Katalog CVE (hal. 454)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 263.042 (Critical 36.325 · High 105.117 · KEV 1.754 · sejak 2020) · Pembaruan terakhir: 24 Okt 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 22.651–22.700 dari 263.042 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-72627 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026
CVE-2026-71565 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026
CVE-2026-71356 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026
CVE-2026-71357 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026
CVE-2026-71388 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,36%	8 Sep 2026
CVE-2026-71440 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,39%	8 Sep 2026
CVE-2026-52486 An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module	6.6 Medium	—	0,09%	8 Sep 2026
CVE-2026-48273 adobe coldfusion ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability that could result in arbitrary code exec...	9.9 Critical	—	1,3%	8 Sep 2026
CVE-2026-49883 google android In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to a missing permission check. This could lead to lo...	5.5 Medium	—	0,17%	8 Sep 2026
CVE-2026-28659 google android xr In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could lead to local escalation of privilege with no addi...	7.8 High	—	0,19%	8 Sep 2026
CVE-2026-27227 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,39%	8 Sep 2026
CVE-2026-19612 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,26%	8 Sep 2026
CVE-2026-19644 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,26%	8 Sep 2026
CVE-2026-19713 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,26%	8 Sep 2026
CVE-2026-19872 HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message. The wrappers and renderers t...	6.1 Medium	—	0,26%	8 Sep 2026
CVE-2026-19479 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,26%	8 Sep 2026
CVE-2026-19232 adobe experience manager Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potenti...	9.9 Critical	—	0,59%	8 Sep 2026
CVE-2025-64866 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,28%	8 Sep 2026
CVE-2025-64868 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,28%	8 Sep 2026
CVE-2025-64584 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,28%	8 Sep 2026
CVE-2025-64588 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,28%	8 Sep 2026
CVE-2025-64589 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,28%	8 Sep 2026
CVE-2025-64610 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,28%	8 Sep 2026
CVE-2025-64618 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,28%	8 Sep 2026
CVE-2025-64830 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,28%	8 Sep 2026
CVE-2025-64838 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,28%	8 Sep 2026
CVE-2025-64854 adobe experience manager Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	0,28%	8 Sep 2026
CVE-2025-64542 adobe experience manager Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	0,26%	8 Sep 2026
CVE-2026-86675 A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/us_edit.php. Such manipulation of the argum...	6.3 Medium	—	0,33%	8 Sep 2026
CVE-2026-86716 A vulnerability was determined in Cesanta mJS up to 1.26. Affected is the function skip_spaces_and_comments of the file src/mjs_tok.c. Executing a manipulation can lead t...	7.3 High	—	0,57%	8 Sep 2026
CVE-2026-86804 A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. This vulnerability affects the function CPAResource of the file apps/manager-server/internal/http...	5.3 Medium	—	0,64%	8 Sep 2026
CVE-2026-86674 A vulnerability was found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerability is the function session_s...	6.3 Medium	—	0,38%	8 Sep 2026
CVE-2026-85384 A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an up...	8.5 High	—	0,32%	8 Sep 2026
CVE-2026-82536 Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing logic that allows attackers to execute denied shell commands by exploit...	8.8 High	—	0,52%	8 Sep 2026
CVE-2026-82537 Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in com...	8.8 High	—	0,47%	8 Sep 2026
CVE-2026-82004 adobe campaign Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result...	10.0 Critical	—	3,3%	8 Sep 2026
CVE-2026-79721 Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an...	8.6 High	—	0,47%	8 Sep 2026
CVE-2026-77774 adobe commerce Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to by...	8.6 High	—	0,83%	8 Sep 2026
CVE-2026-76202 adobe commerce Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain el...	8.2 High	—	0,67%	8 Sep 2026
CVE-2026-77108 adobe commerce Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain el...	7.5 High	—	0,82%	8 Sep 2026
CVE-2026-77109 adobe commerce Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain el...	8.6 High	—	0,69%	8 Sep 2026
CVE-2026-77110 adobe commerce Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypa...	7.6 High	—	1,1%	8 Sep 2026
CVE-2026-77111 adobe commerce Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage thi...	8.7 High	—	0,84%	8 Sep 2026
CVE-2026-76200 adobe magento, adobe commerce Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form field...	9.3 Critical	—	0,74%	8 Sep 2026
CVE-2026-76201 adobe commerce Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form field...	9.3 Critical	—	0,74%	8 Sep 2026
CVE-2026-69646 microsoft skype for business server, microsoft skype for business server subscription edition Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.	8.3 High	—	0,32%	8 Sep 2026
CVE-2026-69642 microsoft skype for business server, microsoft skype for business server subscription edition Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a netw...	6.1 Medium	—	0,41%	8 Sep 2026
CVE-2026-66305 microsoft skype for business server, microsoft skype for business server subscription edition Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.	7.1 High	—	0,53%	8 Sep 2026
CVE-2026-66306 microsoft skype for business server, microsoft skype for business server subscription edition Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.	6.5 Medium	—	0,92%	8 Sep 2026
CVE-2026-66307 microsoft skype for business server, microsoft skype for business server subscription edition Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.	7.5 High	—	1,2%	8 Sep 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.