Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR
·
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2023-54355
PocketMine-MP versions before 5.3.1 and 4.23.1 fail to validate that the identityPublicKey in LoginPacket uses the required secp384r1 elliptic curve. Attackers can provid...
|
7.5 High | — | 0,22% | 9 Sep 2026 |
|
CVE-2023-54390
PocketMine-MP versions before 5.3.1 and 4.23.1 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper null value handling in arrays. Attack...
|
7.5 High | — | 0,34% | 9 Sep 2026 |
|
CVE-2023-54392
PocketMine-MP versions >= 4.20.0 before 4.22.3 (and before 5.2.1 in the 5.x branch) fail to validate NBT tag types in BlockActorDataPacket. A player can crash the server...
|
6.5 Medium | — | 0,38% | 9 Sep 2026 |
|
CVE-2023-54393
PocketMine-MP versions before 4.20.5 contain a denial of service vulnerability in LoginPacket JSON parsing due to improper validation in the JsonMapper dependency. Attack...
|
7.5 High | — | 0,35% | 9 Sep 2026 |
|
CVE-2023-54394
PocketMine-MP before 4.18.0-ALPHA2 fails to rate-limit mismatch type InventoryTransactionPacket requests, allowing attackers to trigger excessive inventory synchronizatio...
|
4.3 Medium | — | 0,38% | 9 Sep 2026 |
|
CVE-2023-54395
PocketMine-MP versions before 4.12.5 contain a denial-of-service vulnerability in ModalFormResponsePacket processing that allows attackers to cause server resource exhaus...
|
4.3 Medium | — | 0,33% | 9 Sep 2026 |
|
CVE-2023-54396
PocketMine-MP versions before 4.8.1 fail to validate dye color IDs in banner NBT data during deserialization. Attackers can provide invalid color values in inventory tran...
|
6.5 Medium | — | 0,38% | 9 Sep 2026 |
|
CVE-2026-85102
Advisory
checkpoint gaia embedded, checkpoint gaia os
Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote attacker to execute arbitrary cod...
|
9.8 Critical | KEV | 54,2% | 9 Sep 2026 |
|
CVE-2026-85103
A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Mana...
|
9.8 Critical | — | 4,3% | 9 Sep 2026 |
|
CVE-2026-80169
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log Fil...
|
3.3 Low | — | 0,14% | 9 Sep 2026 |
|
CVE-2026-79965
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State Data vulnera...
|
5.3 Medium | — | 0,35% | 9 Sep 2026 |
|
CVE-2026-79966
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log Fil...
|
3.3 Low | — | 0,14% | 9 Sep 2026 |
|
CVE-2026-79968
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use (TOCTOU) Race Conditio...
|
5.9 Medium | — | 0,23% | 9 Sep 2026 |
|
CVE-2026-79969
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with...
|
5.9 Medium | — | 0,31% | 9 Sep 2026 |
|
CVE-2026-79728
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauth...
|
6.5 Medium | — | 0,33% | 9 Sep 2026 |
|
CVE-2026-79961
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vul...
|
5.3 Medium | — | 0,40% | 9 Sep 2026 |
|
CVE-2026-79962
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with...
|
5.9 Medium | — | 0,31% | 9 Sep 2026 |
|
CVE-2026-79638
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Alternate XSS Syntax...
|
5.3 Medium | — | 0,34% | 9 Sep 2026 |
|
CVE-2026-79694
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information Into Debuggi...
|
5.5 Medium | — | 0,14% | 9 Sep 2026 |
|
CVE-2026-15140
A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift (OCP). Only under specific conditions during the initial provisioning of a Portwo...
|
7.7 High | — | 0,21% | 9 Sep 2026 |
|
CVE-2026-87819
gitpython project gitpython
GitPython before 3.1.60 contains a regular expression denial of service vulnerability in Actor.name_email_regex that processes commit author and committer fields. Attacke...
|
7.5 High | — | 0,52% | 9 Sep 2026 |
|
CVE-2026-87820
CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugging endpoints that disclose administrator usernames, API-key prefixes, scan identifiers, t...
|
5.3 Medium | — | 0,87% | 9 Sep 2026 |
|
CVE-2026-87821
Lara Dashboard through 1.3.1 contains a server-side request forgery vulnerability in the POST /api/admin/builder/markdown/fetch endpoint that allows any authenticated use...
|
7.1 High | — | 0,47% | 9 Sep 2026 |
|
CVE-2026-87812
SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in Bazaar package cards where the iconURL metadata is inserted directly into HTML img src attrib...
|
6.8 Medium | — | 0,36% | 9 Sep 2026 |
|
CVE-2026-87813
SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in the Search Assets result list where asset filenames are interpolated into HTML without escapi...
|
7.3 High | — | 0,37% | 9 Sep 2026 |
|
CVE-2026-87814
SiYuan before v3.8.2 contains a stored cross-site scripting vulnerability in the search asset preview feature that fails to escape indexed asset content before inserting...
|
7.3 High | — | 0,37% | 9 Sep 2026 |
|
CVE-2026-87815
SiYuan versions before v3.8.2 contain a path traversal vulnerability in the /api/riff/removeRiffDeck endpoint that fails to validate the deckID parameter. An authenticate...
|
8.7 High | — | 0,48% | 9 Sep 2026 |
|
CVE-2026-87816
PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condition in view limit enforcement that allows unauthenticated attackers to bypass expire_after...
|
7.5 High | — | 0,37% | 9 Sep 2026 |
|
CVE-2026-87817
gitpython project gitpython
GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git directory using tracked files like gitdir, common...
|
8.8 High | — | 0,40% | 9 Sep 2026 |
|
CVE-2026-87818
gitpython project gitpython
GitPython 3.1.59 fails to restrict the --no-index option in the high-level diff API, allowing attackers to read arbitrary filesystem paths as repository operands. Attacke...
|
6.5 Medium | — | 0,41% | 9 Sep 2026 |
|
CVE-2026-87806
Parse Server versions <= 8.6.87 and >= 9.0.0 < 9.10.1-alpha.7 contain an authentication bypass in the built-in LDAP authentication adapter. The adapter forwarded the clie...
|
7.4 High | — | 0,51% | 9 Sep 2026 |
|
CVE-2026-87807
siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint's method=1 query parameter. Attackers can inject UN...
|
7.5 High | — | 0,45% | 9 Sep 2026 |
|
CVE-2026-87808
SiYuan versions <= 3.8.1 contain an incomplete fix for CVE-2026-32767 (GHSA-j7wh-x834-p3r7). The prior fix (commit d5e2d0bc) added an administrator check for SQL mode (me...
|
4.9 Medium | — | 0,44% | 9 Sep 2026 |
|
CVE-2026-87809
Siyuan before v3.8.2 fails to apply publish-access filtering to embedded blocks before rendering in the /api/export/preview and /api/lute/copyStdMarkdown endpoints. Attac...
|
6.5 Medium | — | 0,35% | 9 Sep 2026 |
|
CVE-2026-87810
Siyuan before v3.8.2 contains an information disclosure vulnerability in the POST /api/search/fullTextSearchBlock endpoint that filters private blocks from results but re...
|
5.3 Medium | — | 0,34% | 9 Sep 2026 |
|
CVE-2026-87811
SiYuan before v3.8.2 inserts persisted notebook template paths into HTML input value attributes without proper attribute encoding. Attackers can craft malicious template...
|
7.3 High | — | 0,37% | 9 Sep 2026 |
|
CVE-2026-80172
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity...
|
9.8 Critical | — | 0,25% | 9 Sep 2026 |
|
CVE-2026-80171
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Entropy in PRNG vulnerability. A l...
|
4.7 Medium | — | 0,12% | 9 Sep 2026 |
|
CVE-2026-79692
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of File Name or Path vulnerabi...
|
7.3 High | — | 0,33% | 9 Sep 2026 |
|
CVE-2026-79695
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Handling of Highly Compressed Data (Da...
|
7.3 High | — | 0,33% | 9 Sep 2026 |
|
CVE-2026-79730
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use (TOCTOU) Race Conditio...
|
5.6 Medium | — | 0,20% | 9 Sep 2026 |
|
CVE-2026-79963
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Download of Code Without Integrity Check vulnera...
|
7.4 High | — | 0,27% | 9 Sep 2026 |
|
CVE-2026-79970
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Verification of Cryptographic Signatur...
|
5.6 Medium | — | 0,17% | 9 Sep 2026 |
|
CVE-2026-79972
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements use...
|
7.2 High | — | 0,45% | 9 Sep 2026 |
|
CVE-2026-79637
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability....
|
7.7 High | — | 0,25% | 9 Sep 2026 |
|
CVE-2026-78481
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerabili...
|
6.5 Medium | — | 0,34% | 9 Sep 2026 |
|
CVE-2026-78485
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restrict...
|
7.3 High | — | 0,37% | 9 Sep 2026 |
|
CVE-2026-78489
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability....
|
5.9 Medium | — | 0,20% | 9 Sep 2026 |
|
CVE-2026-78490
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Restriction of Excessive Authenticatio...
|
7.5 High | — | 0,50% | 9 Sep 2026 |
|
CVE-2026-78492
dell secure connect gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability....
|
7.4 High | — | 0,24% | 9 Sep 2026 |