26 lainnya In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtai...	6.7 Medium	—	0,11%	5 Okt 2026
CVE-2026-20528 mediatek mt2735 firmware, mediatek mt2737 firmware +8 lainnya In ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local information disclosure, memory corruption, crashes, or p...	6.7 Medium	—	0,12%	5 Okt 2026
CVE-2026-20527 mediatek mt2716 firmware, mediatek mt2735 firmware +53 lainnya In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station contr...	5.3 Medium	—	0,21%	5 Okt 2026
CVE-2026-20526 mediatek mt2716 firmware, mediatek mt2735 firmware +53 lainnya In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base...	7.5 High	—	0,23%	5 Okt 2026
CVE-2026-20525 mediatek mt2716 firmware, mediatek mt6835 firmware +20 lainnya In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station co...	5.3 Medium	—	0,21%	5 Okt 2026
CVE-2026-20524 mediatek mt6899 firmware, mediatek mt6993 firmware +4 lainnya In apu, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges n...	8.4 High	—	0,13%	5 Okt 2026
CVE-2026-20523 mediatek mt6881 firmware, mediatek mt6993 firmware +7 lainnya In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privil...	8.4 High	—	0,13%	5 Okt 2026
CVE-2026-20522 mediatek mt6881 firmware, mediatek mt6993 firmware +6 lainnya In neuropilot, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privil...	8.4 High	—	0,13%	5 Okt 2026
CVE-2026-20521 mediatek mt8910 firmware, mediatek mt2718 firmware +46 lainnya In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution pri...	8.4 High	—	0,13%	5 Okt 2026
CVE-2026-20520 mediatek mt2716 firmware, mediatek mt2735 firmware +55 lainnya In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base...	7.5 High	—	0,23%	5 Okt 2026
CVE-2026-20519 mediatek mt6833 firmware, mediatek mt6835 firmware +55 lainnya In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base...	7.5 High	—	0,23%	5 Okt 2026
CVE-2026-105180 A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/update/info of the component UserService. Executing...	6.3 Medium	—	0,30%	5 Okt 2026
CVE-2026-105179 A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/add_user.php of the component Password...	2.7 Low	—	0,15%	5 Okt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.