Katalog CVE (hal. 5059)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.538 (Critical 35.913 · High 103.408 · KEV 1.745 · sejak 2020) · Pembaruan terakhir: 16 Okt 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 252.901–252.950 dari 258.538 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2017-18662 google android An issue was discovered on Samsung mobile devices with M(6.0) and N(7.x) software. Data outside of the rkp log buffer boundary is read, causing an information leak. The S...	7.5 High	—	0,41%	7 Apr 2020
CVE-2017-18663 google android An issue was discovered on Samsung mobile devices with N(7.x) software. Because of missing Intent exception handling, system_server can have a NullPointerException with a...	7.5 High	—	0,42%	7 Apr 2020
CVE-2020-11608 linux kernel, canonical ubuntu linux An issue was discovered in the Linux kernel before 5.6.1. drivers/media/usb/gspca/ov519.c allows NULL pointer dereferences in ov511_mode_init_regs and ov518_mode_init_reg...	4.3 Medium	—	0,53%	7 Apr 2020
CVE-2020-5734 solarwinds dameware Classic buffer overflow in SolarWinds Dameware allows a remote, unauthenticated attacker to cause a denial of service by sending a large 'SigPubkeyLen' during ECDH key ex...	7.5 High	—	25,1%	7 Apr 2020
CVE-2020-7613 clamscan project clamscan clamscan through 1.2.0 is vulnerable to Command Injection. It is possible to inject arbitrary commands as part of the `_is_clamav_binary` function located within `Index.j...	8.1 High	—	2,1%	7 Apr 2020
CVE-2020-7614 npm-programmatic project npm-programmatic npm-programmatic through 0.0.12 is vulnerable to Command Injection.The packages and option properties are concatenated together without any validation and are used by the...	9.8 Critical	—	3,6%	7 Apr 2020
CVE-2020-7615 fsa project fsa fsa through 0.5.1 is vulnerable to Command Injection. The first argument of 'execGitCommand()', located within 'lib/rep.js#63' can be controlled by users without any sani...	7.8 High	—	1,1%	7 Apr 2020
CVE-2020-7616 express-mock-middleware project express-mock-middleware express-mock-middleware through 0.0.6 is vulnerable to Prototype Pollution. Exported functions by the package can be tricked into adding or modifying properties of the `O...	5.3 Medium	—	1,3%	7 Apr 2020
CVE-2020-7618 sds project sds sds through 3.2.0 is vulnerable to Prototype Pollution.The library could be tricked into adding or modifying properties of the 'Object.prototype' by abusing the 'set' fun...	5.3 Medium	—	1,1%	7 Apr 2020
CVE-2017-18692 google android An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (MSM8939, MSM8996, MSM8998, Exynos7580, Exynos8890, or Exynos8895 chipsets) software. There is a...	8.1 High	—	0,31%	7 Apr 2020
CVE-2017-18693 google android An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. There is a buffer overflow in the fps sysfs entry. The Samsung ID...	9.8 Critical	—	0,44%	7 Apr 2020
CVE-2017-18694 google android An issue was discovered on Samsung mobile devices with software through 2016-10-25 (Exynos5 chipsets). Attackers can read kernel addresses in the log because an incorrect...	5.3 Medium	—	0,34%	7 Apr 2020
CVE-2017-18695 google android An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), M(6.0), and N(7.0) software. Attackers (who control a certain subdomain) can discover a user's...	6.5 Medium	—	0,33%	7 Apr 2020
CVE-2017-18696 google android An issue was discovered on Samsung mobile devices with M(6.0) and N(7.0) (Exynos7420, Exynos8890, or MSM8996 chipsets) software. RKP allows memory corruption. The Samsung...	9.8 Critical	—	0,44%	7 Apr 2020
CVE-2016-11030 google android An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (with Hrm sensor support) software. The sysfs of the MAX86902 sensor driver does no...	8.1 High	—	0,31%	7 Apr 2020
CVE-2016-11031 google android An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. AntService allows a system_server crash and reboot. The Samsung ID is SVE...	7.5 High	—	0,42%	7 Apr 2020
CVE-2016-11032 google android An issue was discovered on Samsung mobile devices with M(6.0) software. An attacker can disable all Sound functionality by broadcasting an unprotected intent. The Samsung...	5.3 Medium	—	0,30%	7 Apr 2020
CVE-2016-11033 google android An issue was discovered on Samsung mobile devices with M(6.0) software. There is a heap-based buffer overflow in tlc_server. The Samsung IDs are SVE-2016-7220 and SVE-201...	9.8 Critical	—	0,44%	7 Apr 2020
CVE-2016-11034 google android An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. The decode function in Qjpeg in Qt 5.7 allows attackers to trigger a system crash v...	6.5 Medium	—	0,35%	7 Apr 2020
CVE-2016-11035 google android An issue was discovered on Samsung mobile devices with software through 2016-05-27 (Exynos AP chipsets). A local graphics user can cause a Kernel Crash via the fb0(DECON)...	5.5 Medium	—	0,13%	7 Apr 2020
CVE-2016-11036 google android An issue was discovered on Samsung mobile devices with M(6.0) software. There is a Factory Reset Protection (FRP) bypass. The Samsung ID is SVE-2016-6008 (August 2016).	9.8 Critical	—	0,44%	7 Apr 2020
CVE-2016-11038 google android An issue was discovered on Samsung mobile devices with software through 2016-04-05 (incorporating the Samsung Professional Audio SDK). The Jack audio service doesn't impl...	9.8 Critical	—	0,91%	7 Apr 2020
CVE-2016-11039 google android An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) (AP + CP MDM9x35, or Qualcomm Onechip) software. There is a NULL pointer dereferenc...	7.5 High	—	0,51%	7 Apr 2020
CVE-2016-11040 google android An issue was discovered on Samsung mobile devices with L(5.0/5.1) (with USB OTG MyFile2014_L_ESS support) software. There is a Factory Reset Protection (FRP) bypass. The...	4.6 Medium	—	0,13%	7 Apr 2020
CVE-2016-11025 google android An issue was discovered on Samsung mobile devices with software through 2016-09-13 (Exynos AP chipsets). There is a memcpy heap-based buffer overflow in the OTP service....	9.8 Critical	—	0,44%	7 Apr 2020
CVE-2016-11026 google android An issue was discovered on Samsung mobile devices with KK(4.4), L(5.0/5.1), and M(6.0) software. BootReceiver allows attackers to trigger a system crash because of incorr...	7.5 High	—	0,42%	7 Apr 2020
CVE-2016-11027 google android An issue was discovered on Samsung mobile devices with M(6.0) software. In the Shade Locked state, a physically proximate attacker can read notifications on the lock scre...	2.4 Low	—	0,14%	7 Apr 2020
CVE-2016-11028 google android An issue was discovered on Samsung mobile devices with software through 2016-09-13 (Exynos AP chipsets). There is a stack-based buffer overflow in the OTP TrustZone trust...	9.8 Critical	—	0,44%	7 Apr 2020
CVE-2016-11029 google android An issue was discovered on Samsung mobile devices with L(5.0/5.1), M(6.0), and N(7.0) software. Attackers can read the password of the Mobile Hotspot in the log because o...	7.5 High	—	0,40%	7 Apr 2020
CVE-2016-11047 google android An issue was discovered on Samsung mobile devices with JBP(4.2) and KK(4.4) (Marvell chipsets) software. The ACIPC-MSOCKET driver allows local privilege escalation via a...	7.8 High	—	0,14%	7 Apr 2020
CVE-2016-11048 google android An issue was discovered on Samsung mobile devices with L(5.0/5.1) (Spreadtrum or Marvell chipsets) software. There is a Factory Reset Protection (FRP) bypass. The Samsung...	4.6 Medium	—	0,13%	7 Apr 2020
CVE-2016-11049 google android An issue was discovered on Samsung mobile devices with software through 2016-01-16 (Shannon333/308/310 chipsets). The IMEI may be retrieved and modified because of an err...	9.1 Critical	—	0,40%	7 Apr 2020
CVE-2016-11050 samsung s5 firmware, samsung note3 firmware +3 lainnya An issue was discovered on Samsung mobile devices with S3(KK), Note2(KK), S4(L), Note3(L), and S5(L) software. An attacker can rewrite the IMEI by flashing crafted firmwa...	4.3 Medium	—	0,28%	7 Apr 2020
CVE-2016-11052 google android An issue was discovered on Samsung mobile devices with L(5.0/5.1) software. je_free in libQjpeg.so in Qjpeg in Qt 5.5 allows memory corruption via a malformed JPEG file....	7.8 High	—	0,30%	7 Apr 2020
CVE-2016-11053 google android An issue was discovered on Samsung mobile devices with software through 2015-11-11 (supporting FRP/RL). There is a Factory Reset Protection (FRP) bypass. The Samsung ID i...	4.6 Medium	—	0,13%	7 Apr 2020
CVE-2020-2172 jenkins code coverage api Jenkins Code Coverage API Plugin 1.1.4 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.	6.5 Medium	—	1,1%	7 Apr 2020
CVE-2020-2173 jenkins gatling Jenkins Gatling Plugin 1.2.7 and earlier prevents Content-Security-Policy headers from being set for Gatling reports served by the plugin, resulting in an XSS vulnerabili...	5.4 Medium	—	0,71%	7 Apr 2020
CVE-2020-2174 jenkins awseb deployment Jenkins AWSEB Deployment Plugin 0.3.19 and earlier does not escape various values printed as part of form validation output, resulting in a reflected cross-site scripting...	6.1 Medium	—	0,82%	7 Apr 2020
CVE-2020-2175 jenkins fitnesse Jenkins FitNesse Plugin 1.31 and earlier does not correctly escape report contents before showing them on the Jenkins UI, resulting in a stored cross-site scripting (XSS)...	5.4 Medium	—	0,71%	7 Apr 2020
CVE-2020-2176 jenkins usemango runner Multiple form validation endpoints in Jenkins useMango Runner Plugin 1.4 and earlier do not escape values received from the useMango service, resulting in a cross-site sc...	5.4 Medium	—	0,71%	7 Apr 2020
CVE-2020-6171 communilink clink office A cross-site scripting (XSS) vulnerability in the index page of the CLink Office 2.0 management console allows remote attackers to inject arbitrary web script or HTML via...	6.1 Medium	—	4,8%	7 Apr 2020
CVE-2016-11041 google android An issue was discovered on Samsung mobile devices with KK(4.4) software. Attackers can bypass the lockscreen by sending an AT command over USB. The Samsung ID is SVE-2015...	4.6 Medium	—	0,14%	7 Apr 2020
CVE-2016-11042 google android An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) software. There is a SIM Lock bypass. The Samsung ID is SVE-2016-5381 (June 2016).	7.5 High	—	0,41%	7 Apr 2020
CVE-2016-11043 google android An issue was discovered on Samsung mobile devices with M(6.0) software. The S/MIME implementation in EAS uses DES (where 3DES is intended). The Samsung ID is SVE-2016-587...	7.5 High	—	0,22%	7 Apr 2020
CVE-2016-11044 google android An issue was discovered on Samsung mobile devices with L(5.0/5.1) and M(6.0) (with Fingerprint support) software. The check of an application's signature can be bypassed...	7.8 High	—	0,09%	7 Apr 2020
CVE-2016-11045 google android An issue was discovered on Samsung mobile devices with L(5.0/5.1) software. The Gallery library allow memory corruption via a malformed image. The Samsung ID is SVE-2016-...	7.8 High	—	0,30%	7 Apr 2020
CVE-2016-11046 google android An issue was discovered on Samsung mobile devices with JBP(4.3), KK(4.4), and L(5.0/5.1) software. Because of a misused whitelist, attackers can reach the radio layer (ak...	7.5 High	—	0,35%	7 Apr 2020
CVE-2020-8096 bitdefender antimalware software development kit Untrusted Search Path vulnerability in Bitdefender High-Level Antimalware SDK for Windows allows an attacker to load third party code from a DLL library in the search pat...	5.3 Medium	—	0,28%	7 Apr 2020
CVE-2020-11586 cipplanner cipace An XXE issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request that contains malicious XML DTD data.	9.8 Critical	—	1,2%	6 Apr 2020
CVE-2020-11587 cipplanner cipace An issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make an API request and get the content of ETL Processes running on the...	7.5 High	—	1,2%	6 Apr 2020

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.