Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-90573
A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gf_sg_mfurl_del of the file scenegraph/vrml_tools.c of the component MP4Box. T...
|
3.3 Low | — | 0,17% | 13 Sep 2026 |
|
CVE-2026-90574
A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/emp_transac.php?action=add. The ma...
|
6.3 Medium | — | 0,33% | 13 Sep 2026 |
|
CVE-2026-90572
A vulnerability was determined in davenardella snap7 up to 1.4.3. The affected element is the function TSnap7MicroClient::opUpload of the file src/core/s7_micro_client.cp...
|
4.7 Medium | — | 0,42% | 13 Sep 2026 |
|
CVE-2026-90571
A vulnerability was found in Exrick xmall up to 19e7917d5ed3bd2a2421a3a246ad494c133ba94c. Impacted is an unknown function of the file xmall-manager-web/src/main/webapp/WE...
|
4.3 Medium | — | 0,47% | 13 Sep 2026 |
|
CVE-2026-90569
A flaw has been found in linlinjava litemall 1.5.0/1.6.0/1.7.0/1.8.0. This vulnerability affects the function AdminTopicController.validate of the file litemall-vue/src/v...
|
2.4 Low | — | 0,37% | 13 Sep 2026 |
|
CVE-2026-90570
A vulnerability has been found in linlinjava litemall 1.4.0/1.5.0/1.6.0/1.7.0/1.8.0. This issue affects the function AdminGoodsService.validate of the file litemall-vue/s...
|
2.4 Low | — | 0,37% | 13 Sep 2026 |
|
CVE-2026-90568
A vulnerability was detected in moxi624 Mogu Blog v2 up to 5.2. This affects the function BlogSortServiceImpl.addBlogSort of the file mogu_web/src/main/resources/template...
|
3.5 Low | — | 0,33% | 13 Sep 2026 |
|
CVE-2026-90565
A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file da...
|
5.3 Medium | — | 0,53% | 13 Sep 2026 |
|
CVE-2026-90566
A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the function crea...
|
7.3 High | — | 0,47% | 13 Sep 2026 |
|
CVE-2026-90567
A security vulnerability has been detected in quequnlong shiyi-blog up to 1.2.1. Affected by this issue is the function highlightKeyword of the file blog-web/src/componen...
|
3.5 Low | — | 0,35% | 13 Sep 2026 |
|
CVE-2026-90564
A vulnerability was identified in quequnlong shiyi-blog 1.0.0-1.2.1. This impacts the function SysChatMsgMapper.getChatMsgList of the file blog-web/src/views/chat/index.v...
|
3.5 Low | — | 0,35% | 13 Sep 2026 |
|
CVE-2026-90527
A vulnerability was detected in quequnlong shiyi-blog up to 1.2.1. Affected is an unknown function of the file blog-admin/src/views/message/message/index.vue of the compo...
|
4.3 Medium | — | 0,47% | 13 Sep 2026 |
|
CVE-2026-90528
A flaw has been found in TDuckApp tduck-platform up to 5.3. Affected by this vulnerability is an unknown functionality of the file tduck-front/src/views/form/write/index....
|
3.5 Low | — | 0,35% | 13 Sep 2026 |
|
CVE-2026-90529
A vulnerability has been found in DataEase up to 2.10.25/2.10.26. Affected by this issue is the function buildTooltip of the file core/core-frontend/src/views/chart/compo...
|
3.5 Low | — | 0,35% | 13 Sep 2026 |
|
CVE-2026-90563
A vulnerability was determined in maliangnansheng bbs-springboot 3.0.0. This affects the function utils.toToc of the file ArticleController.java. This manipulation causes...
|
3.5 Low | — | 0,36% | 13 Sep 2026 |
|
CVE-2026-90524
A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown functio...
|
7.3 High | — | 0,69% | 13 Sep 2026 |
|
CVE-2026-90525
A weakness has been identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown function of the file /pages/cust_pos_trans.php. Executing a manipul...
|
6.3 Medium | — | 0,33% | 13 Sep 2026 |
|
CVE-2026-90526
A security vulnerability has been detected in SourceCodester School Registration and Fee System 1.0. This impacts an unknown function of the file /bilal/save_class.php. T...
|
7.3 High | — | 0,43% | 13 Sep 2026 |
|
CVE-2026-90523
A vulnerability was identified in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The affected element is an unknown function of...
|
7.3 High | — | 0,50% | 13 Sep 2026 |
|
CVE-2026-90522
A vulnerability was determined in jaychouchannel Tourism-Management-System up to d984d172dceca907f8b447efbdb06dc233f7938d. Impacted is the function resetPass of the file...
|
7.3 High | — | 0,50% | 13 Sep 2026 |
|
CVE-2026-90781
alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name=...
|
4.4 Medium | — | 0,17% | 13 Sep 2026 |
|
CVE-2026-90782
S2OPC through 1.7.3 contains a null pointer dereference in msg_subscription_publish_bs__alloc_notification_message_items() where a failed allocation for DataChangeNotific...
|
5.3 Medium | — | 0,57% | 13 Sep 2026 |
|
CVE-2026-90783
MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers...
|
7.8 High | — | 0,20% | 13 Sep 2026 |
|
CVE-2026-90520
A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293bb7b477efa64. This vulnerability affects unknown code of the...
|
6.3 Medium | — | 0,37% | 13 Sep 2026 |
|
CVE-2026-90521
A vulnerability was found in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. This issue affects some unknown processing of the fi...
|
6.3 Medium | — | 0,39% | 13 Sep 2026 |
|
CVE-2026-90519
A weakness has been identified in PHPGurukul Bank Locker Management System 1.0. Affected is an unknown function of the file /blms/banker/add-locker-form.php. This manipul...
|
6.3 Medium | — | 0,37% | 13 Sep 2026 |
|
CVE-2026-90780
SIPp through 3.7.7 contains a buffer overflow vulnerability in the get_header() function in src/sip_parser.cpp when processing SIP messages with header content exceeding...
|
7.5 High | — | 0,86% | 13 Sep 2026 |
|
CVE-2026-90775
PostGIS address_standardizer through 3.7.0 fails to validate the Weight parameter from caller-supplied rules tables before using it as an array index. Attackers can craft...
|
6.5 Medium | — | 0,63% | 13 Sep 2026 |
|
CVE-2026-90776
Nodemailer versions 9.1.0 through 10.0.4 contain a quadratic time complexity vulnerability in the addressparser component when parsing email addresses with RFC 5322 comme...
|
7.5 High | — | 0,68% | 13 Sep 2026 |
|
CVE-2026-90777
ESPnet before 202609 deserializes pretrained model checkpoints using torch.load with weights_only=False, allowing arbitrary code execution from attacker-supplied files. A...
|
8.8 High | — | 0,73% | 13 Sep 2026 |
|
CVE-2026-90778
SIPp through 3.7.7 contains a buffer overflow vulnerability in get_peer_tag() function when processing SIP To headers with tag parameters of 2049 bytes or more. Unauthent...
|
7.5 High | — | 0,86% | 13 Sep 2026 |
|
CVE-2026-90779
SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm parameters....
|
7.5 High | — | 0,80% | 13 Sep 2026 |
|
CVE-2026-90517
A vulnerability was identified in PHPGurukul Bank Locker Management System 1.0. This affects an unknown function of the file /blms/view-assign-locker.php. The manipulatio...
|
5.3 Medium | — | 0,57% | 13 Sep 2026 |
|
CVE-2026-90518
A security flaw has been discovered in PHPGurukul Bank Locker Management System 1.0. This impacts an unknown function of the file sidebar.php. The manipulation of the arg...
|
6.3 Medium | — | 0,37% | 13 Sep 2026 |
|
CVE-2026-90515
A vulnerability was determined in SourceCodester School Registration and Fee System 1.0. The impacted element is an unknown function of the file /bilal/normal/delete_stud...
|
7.3 High | — | 0,43% | 13 Sep 2026 |
|
CVE-2026-90516
A vulnerability was found in SourceCodester School Registration and Fee System 1.0. The affected element is an unknown function of the file /bilal/normal/pay_report.php....
|
7.3 High | — | 0,43% | 13 Sep 2026 |
|
CVE-2026-90774
rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape checks. At...
|
7.5 High | — | 0,56% | 13 Sep 2026 |
|
CVE-2026-90768
CAPEv2 through commit 471ee4b fails to validate task ownership in REST API endpoints, allowing authenticated users to read and delete analyses submitted by other users. A...
|
8.1 High | — | 0,43% | 13 Sep 2026 |
|
CVE-2026-90769
Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal se...
|
7.7 High | — | 0,42% | 13 Sep 2026 |
|
CVE-2026-90770
Spug through 3.4.0 contains a remote code execution vulnerability in the ping_check function that interpolates user-supplied monitor addresses directly into shell command...
|
8.8 High | — | 1,3% | 13 Sep 2026 |
|
CVE-2026-90771
joi before versions 17.13.8 and 18.2.9 contains a prototype pollution vulnerability in the messages compilation function that accepts __proto__ as an error code. Attacker...
|
3.7 Low | — | 0,39% | 13 Sep 2026 |
|
CVE-2026-90772
Amundsen frontend through 4.3.0 renders table, dashboard, and feature descriptions with dangerouslySetInnerHTML without HTML sanitization in ResourceListItem components....
|
7.6 High | — | 0,36% | 13 Sep 2026 |
|
CVE-2026-90773
procs through 0.14.12 fails to sanitize escape sequences in process command lines before displaying them in the Command column. Local attackers can execute processes with...
|
3.2 Low | — | 0,15% | 13 Sep 2026 |
|
CVE-2026-90767
Froxlor before 2.3.12 fails to properly validate multi-line SSH public keys in the SshKeys::add() endpoint, allowing customers to inject arbitrary lines into authorized_k...
|
6.5 Medium | — | 0,43% | 13 Sep 2026 |
|
CVE-2026-90511
A vulnerability was detected in GongShengyue OnlineBooks up to dfc5eacc08d3b0396c266049548618f6fb9587ea. This vulnerability affects unknown code of the file src/cn/ylcto/...
|
6.3 Medium | — | 0,32% | 13 Sep 2026 |
|
CVE-2026-90513
A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of the file tem...
|
6.5 Medium | — | 0,76% | 13 Sep 2026 |
|
CVE-2026-90514
A vulnerability has been found in SourceCodester School Registration and Fee System 1.0. Impacted is an unknown function of the file /bilal/normal/save_stud.php. Such man...
|
7.3 High | — | 0,43% | 13 Sep 2026 |
|
CVE-2026-90561
Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-site scripting vulnerability in the content manager WYSIWYG preview component that fails t...
|
8.7 High | — | 0,43% | 13 Sep 2026 |
|
CVE-2026-90562
LangBot before 4.10.11 generates password recovery keys with only 24 bits of entropy and applies no rate limiting to the unauthenticated reset-password endpoint. Remote a...
|
8.1 High | — | 0,74% | 13 Sep 2026 |
|
CVE-2026-90510
A security vulnerability has been detected in dromara orion-visor up to 2.5.7. This affects the function HostKeyServiceImpl.encryptKey of the file orion-visor-modules/ori...
|
8.3 High | — | 0,50% | 13 Sep 2026 |