Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2019-9163
marchnetworks command client
The connection initiation process in March Networks Command Client before 2.7.2 allows remote attackers to execute arbitrary code via crafted XAML objects.
|
9.8 Critical | — | 2,3% | 1 Apr 2020 |
|
CVE-2020-10948
alienform2 project alienform2
Jon Hedley AlienForm2 (typically installed as af.cgi or alienform.cgi) 2.0.2 is vulnerable to Remote Command Execution via eval injection, a different issue than CVE-2002...
|
9.8 Critical | — | 6,7% | 1 Apr 2020 |
|
CVE-2019-11254
kubernetes
The Kubernetes API Server component in versions 1.1-1.14, and versions prior to 1.15.10, 1.16.7 and 1.17.3 allows an authorized user who sends malicious YAML payloads to...
|
6.5 Medium | — | 3,2% | 1 Apr 2020 |
|
CVE-2020-1934
apache http server, fedoraproject fedora +9 lainnya
In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.
|
5.3 Medium | — | 52,0% | 1 Apr 2020 |
|
CVE-2020-5290
ctfd rctf
In RedpwnCTF before version 2.3, there is a session fixation vulnerability in exploitable through the `#token=$ssid` hash when making a request to the `/verify` endpoint....
|
6.5 Medium | — | 0,82% | 1 Apr 2020 |
|
CVE-2020-3847
apple mac os x
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to leak memory.
|
9.8 Critical | — | 2,2% | 1 Apr 2020 |
|
CVE-2020-3848
apple mac os x
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected a...
|
9.8 Critical | — | 2,2% | 1 Apr 2020 |
|
CVE-2020-3849
apple mac os x
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected a...
|
9.8 Critical | — | 2,2% | 1 Apr 2020 |
|
CVE-2020-3850
apple mac os x
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. A remote attacker may be able to cause unexpected a...
|
9.8 Critical | — | 3,3% | 1 Apr 2020 |
|
CVE-2020-1943
apache ofbiz
Data sent with contentId to /control/stream is not sanitized, allowing XSS attacks in Apache OFBiz 16.11.01 to 16.11.07.
|
6.1 Medium | — | 97,3% | 1 Apr 2020 |
|
CVE-2020-1949
apache sling cms
Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the administrative consoles and are vulne...
|
6.1 Medium | — | 2,0% | 1 Apr 2020 |
|
CVE-2020-10199
sonatype nexus
Sonatype Nexus Repository before 3.21.2 allows JavaEL Injection (issue 1 of 2).
|
8.8 High | KEV | 99,1% | 1 Apr 2020 |
|
CVE-2020-10203
sonatype nexus
Sonatype Nexus Repository before 3.21.2 allows XSS.
|
4.8 Medium | — | 0,92% | 1 Apr 2020 |
|
CVE-2020-10204
sonatype nexus
Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution.
|
7.2 High | — | 38,4% | 1 Apr 2020 |
|
CVE-2020-9781
apple ipados, apple iphone os
The issue was addressed by clearing website permission prompts after navigation. This issue is fixed in iOS 13.4 and iPadOS 13.4. A user may grant website permissions to...
|
5.3 Medium | — | 0,76% | 1 Apr 2020 |
|
CVE-2020-9783
apple icloud, apple itunes +4 lainnya
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5,...
|
8.8 High | — | 1,3% | 1 Apr 2020 |
|
CVE-2020-9784
apple safari
A logic issue was addressed with improved restrictions. This issue is fixed in Safari 13.1. A malicious iframe may use another website’s download settings.
|
4.3 Medium | — | 0,86% | 1 Apr 2020 |
|
CVE-2020-9785
apple ipados, apple iphone os +3 lainnya
Multiple memory corruption issues were addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watch...
|
7.8 High | — | 1,3% | 1 Apr 2020 |
|
CVE-2020-9768
apple ipados, apple iphone os +2 lainnya
A use after free issue was addressed with improved memory management. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2. An application may be able...
|
7.8 High | — | 1,3% | 1 Apr 2020 |
|
CVE-2020-9769
apple mac os x
Multiple issues were addressed by updating to version 8.1.1850. This issue is fixed in macOS Catalina 10.15.4. Multiple issues in Vim.
|
9.8 Critical | — | 1,1% | 1 Apr 2020 |
|
CVE-2020-9770
apple ipados, apple iphone os
A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4. An attacker in a privileged network position may be able to i...
|
6.5 Medium | — | 1,2% | 1 Apr 2020 |
|
CVE-2020-9773
apple ipados, apple iphone os
The issue was addressed with improved handling of icon caches. This issue is fixed in iOS 14.0 and iPadOS 14.0. A malicious application may be able to identify what other...
|
3.3 Low | — | 0,64% | 1 Apr 2020 |
|
CVE-2020-9775
apple ipados, apple iphone os +1 lainnya
An issue existed in the handling of tabs displaying picture in picture video. The issue was corrected with improved state handling. This issue is fixed in iOS 13.4 and iP...
|
5.3 Medium | — | 0,88% | 1 Apr 2020 |
|
CVE-2020-9776
apple mac os x
This issue was addressed with a new entitlement. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to access a user's call history.
|
3.3 Low | — | 0,60% | 1 Apr 2020 |
|
CVE-2020-9777
apple ipados, apple iphone os
An issue existed in the selection of video file by Mail. The issue was fixed by selecting the latest version of a video. This issue is fixed in iOS 13.4 and iPadOS 13.4....
|
5.3 Medium | — | 0,80% | 1 Apr 2020 |
|
CVE-2020-9780
apple ipados, apple iphone os
The issue was resolved by clearing application previews when content is deleted. This issue is fixed in iOS 13.4 and iPadOS 13.4. A local user may be able to view deleted...
|
3.3 Low | — | 0,26% | 1 Apr 2020 |
|
CVE-2020-3908
apple mac os x
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system ter...
|
7.1 High | — | 0,32% | 1 Apr 2020 |
|
CVE-2020-3909
apple icloud, apple itunes +6 lainnya
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for...
|
9.8 Critical | — | 3,0% | 1 Apr 2020 |
|
CVE-2020-3910
apple icloud, apple itunes +5 lainnya
A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for...
|
9.8 Critical | — | 1,6% | 1 Apr 2020 |
|
CVE-2020-3911
apple icloud, apple itunes +5 lainnya
A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2, iTunes for...
|
9.8 Critical | — | 1,6% | 1 Apr 2020 |
|
CVE-2020-3912
apple mac os x
An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to cause unexpected system ter...
|
7.1 High | — | 0,32% | 1 Apr 2020 |
|
CVE-2020-3913
apple ipados, apple iphone os +2 lainnya
A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, watchO...
|
7.8 High | — | 0,73% | 1 Apr 2020 |
|
CVE-2020-3914
apple ipados, apple iphone os +3 lainnya
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2...
|
5.5 Medium | — | 0,77% | 1 Apr 2020 |
|
CVE-2020-3916
apple ipados, apple iphone os +1 lainnya
An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 13.4 and iPadOS 13.4, watchOS 6.2. Setting an alternate app icon may disclo...
|
5.3 Medium | — | 0,81% | 1 Apr 2020 |
|
CVE-2020-3917
apple ipados, apple iphone os +2 lainnya
This issue was addressed with a new entitlement. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2. An application may be able to use an SSH client...
|
5.5 Medium | — | 0,31% | 1 Apr 2020 |
|
CVE-2020-3919
apple ipados, apple iphone os +3 lainnya
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, macOS Catalina 10.15.4, tvOS 13.4, watchOS 6.2...
|
7.8 High | — | 1,4% | 1 Apr 2020 |
|
CVE-2020-3889
apple mac os x
A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.4. A local user may be able to read arbitrary files.
|
5.5 Medium | — | 0,33% | 1 Apr 2020 |
|
CVE-2020-3890
apple ipad os, apple iphone os
The issue was addressed with improved deletion. This issue is fixed in iOS 13.4 and iPadOS 13.4. Deleted messages groups may still be suggested as an autocompletion.
|
5.3 Medium | — | 0,80% | 1 Apr 2020 |
|
CVE-2020-3891
apple ipad os, apple iphone os +1 lainnya
A logic issue was addressed with improved state management. This issue is fixed in iOS 13.4 and iPadOS 13.4, watchOS 6.2. A person with physical access to a locked iOS de...
|
2.4 Low | — | 0,30% | 1 Apr 2020 |
|
CVE-2020-3892
apple mac os x
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to execute arbi...
|
7.8 High | — | 1,4% | 1 Apr 2020 |
|
CVE-2020-3893
apple mac os x
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to execute arbi...
|
7.8 High | — | 1,4% | 1 Apr 2020 |
|
CVE-2020-3894
apple icloud, apple itunes +4 lainnya
A race condition was addressed with additional validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10.5, iCloud for...
|
3.1 Low | — | 1,1% | 1 Apr 2020 |
|
CVE-2020-3895
apple icloud, apple itunes +5 lainnya
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Wi...
|
8.8 High | — | 2,6% | 1 Apr 2020 |
|
CVE-2020-3897
apple icloud, apple itunes +5 lainnya
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windo...
|
8.8 High | — | 4,7% | 1 Apr 2020 |
|
CVE-2020-3899
apple icloud, apple itunes +5 lainnya
A memory consumption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for W...
|
8.8 High | — | 4,1% | 1 Apr 2020 |
|
CVE-2020-3900
apple icloud, apple itunes +5 lainnya
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Wi...
|
8.8 High | — | 1,9% | 1 Apr 2020 |
|
CVE-2020-3901
apple icloud, apple itunes +5 lainnya
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, watchOS 6.2, Safari 13.1, iTunes for Windo...
|
8.8 High | — | 1,9% | 1 Apr 2020 |
|
CVE-2020-3902
apple icloud, apple itunes +4 lainnya
An input validation issue was addressed with improved input validation. This issue is fixed in iOS 13.4 and iPadOS 13.4, tvOS 13.4, Safari 13.1, iTunes for Windows 12.10....
|
6.1 Medium | — | 1,2% | 1 Apr 2020 |
|
CVE-2020-3903
apple mac os x
A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.4. An application may be able to execute arbitrary code...
|
7.8 High | — | 1,4% | 1 Apr 2020 |
|
CVE-2020-3904
apple mac os x
Multiple memory corruption issues were addressed with improved state management. This issue is fixed in macOS Catalina 10.15.4. A malicious application may be able to exe...
|
7.8 High | — | 1,3% | 1 Apr 2020 |