Katalog CVE (hal. 404)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 262.594 (Critical 36.242 · High 104.951 · KEV 1.754 · sejak 2020) · Pembaruan terakhir: 23 Okt 2026, 00:26 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 20.151–20.200 dari 262.594 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2023-24291 Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter.	2.9 Low	—	0,13%	14 Sep 2026
CVE-2023-24284 Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the is_markable() function.	2.9 Low	—	0,13%	14 Sep 2026
CVE-2026-90680 A security flaw has been discovered in D-Link DIR-823G 1.0.2B05_20181207. The impacted element is the function strcpy of the file /HNAP1/SetStaticRouteSettings of the com...	9.9 Critical	—	0,91%	14 Sep 2026
CVE-2026-90623 A weakness has been identified in andreashappe cochise up to 0.4.1. Affected is the function asyncssh.connect of the file src/cochise/ssh_connection.py of the component S...	3.7 Low	—	0,28%	14 Sep 2026
CVE-2026-90621 A vulnerability was identified in ipa-lab HackingBuddyGPT up to 0.5.0. This affects the function ssh_run_command of the file src/hackingBuddyGPT/extensions/ssh_run_comman...	6.3 Medium	—	1,8%	14 Sep 2026
CVE-2026-90622 A security flaw has been discovered in GNU libredwg 0.13.4. This impacts the function DWG_TABLE of the file src/dwg.spec of the component Layer Encoding. Performing a man...	3.3 Low	—	0,17%	14 Sep 2026
CVE-2023-24283 Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which allows attackers to cause a Denial of Service (DoS) via a crafted sav...	2.9 Low	—	0,13%	14 Sep 2026
CVE-2023-24034 An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.3. An attacker can force a user to visit a malicious site by using a open redirect vulnerabilit...	3.1 Low	—	0,53%	14 Sep 2026
CVE-2023-24035 An issue was discovered in Nagios XI before 5.9.3. The is_insecure_login_authenticated function uses a insecure timing comparison that leads to an attacker being able to...	3.5 Low	—	0,77%	14 Sep 2026
CVE-2023-22632 PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor.	2.7 Low	—	0,22%	14 Sep 2026
CVE-2023-22631 PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor.	2.7 Low	—	0,22%	14 Sep 2026
CVE-2026-90617 A vulnerability was detected in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This vulnerability affects the function run_task of the file interf...	7.3 High	—	2,1%	14 Sep 2026
CVE-2026-90618 A flaw has been found in GH05TCREW PentestAgent up to cf882dabea3ed91cef016cdd115e5426315665a2. This issue affects the function LocalRuntime.execute_command of the file r...	7.3 High	—	2,1%	14 Sep 2026
CVE-2026-90619 A vulnerability has been found in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. Impacted is an unknown function of the file hexstrike_server.py of th...	7.3 High	—	2,1%	14 Sep 2026
CVE-2026-90620 A vulnerability was determined in 0x4m4 HexStrike AI up to d689933ff579d839c676c82b231f8e98326c5f04. The impacted element is an unknown function of the file hexstrike_ser...	7.3 High	—	0,65%	14 Sep 2026
CVE-2026-33966 An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. An information Leak occurs in the camera driver d...	2.8 Low	—	0,13%	14 Sep 2026
CVE-2026-33967 An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, an out-of-bounds array acce...	2.8 Low	—	0,12%	14 Sep 2026
CVE-2026-33968 An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. In the camera driver, a Time-of-Check Time-of-Use...	2.8 Low	—	0,12%	14 Sep 2026
CVE-2026-33970 An issue was discovered in NR RRC and L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500...	3.5 Low	—	0,32%	14 Sep 2026
CVE-2026-38924 In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard"...	2.9 Low	—	0,16%	14 Sep 2026
CVE-2026-90615 A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /subject1.php. Such manipulat...	4.3 Medium	—	0,47%	14 Sep 2026
CVE-2026-90610 A vulnerability was found in GPAC up to f1219cde. This affects the function gf_svg_attributes_copy of the file scenegraph/svg_attributes.c of the component MP4Box. Perfor...	3.3 Low	—	0,17%	14 Sep 2026
CVE-2026-90611 A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmt_parse_element of the file scene_manager/loader_xmt.c of the component MP4Box. Executi...	3.3 Low	—	0,17%	14 Sep 2026
CVE-2026-90612 A vulnerability was identified in GPAC up to f1219cde. Affected is the function gf_sm_dump_command_list of the file scene_manager/scene_dump.c of the component MP4Box. Th...	3.3 Low	—	0,17%	14 Sep 2026
CVE-2026-90613 A security flaw has been discovered in GPAC up to f1219cde. Affected by this vulnerability is the function stbl_GetSampleInfos of the file isomedia/stbl_read.c of the com...	3.3 Low	—	0,17%	14 Sep 2026
CVE-2026-90614 A weakness has been identified in FedML-AI FedML up to 0.9.6. Affected by this issue is the function S3Storage.read_model of the file fedml/core/distributed/communication...	6.3 Medium	—	0,43%	14 Sep 2026
CVE-2026-31278 An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers to obtain Active Directory ser...	7.7 High	—	0,28%	14 Sep 2026
CVE-2026-33956 An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Sending a malformed message to the test_msg sysfs entry cause...	2.8 Low	—	0,12%	14 Sep 2026
CVE-2026-33957 An issue was discovered in CustOS Driver in Samsung Mobile Processor Exynos 1580. Requesting oversized shared memory from the custos_iwc device enables out-of-bounds read...	4.2 Medium	—	0,13%	14 Sep 2026
CVE-2026-33960 An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000. . A malformed ioctl command to the...	2.8 Low	—	0,12%	14 Sep 2026
CVE-2026-33962 An issue was discovered in Wi-Fi in Samsung Mobile Processor Exynos 850, 1280, 1330, 1380, 1480, 2400, W920, and W930. A malformed Netlink command can trigger an out-of-b...	2.8 Low	—	0,13%	14 Sep 2026
CVE-2026-33963 An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. A stack-based buffer overflow occurs when a malfo...	7.5 High	—	0,15%	14 Sep 2026
CVE-2026-33964 An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 2500. An untrusted pointer dereference occurs when a malformed message is sent to the camera...	6.4 Medium	—	0,13%	14 Sep 2026
CVE-2026-23788 An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, and 1380. A heap overflow in the Exynos DRM HDR driver (due to improper buffer size validati...	4.2 Medium	—	0,10%	14 Sep 2026
CVE-2026-23789 An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920...	7.8 High	—	0,11%	14 Sep 2026
CVE-2026-23790 An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A double-free vulnerability in the Samsung Exy...	4.2 Medium	—	0,09%	14 Sep 2026
CVE-2026-23791 An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. An out-of-bounds write vulnerability in the Ex...	4.2 Medium	—	0,09%	14 Sep 2026
CVE-2026-23792 An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, Modem 5400,...	4.0 Medium	—	0,13%	14 Sep 2026
CVE-2026-23793 An issue was discovered in Samsung Mobile Processor Exynos 1330, 1380, 1480, and 2400. An out-of-bounds memory access vulnerability in the camera GDC driver may lead to k...	3.5 Low	—	0,20%	14 Sep 2026
CVE-2026-90608 A flaw has been found in Totolink A3002MU Hh-B20211125.1046. The affected element is the function formPortFw of the file /boafrm/formPortFw of the component boa. This man...	9.9 Critical	—	0,85%	14 Sep 2026
CVE-2026-90609 A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrml_tools.c of the component MP4Box. Such manip...	3.3 Low	—	0,17%	14 Sep 2026
CVE-2026-90607 A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule of the file /boafrm/formNewSchedule of the component boa. The...	9.9 Critical	—	0,85%	14 Sep 2026
CVE-2025-68624 N-able Mail Assure through April 2026 contains a design-level authorization flaw that allows an authenticated SMTP user to send outbound email using MAIL FROM addresses b...	4.3 Medium	—	0,33%	14 Sep 2026
CVE-2026-23786 An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A TOCTOU race condition in the Exynos DRM HDR...	2.8 Low	—	0,08%	14 Sep 2026
CVE-2026-23787 An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A Use-After-Free in the Exynos DRM HDR driver...	4.2 Medium	—	0,09%	14 Sep 2026
CVE-2025-64031 libarchive 3.8.x before 3.8.2 has a strcpy heap-based buffer overflow in the gzip writer via the original-filename field to archive_compressor_gzip_open in archive_write_...	2.5 Low	—	0,18%	14 Sep 2026
CVE-2026-90604 A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. This affects an unknown part of the component Anchor Tag Handler. Performing a manipulation res...	3.5 Low	—	0,35%	14 Sep 2026
CVE-2026-90605 A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. This vulnerability affects the function formFilter of the file /boafrm/formFilter of the component b...	9.9 Critical	—	0,85%	14 Sep 2026
CVE-2026-90606 A security vulnerability has been detected in Totolink A3002MU Hh-B20211125.1046. This issue affects the function formIpv6Setup of the file /boafrm/formIpv6Setup of the c...	9.9 Critical	—	0,85%	14 Sep 2026
CVE-2025-63842 A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user to execute arbitrary JavaScript...	5.4 Medium	—	0,23%	14 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.