Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2020-3787
adobe photoshop 2020, adobe photoshop cc
Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could le...
|
9.8 Critical | — | 3,9% | 25 Mar 2020 |
|
CVE-2020-3788
adobe photoshop 2020, adobe photoshop cc
Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could le...
|
9.8 Critical | — | 3,9% | 25 Mar 2020 |
|
CVE-2020-3789
adobe photoshop 2020, adobe photoshop cc
Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could le...
|
9.8 Critical | — | 3,9% | 25 Mar 2020 |
|
CVE-2020-3790
adobe photoshop 2020, adobe photoshop cc
Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a memory corruption vulnerability. Successful exploitation could le...
|
8.8 High | — | 3,7% | 25 Mar 2020 |
|
CVE-2020-3770
adobe photoshop 2020, adobe photoshop cc
Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead t...
|
8.8 High | — | 4,5% | 25 Mar 2020 |
|
CVE-2020-3771
adobe photoshop 2020, adobe photoshop cc
Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds read vulnerability. Successful exploitation could...
|
4.3 Medium | — | 2,2% | 25 Mar 2020 |
|
CVE-2020-3772
adobe photoshop 2020, adobe photoshop cc
Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead t...
|
8.8 High | — | 4,5% | 25 Mar 2020 |
|
CVE-2020-3773
adobe photoshop 2020, adobe photoshop cc
Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have an out-of-bounds write vulnerability. Successful exploitation could...
|
8.8 High | — | 3,9% | 25 Mar 2020 |
|
CVE-2020-3774
adobe photoshop 2020, adobe photoshop cc
Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead t...
|
8.8 High | — | 4,5% | 25 Mar 2020 |
|
CVE-2020-3775
adobe photoshop 2020, adobe photoshop cc
Adobe Photoshop CC 2019 versions 20.0.8 and earlier, and Photoshop 2020 versions 21.1 and earlier have a buffer errors vulnerability. Successful exploitation could lead t...
|
9.8 Critical | — | 4,9% | 25 Mar 2020 |
|
CVE-2020-10883
tp-link ac1750 firmware
This vulnerability allows local attackers to escalate privileges on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. An attacker must firs...
|
7.8 High | — | 5,3% | 25 Mar 2020 |
|
CVE-2020-10884
tp-link ac1750 firmware
This vulnerability allows network-adjacent attackers execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentica...
|
8.8 High | — | 21,9% | 25 Mar 2020 |
|
CVE-2020-10885
tp-link ac1750 firmware
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is...
|
9.8 Critical | — | 6,5% | 25 Mar 2020 |
|
CVE-2020-10886
tp-link ac1750 firmware
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is...
|
9.8 Critical | — | 5,0% | 25 Mar 2020 |
|
CVE-2020-10887
tp-link ac1750 firmware
This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit...
|
9.8 Critical | — | 3,7% | 25 Mar 2020 |
|
CVE-2020-10888
tp-link ac1750 firmware
This vulnerability allows remote attackers to bypass authentication on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is...
|
9.8 Critical | — | 2,2% | 25 Mar 2020 |
|
CVE-2020-10881
tp-link ac1750 firmware
This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is...
|
9.8 Critical | — | 9,3% | 25 Mar 2020 |
|
CVE-2020-10882
tp-link ac1750 firmware
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authent...
|
8.8 High | — | 41,4% | 25 Mar 2020 |
|
CVE-2020-9552
adobe bridge
Adobe Bridge versions 10.0 have a heap-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution.
|
7.8 High | — | 5,8% | 25 Mar 2020 |
|
CVE-2020-9551
adobe bridge
Adobe Bridge versions 10.0 have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution.
|
7.8 High | — | 2,9% | 25 Mar 2020 |
|
CVE-2020-3761
adobe coldfusion
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a remote file read vulnerability. Successful exploitation could lead to arbitrary file read from the coldfus...
|
7.5 High | — | 4,2% | 25 Mar 2020 |
|
CVE-2020-3769
adobe experience manager
Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful exploitation could lead to sensitive information dis...
|
7.5 High | — | 2,9% | 25 Mar 2020 |
|
CVE-2020-3794
adobe coldfusion
ColdFusion versions ColdFusion 2016, and ColdFusion 2018 have a file inclusion vulnerability. Successful exploitation could lead to arbitrary code execution of files loca...
|
9.8 Critical | — | 7,1% | 25 Mar 2020 |
|
CVE-2020-3808
adobe creative cloud
Creative Cloud Desktop Application versions 5.0 and earlier have a time-of-check to time-of-use (toctou) race condition vulnerability. Successful exploitation could lead...
|
5.9 Medium | — | 1,4% | 25 Mar 2020 |
|
CVE-2020-5277
prestashop faceted search module
PrestaShop module ps_facetedsearch versions before 3.5.0 has a reflected XSS with `url_name` parameter. The problem is fixed in 3.5.0
|
5.4 Medium | — | 0,70% | 25 Mar 2020 |
|
CVE-2020-5282
nick chan bot project nick chan bot
In Nick Chan Bot before version 1.0.0-beta there is a vulnerability in the `npm` command which is part of this software package. This allows arbitrary shell execution,whi...
|
9.8 Critical | — | 1,2% | 25 Mar 2020 |
|
CVE-2020-5280
typelevel http4s
http4s before versions 0.18.26, 0.20.20, and 0.21.2 has a local file inclusion vulnerability. This vulnerability applies to all users of org.http4s.server.staticcontent.F...
|
7.5 High | — | 7,0% | 25 Mar 2020 |
|
CVE-2020-5281
cesnet perun
In Perun before version 3.9.1, VO or group manager can modify configuration of the LDAP extSource to retrieve all from Perun LDAP. Issue is fixed in version 3.9.1 by sani...
|
7.5 High | — | 1,4% | 25 Mar 2020 |
|
CVE-2020-3805
adobe acrobat dc, adobe acrobat reader dc
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and e...
|
9.8 Critical | — | 7,6% | 25 Mar 2020 |
|
CVE-2020-3806
adobe acrobat dc, adobe acrobat reader dc
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and e...
|
7.5 High | — | 3,0% | 25 Mar 2020 |
|
CVE-2020-3807
adobe acrobat dc, adobe acrobat reader dc
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and e...
|
9.8 Critical | — | 6,3% | 25 Mar 2020 |
|
CVE-2020-3766
adobe genuine integrity service
Adobe Genuine Integrity Service versions Version 6.4 and earlier have an insecure file permissions vulnerability. Successful exploitation could lead to privilege escalati...
|
7.8 High | — | 0,94% | 25 Mar 2020 |
|
CVE-2020-3800
adobe acrobat dc, adobe acrobat reader dc
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and e...
|
7.5 High | — | 2,9% | 25 Mar 2020 |
|
CVE-2020-3801
adobe acrobat dc, adobe acrobat reader dc
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and e...
|
9.8 Critical | — | 4,8% | 25 Mar 2020 |
|
CVE-2020-3802
adobe acrobat dc, adobe acrobat reader dc
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and e...
|
8.8 High | — | 4,5% | 25 Mar 2020 |
|
CVE-2020-3803
adobe acrobat dc, adobe acrobat reader dc
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and e...
|
7.8 High | — | 0,83% | 25 Mar 2020 |
|
CVE-2020-3804
adobe acrobat dc, adobe acrobat reader dc
Adobe Acrobat and Reader versions 2020.006.20034 and earlier, 2017.011.30158 and earlier, 2017.011.30158 and earlier, 2015.006.30510 and earlier, and 2015.006.30510 and e...
|
7.5 High | — | 3,5% | 25 Mar 2020 |
|
CVE-2019-18626
harriscomputer ormed mis
Harris Ormed Self Service before 2019.1.4 allows an authenticated user to view W-2 forms belonging to other users via an arbitrary empNo value to the ORMEDMIS/Data/PY/T4W...
|
4.3 Medium | — | 0,62% | 25 Mar 2020 |
|
CVE-2020-2161
jenkins
Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not properly escape node labels that are shown in the form validation for label expressions on job configuration p...
|
5.4 Medium | — | 1,2% | 25 Mar 2020 |
|
CVE-2020-2162
jenkins
Jenkins 2.227 and earlier, LTS 2.204.5 and earlier does not set Content-Security-Policy headers for files uploaded as file parameters to a build, resulting in a stored XS...
|
5.4 Medium | — | 1,2% | 25 Mar 2020 |
|
CVE-2020-2163
jenkins
Jenkins 2.227 and earlier, LTS 2.204.5 and earlier improperly processes HTML content of list view column headers, resulting in a stored XSS vulnerability exploitable by u...
|
5.4 Medium | — | 1,2% | 25 Mar 2020 |
|
CVE-2020-2164
jfrog artifactory
Jenkins Artifactory Plugin 3.5.0 and earlier stores its Artifactory server password unencrypted in its global configuration file on the Jenkins master where it can be vie...
|
6.5 Medium | — | 0,80% | 25 Mar 2020 |
|
CVE-2020-2165
jfrog artifactory
Jenkins Artifactory Plugin 3.6.0 and earlier transmits configured passwords in plain text as part of its global Jenkins configuration form, potentially resulting in their...
|
7.5 High | — | 1,1% | 25 Mar 2020 |
|
CVE-2020-2166
jenkins pipeline
Jenkins Pipeline: AWS Steps Plugin 1.40 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code executi...
|
8.8 High | — | 2,0% | 25 Mar 2020 |
|
CVE-2020-2167
jenkins openshift pipeline
Jenkins OpenShift Pipeline Plugin 1.0.56 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execut...
|
8.8 High | — | 2,1% | 25 Mar 2020 |
|
CVE-2020-2168
jenkins azure container service
Jenkins Azure Container Service Plugin 1.0.1 and earlier does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code ex...
|
8.8 High | — | 2,0% | 25 Mar 2020 |
|
CVE-2020-2169
jenkins queue cleanup
A form validation endpoint in Jenkins Queue cleanup Plugin 1.3 and earlier does not properly escape a query parameter displayed in an error message, resulting in a reflec...
|
6.1 Medium | — | 1,1% | 25 Mar 2020 |
|
CVE-2020-2170
jenkins rapiddeploy
Jenkins RapidDeploy Plugin 4.2 and earlier does not escape package names in the table of packages obtained from a remote server, resulting in a stored XSS vulnerability.
|
5.4 Medium | — | 0,74% | 25 Mar 2020 |
|
CVE-2020-2171
jenkins rapiddeploy
Jenkins RapidDeploy Plugin 4.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks.
|
8.8 High | — | 1,2% | 25 Mar 2020 |
|
CVE-2020-2160
jenkins
Jenkins 2.227 and earlier, LTS 2.204.5 and earlier uses different representations of request URL paths, which allows attackers to craft URLs that allow bypassing CSRF pro...
|
8.8 High | — | 2,0% | 25 Mar 2020 |