Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-100130
Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-100129
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re...
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-100128
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re...
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-100127
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re...
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-100126
Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sen...
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-100112
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th...
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-100111
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th...
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-90532
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potenti...
|
10.0 Critical | — | — | 13 Okt 2026 |
|
CVE-2026-90531
Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in privilege escalation. A low-pr...
|
9.6 Critical | — | — | 13 Okt 2026 |
|
CVE-2026-86022
VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in double quotes and substitutes it into a command string...
|
7.0 High | — | — | 13 Okt 2026 |
|
CVE-2026-86016
VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment `preNode.innerHTML = p_metaData` in src/data/extra/web/js/markdownit.js to insert YAML frontmat...
|
8.2 High | — | — | 13 Okt 2026 |
|
CVE-2026-83960
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-83958
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-83662
Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts int...
|
9.3 Critical | — | — | 13 Okt 2026 |
|
CVE-2026-75732
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potenti...
|
9.9 Critical | — | — | 13 Okt 2026 |
|
CVE-2026-70098
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-63174
Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a space administrator to assign users into spaces outside their authorit...
|
8.1 High | — | — | 13 Okt 2026 |
|
CVE-2026-63172
Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a regular, non-administrative member to create user accounts by invoking...
|
7.1 High | — | — | 13 Okt 2026 |
|
CVE-2026-63165
Omnispace Agora Project before 26.10.0 contains a SQL injection vulnerability in the calendar functionality that allows attackers to inject malicious SQL by manipulating...
|
8.1 High | — | — | 13 Okt 2026 |
|
CVE-2026-63163
Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route that allows unauthenticated attackers to download ar...
|
7.5 High | — | — | 13 Okt 2026 |
|
CVE-2026-63162
Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary files outside the intended temporary directory by...
|
8.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-63161
Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known session...
|
8.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-63160
Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me token is stored verbatim server-side, making the stored value identical t...
|
7.4 High | — | — | 13 Okt 2026 |
|
CVE-2026-63159
Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthenticated attackers to take over user accounts by compu...
|
7.4 High | — | — | 13 Okt 2026 |
|
CVE-2026-63158
Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows attackers possessing a user's stored bcrypt password hash to authentica...
|
7.4 High | — | — | 13 Okt 2026 |
|
CVE-2026-63154
Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability that allows a space administrator to escalate privileges by supplying caller-cont...
|
8.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-63153
Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectations() that allows authenticated attackers to insert access-right reco...
|
8.1 High | — | — | 13 Okt 2026 |
|
CVE-2026-63152
Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allows authenticated attackers to inject malicious SQL via the _idCategory...
|
8.1 High | — | — | 13 Okt 2026 |
|
CVE-2026-63149
Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerability that allows attackers to predict temporary or default account passwords generated by...
|
7.4 High | — | — | 13 Okt 2026 |
|
CVE-2026-63148
Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject HTML/script markup by uploading...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-63147
Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious script by uploading a file...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-63146
Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled values are written into the config.inc.php configurati...
|
9.8 Critical | — | — | 13 Okt 2026 |
|
CVE-2026-56826
Shopper is a Headless e-commerce Admin Panel. From 2.0.0 until 2.9.2, authenticated users who could reach the Settings pages with only access_setting could directly invok...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-55601
MultiTail is a utility for monitoring multiple log files in one terminal. In version 7.1.5 and earlier, the -ex and -eX execute-on-match feature appended attacker-control...
|
7.3 High | — | — | 13 Okt 2026 |
|
CVE-2026-48398
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-48383
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potenti...
|
10.0 Critical | — | — | 13 Okt 2026 |
|
CVE-2026-48382
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potenti...
|
10.0 Critical | — | — | 13 Okt 2026 |
|
CVE-2026-110084
Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Injection) vulnerability that could result in a Security feature bypass. A low-privileged attack...
|
7.1 High | — | — | 13 Okt 2026 |
|
CVE-2026-110083
Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Secur...
|
7.1 High | — | — | 13 Okt 2026 |
|
CVE-2026-110082
Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL ref...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-110081
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-110080
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-110079
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-110078
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-110077
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-110076
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-110075
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-110074
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-110073
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-110037
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...
|
5.4 Medium | — | — | 13 Okt 2026 |