Katalog CVE (hal. 5070)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.538 (Critical 35.913 · High 103.408 · KEV 1.745 · sejak 2020) · Pembaruan terakhir: 16 Okt 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 253.451–253.500 dari 258.538 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2020-6080 videolabs libmicrodns, debian linux An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS mess...	7.5 High	—	2,4%	24 Mar 2020
CVE-2020-6993 moxa pt-7528-24tx-hv firmware, moxa pt-7528-24tx-hv-hv firmware +53 lainnya In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, an attacker can gain access to sensitive information from the we...	7.5 High	—	1,6%	24 Mar 2020
CVE-2020-6995 moxa pt-7528-24tx-hv firmware, moxa pt-7528-24tx-hv-hv firmware +53 lainnya In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the application utilizes weak password requirements, which may a...	9.8 Critical	—	1,6%	24 Mar 2020
CVE-2020-7005 honeywell win-pak In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable to a cross-site request forgery, which may allow an attacker to remotely execute ar...	8.8 High	—	0,92%	24 Mar 2020
CVE-2020-6985 moxa pt-7528-24tx-hv firmware, moxa pt-7528-24tx-hv-hv firmware +53 lainnya In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices use a hard-coded service code for access to the co...	9.8 Critical	—	1,9%	24 Mar 2020
CVE-2020-10941 arm mbed crypto, arm mbed tls +2 lainnya Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information (an RSA private key) by measuring cache usage during an import.	5.9 Medium	—	1,7%	24 Mar 2020
CVE-2019-20614 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Allshare allows attackers to access sensitive information. The Samsung ID is S...	7.5 High	—	0,40%	24 Mar 2020
CVE-2019-20615 google android An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. Attackers can bypass Factory Reset Protection (FRP) via SVoice T&C. The Samsung ID is S...	4.6 Medium	—	0,13%	24 Mar 2020
CVE-2019-20616 google android An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. Gallery leaks a thumbnail of Private Mode content. The Samsung ID is SVE-2018-13563 (Ma...	5.3 Medium	—	0,34%	24 Mar 2020
CVE-2019-20617 google android An issue was discovered on Samsung mobile devices with P(9.0) software. Secure Folder leaks preview data of recent apps. The Samsung ID is SVE-2018-13764 (March 2019).	5.3 Medium	—	0,34%	24 Mar 2020
CVE-2019-20618 google android An issue was discovered on Samsung mobile devices with P(9.0) software. The Pin Window feature allows unauthenticated unpinning of an app. The Samsung ID is SVE-2018-1376...	7.5 High	—	0,33%	24 Mar 2020
CVE-2019-20619 google android An issue was discovered on Samsung mobile devices with P(9.0) software. Secure Startup leaks keyboard suggested words. The Samsung ID is SVE-2019-13773 (March 2019).	7.5 High	—	0,41%	24 Mar 2020
CVE-2019-20620 google android An issue was discovered on Samsung mobile devices with P(9.0) software. The Settings application allows unauthenticated changes. The Samsung IDs are SVE-2019-13814, SVE-2...	7.5 High	—	0,33%	24 Mar 2020
CVE-2019-20621 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. There is a baseband heap overflow. The Samsung ID is SVE-201...	9.8 Critical	—	0,59%	24 Mar 2020
CVE-2019-20622 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. There is a baseband stack overflow. The Samsung ID is SVE-20...	9.8 Critical	—	0,59%	24 Mar 2020
CVE-2019-20623 google android An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) software. Gallery has uninitialized memory disclosure. The Samsung ID is SVE-2018-13060...	3.3 Low	—	0,14%	24 Mar 2020
CVE-2019-20624 google android An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. S-Voice leaks keyboard learned words via the lock screen. The Samsung ID is SVE-2018-12...	5.3 Medium	—	0,33%	24 Mar 2020
CVE-2019-20625 google android An issue was discovered on Samsung mobile devices with N(7.1) and O(8.x) (Exynos chipsets) software. The ion debugfs driver allows information disclosure. The Samsung ID...	3.3 Low	—	0,13%	24 Mar 2020
CVE-2019-20600 google android An issue was discovered on Samsung mobile devices with O(8.0) and P(9.0) (Exynos8890 chipsets) software. A use-after-free occurs in the MALI GPU driver. The Samsung ID is...	7.1 High	—	0,14%	24 Mar 2020
CVE-2019-20601 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos7570, 7580, 7870, 7880, and 8890 chipsets) software. RKP memory corruption causes...	7.5 High	—	0,35%	24 Mar 2020
CVE-2019-20602 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.0), and P(9.0) (Qualcomm chipsets) software. The Authnr Trustlet has a NULL pointer dereference. The Sa...	7.5 High	—	0,53%	24 Mar 2020
CVE-2019-20603 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.0), and P(9.0) (Qualcomm chipsets) software. The ESECOMM Trustlet has a NULL pointer dereference. The S...	7.5 High	—	0,53%	24 Mar 2020
CVE-2019-20604 google android An issue was discovered on Samsung mobile devices with O(8.x) software. Attackers can disable Gallery permanently. The Samsung ID is SVE-2019-14031 (May 2019).	7.5 High	—	0,42%	24 Mar 2020
CVE-2019-20605 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. A heap overflow occurs for baseband in the Shannon modem. Th...	9.8 Critical	—	0,56%	24 Mar 2020
CVE-2019-20606 google android An issue was discovered on Samsung mobile devices with any (before May 2019) software. A phishing attack against OMACP can change the network and internet settings. The S...	9.3 Critical	—	0,34%	24 Mar 2020
CVE-2019-20607 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (MSM8996, MSM8998, Exynos7420, Exynos7870, Exynos8890, and Exynos8895 chipsets) software...	9.8 Critical	—	0,88%	24 Mar 2020
CVE-2019-20608 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. An attacker can use Emergency mode to disable features. The Samsung IDs are SV...	7.5 High	—	0,35%	24 Mar 2020
CVE-2019-20609 google android An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can use Smartwatch to view Secure Folder notification content. The Samsung ID is SVE-201...	6.5 Medium	—	0,20%	24 Mar 2020
CVE-2019-20610 google android An issue was discovered on Samsung mobile devices with N(7.X) and O(8.X) (Exynos 7570, 7870, 7880, 7885, 8890, 8895, and 9810 chipsets) software. A double-fetch vulnerabi...	8.1 High	—	0,58%	24 Mar 2020
CVE-2019-20611 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), Go(8.1), P(9.0), and Go(9.0) (Exynos chipsets) software. A baseband stack overflow leads to arbitra...	9.8 Critical	—	0,87%	24 Mar 2020
CVE-2019-20612 google android An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) (Broadcom Wi-Fi, and SEC Wi-Fi chipsets) software. Wi-Fi allows a denial of service via TCP SYN p...	7.5 High	—	0,42%	24 Mar 2020
CVE-2019-20613 google android An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. There is time-based SQL injection in Contacts. The Samsung ID is SVE-2018-13452 (March...	8.1 High	—	0,36%	24 Mar 2020
CVE-2019-20590 google android An issue was discovered on Samsung mobile devices with O(8.x) (Qualcomm chipsets) software. There is an integer underflow in the Secure Storage Trustlet. The Samsung ID i...	9.8 Critical	—	0,44%	24 Mar 2020
CVE-2019-20591 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. There is local SQL injection in the Gear VR Service Content Provider. The Sams...	7.8 High	—	0,17%	24 Mar 2020
CVE-2019-20592 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. There is local SQL injection in the Story Video Editor Content Provider. The S...	7.8 High	—	0,17%	24 Mar 2020
CVE-2019-20593 google android An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) software. Gallery leaks Private Mode thumbnails. The Samsung ID is SVE-2019-14208 (July 2019).	5.3 Medium	—	0,34%	24 Mar 2020
CVE-2019-20594 google android An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (Exynos chipsets) software. A heap overflow exists in the bootloader. The Samsung ID is SVE-2019-...	6.8 Medium	—	0,14%	24 Mar 2020
CVE-2019-20595 google android An issue was discovered on Samsung mobile devices with P(9.0) software. Quick Panel allows enabling or disabling the Bluetooth stack without authentication. The Samsung I...	2.4 Low	—	0,14%	24 Mar 2020
CVE-2019-20596 google android An issue was discovered on Samsung mobile devices with N(7.x) and O(8.x) (Exynos chipsets) software. There is information disclosure in the GateKeeper Trustlet. The Samsu...	9.1 Critical	—	0,46%	24 Mar 2020
CVE-2019-20597 google android An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) software. SPENgesture allows arbitrary applications to read or modify user-input logs. T...	9.1 Critical	—	0,25%	24 Mar 2020
CVE-2019-20598 google android An issue was discovered on Samsung mobile devices with O(8.x) software. Bixby leaks the keyboard's learned words, and the clipboard contents, via the lock screen. The Sam...	2.4 Low	—	0,13%	24 Mar 2020
CVE-2019-20599 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Voice Assistant mishandles the notification audibility of a secured app. The S...	7.5 High	—	0,33%	24 Mar 2020
CVE-2019-20576 google android An issue was discovered on Samsung mobile devices with P(9.0) software. The MemorySaver Content Provider allows SQL injection. The Samsung ID is SVE-2019-14365 (August 20...	9.8 Critical	—	0,40%	24 Mar 2020
CVE-2019-20629 gpac An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in gf_m2ts_process_pmt in media_tools/mpeg...	5.5 Medium	—	0,93%	24 Mar 2020
CVE-2019-20630 gpac An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer over-read in BS_ReadByte (called from gf_bs_read_bit...	5.5 Medium	—	0,93%	24 Mar 2020
CVE-2019-20631 gpac An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gf_list_count in utils/list.c that can...	5.5 Medium	—	0,73%	24 Mar 2020
CVE-2019-20632 gpac An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains an invalid pointer dereference in gf_odf_delete_descriptor in odf/desc_p...	5.5 Medium	—	0,84%	24 Mar 2020
CVE-2020-6983 moxa pt-7528-24tx-hv firmware, moxa pt-7528-24tx-hv-hv firmware +53 lainnya In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a hard-coded cryptographic key, which...	7.5 High	—	1,5%	24 Mar 2020
CVE-2020-6987 moxa pt-7528-24tx-hv firmware, moxa pt-7528-24tx-hv-hv firmware +53 lainnya In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a weak cryptographic algorithm, which...	7.5 High	—	0,97%	24 Mar 2020
CVE-2020-6989 moxa pt-7528-24tx-hv firmware, moxa pt-7528-24tx-hv-hv firmware +53 lainnya In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web server allows remote attackers to c...	9.8 Critical	—	3,5%	24 Mar 2020

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.