Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-47505
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an attacker could cause a use-after-free. A successful exploit of this vulne...
|
7.8 High | — | 0,14% | 30 Sep 2026 |
|
CVE-2026-47504
NVIDIA Linux GPU Display Driver contains a vulnerability in the NGX updater where an outdated embedded cryptographic library is susceptible to type confusion. A successfu...
|
7.8 High | — | 0,15% | 30 Sep 2026 |
|
CVE-2026-47503
NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest VM user may cause an out-of-bounds write by sending a...
|
7.8 High | — | 0,13% | 30 Sep 2026 |
|
CVE-2026-47502
NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer, where a guest user could cause an integer overflow leading to mem...
|
7.8 High | — | 0,15% | 30 Sep 2026 |
|
CVE-2026-47501
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write by supplying mismatched memory buffe...
|
7.8 High | — | 0,15% | 30 Sep 2026 |
|
CVE-2026-47500
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where improper cleanup of reference counts during error paths could lead...
|
7.8 High | — | 0,14% | 30 Sep 2026 |
|
CVE-2026-47499
NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a guest could cause an out-of-bounds read. A successful expl...
|
7.8 High | — | 0,13% | 30 Sep 2026 |
|
CVE-2026-47498
NVIDIA vGPU Manager contains a vulnerability in the GPU System Processor (GSP) plugin where a guest VM user may cause an out-of-bounds write by sending a specially crafte...
|
7.8 High | — | 0,13% | 30 Sep 2026 |
|
CVE-2026-47497
NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor (GSP) tracing component where a guest VM user may cause improper access by sending crafted...
|
7.8 High | — | 0,10% | 30 Sep 2026 |
|
CVE-2026-47496
NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where a guest VM user may cause an out-of-bounds write by sending a...
|
7.3 High | — | 0,12% | 30 Sep 2026 |
|
CVE-2026-47495
NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write. A successful expl...
|
7.8 High | — | 0,13% | 30 Sep 2026 |
|
CVE-2026-47494
NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a format string issue. A successful exploit of this vulnerability might l...
|
7.8 High | — | 0,15% | 30 Sep 2026 |
|
CVE-2026-47493
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU resources for which it is not au...
|
7.8 High | — | 0,11% | 30 Sep 2026 |
|
CVE-2026-47492
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an attacker can cause improper access control. A successful explo...
|
5.5 Medium | — | 0,11% | 30 Sep 2026 |
|
CVE-2026-47491
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can cause improper release of memory resources, leaving a...
|
7.8 High | — | 0,15% | 30 Sep 2026 |
|
CVE-2026-47489
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit o...
|
7.8 High | — | 0,13% | 30 Sep 2026 |
|
CVE-2026-103470
In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User Interface can escalate privileges.
|
9.3 Critical | — | 0,26% | 30 Sep 2026 |
|
CVE-2026-103442
External control of system or configuration setting vulnerability in The Wikimedia Foundation MediaWiki CentralAuth extension allows Code Injection.
This issue affects M...
|
7.2 High | — | 0,28% | 30 Sep 2026 |
|
CVE-2026-103441
Deserialization of untrusted data vulnerability in The Wikimedia Foundation MediaWiki Wikibase extension allows Leverage Executable Code in Non-Executable Files.
This is...
|
7.2 High | — | 0,28% | 30 Sep 2026 |
|
CVE-2026-103436
apcupsd through 3.14.14 discloses uninitialized stack memory in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi. On the single-fi...
|
3.7 Low | — | 0,29% | 30 Sep 2026 |
|
CVE-2026-103432
apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi), a related...
|
8.1 High | — | 0,38% | 30 Sep 2026 |
|
CVE-2026-103231
A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. The affected element is the function mysqli_...
|
7.3 High | — | 0,41% | 30 Sep 2026 |
|
CVE-2026-103230
A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqli_query of the...
|
7.3 High | — | 0,41% | 30 Sep 2026 |
|
CVE-2026-103229
A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This issue affects the function mysqli_query of t...
|
7.3 High | — | 0,41% | 30 Sep 2026 |
|
CVE-2026-102427
Advisory
ordasoft joomla cck
Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - site/uploader.php is reached through the component’s normal fron...
|
10.0 Critical | — | 0,79% | 30 Sep 2026 |
|
CVE-2026-100280
jetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 creating a project from an unreadable custom template was possible
|
4.3 Medium | — | 0,17% | 30 Sep 2026 |
|
CVE-2026-100279
jetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 changing an integration URL exposed its stored credentials
|
6.5 Medium | — | 0,25% | 30 Sep 2026 |
|
CVE-2026-100278
jetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 users with restricted permission could edit and hide other users' comments
|
4.9 Medium | — | 0,24% | 30 Sep 2026 |
|
CVE-2026-100277
jetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature
|
9.8 Critical | — | 0,28% | 30 Sep 2026 |
|
CVE-2026-100276
jetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action
|
7.5 High | — | 0,22% | 30 Sep 2026 |
|
CVE-2026-100275
jetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 stored XSS in the workflow error notification toast was possible
|
4.8 Medium | — | 0,19% | 30 Sep 2026 |
|
CVE-2026-100274
jetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template
|
6.5 Medium | — | 0,84% | 30 Sep 2026 |
|
CVE-2026-100273
jetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code execution
|
9.8 Critical | — | 0,30% | 30 Sep 2026 |
|
CVE-2026-100272
jetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues
|
4.9 Medium | — | 0,29% | 30 Sep 2026 |
|
CVE-2026-100271
jetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 missing authorisation on several endpoints allowed authenticated users to access information from other projects
|
2.7 Low | — | 0,23% | 30 Sep 2026 |
|
CVE-2026-100270
jetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 low-level Admin Read permission users could disclose integration credentials via import configurations
|
2.7 Low | — | 0,17% | 30 Sep 2026 |
|
CVE-2026-100269
jetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 helpdesk project's Authorized Reporters list could be bypassed
|
4.3 Medium | — | 0,20% | 30 Sep 2026 |
|
CVE-2026-100268
jetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 project administrators could read comments from other projects via notification templates
|
2.7 Low | — | 0,23% | 30 Sep 2026 |
|
CVE-2026-100267
jetbrains youtrack
In JetBrains YouTrack before 2026.2.19197 reDoS attack was possible via mailbox regex mail-rule filters
|
5.9 Medium | — | 0,29% | 30 Sep 2026 |
|
CVE-2026-100266
jetbrains hub
In JetBrains Hub before 2026.2.52366 missing authorisation allowed authenticated users to send arbitrary emails from the server's trusted address
|
6.5 Medium | — | 0,23% | 30 Sep 2026 |
|
CVE-2026-100265
jetbrains rider
In JetBrains Rider before 2026.2.1 aI Assistant could auto-update third-party skills without user confirmation
|
6.5 Medium | — | 0,10% | 30 Sep 2026 |
|
CVE-2026-100264
jetbrains youtrack
In JetBrains YouTrack before 2026.2.18991 stored SMTP server credentials could be disclosed by changing the server host
|
2.7 Low | — | 0,23% | 30 Sep 2026 |
|
CVE-2026-100263
jetbrains youtrack
In JetBrains YouTrack before 2026.2.18991 stored HTML injection via the User-Agent header was possible
|
6.1 Medium | — | 0,19% | 30 Sep 2026 |
|
CVE-2026-100262
jetbrains youtrack
In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notification templates
|
7.1 High | — | 0,21% | 30 Sep 2026 |
|
CVE-2026-100261
jetbrains youtrack
In JetBrains YouTrack before 2026.2.18991 changing article visibility settings was possible without update permission
|
5.4 Medium | — | 0,18% | 30 Sep 2026 |
|
CVE-2026-100260
jetbrains youtrack
In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset
|
5.3 Medium | — | 0,27% | 30 Sep 2026 |
|
CVE-2026-100259
jetbrains youtrack
In JetBrains YouTrack before 2026.2.18991 improper access control on Gantt chart allowed edits by users with view-only access
|
4.3 Medium | — | 0,19% | 30 Sep 2026 |
|
CVE-2026-100258
jetbrains youtrack
In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings
|
4.3 Medium | — | 0,65% | 30 Sep 2026 |
|
CVE-2026-100257
jetbrains youtrack
In JetBrains YouTrack before 2026.2.18991 sSRF via stored XHTML injection was possible during PDF export
|
4.3 Medium | — | 0,21% | 30 Sep 2026 |
|
CVE-2026-100256
jetbrains intellij idea
In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects
|
7.8 High | — | 0,13% | 30 Sep 2026 |