Katalog CVE (hal. 5071)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.538 (Critical 35.913 · High 103.408 · KEV 1.745 · sejak 2020) · Pembaruan terakhir: 16 Okt 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 253.501–253.550 dari 258.538 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2019-20574 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. There is local SQL injection in the Wi-Fi history Content Provider. The Samsun...	7.8 High	—	0,17%	24 Mar 2020
CVE-2019-20575 google android An issue was discovered on Samsung mobile devices with P(9.0) software. The WPA3 handshake feature allows a downgrade or dictionary attack. The Samsung ID is SVE-2019-142...	5.4 Medium	—	0,12%	24 Mar 2020
CVE-2019-20577 google android An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software. The MALI GPU Driver allows a kernel panic. The Samsung ID is SVE-2019-14372 (Aug...	7.5 High	—	0,42%	24 Mar 2020
CVE-2019-20578 google android An issue was discovered on Samsung mobile devices with P(9.0) (Exynos 9820 chipsets) software. A Buffer overflow occurs when loading the UH Partition during Secure Boot....	9.8 Critical	—	0,44%	24 Mar 2020
CVE-2019-20579 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Gallery allows attackers to enable Location information sharing from the lock...	2.4 Low	—	0,14%	24 Mar 2020
CVE-2019-20580 google android An issue was discovered on Samsung mobile devices with P(9.0) software. The Motion photo player allows attackers to bypass the Secure Folder feature to view images. The S...	5.3 Medium	—	0,36%	24 Mar 2020
CVE-2019-20581 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. A stack overflow in the HDCP Trustlet causes arbitrary code...	9.8 Critical	—	0,68%	24 Mar 2020
CVE-2019-20582 google android An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) devices (Exynos9810 chipsets) software. There is a use after free in the ion driver. The Samsung...	9.8 Critical	—	0,44%	24 Mar 2020
CVE-2019-20583 google android An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. There is type confusion in the EXT_FR Trustlet, leading to arbitrary cod...	9.8 Critical	—	0,86%	24 Mar 2020
CVE-2019-20584 google android An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. There is type confusion in the HDCP Trustlet, leading to arbitrary code...	9.8 Critical	—	0,86%	24 Mar 2020
CVE-2019-20585 google android An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. There is type confusion in the SEC_FR Trustlet, leading to arbitrary cod...	9.8 Critical	—	0,86%	24 Mar 2020
CVE-2019-20586 google android An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (with TEEGRIS) software. There is type confusion in the FINGERPRINT Trustlet, leading to arbitrar...	9.8 Critical	—	0,86%	24 Mar 2020
CVE-2019-20587 google android An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (with TEEGRIS) software. There is type confusion in the MLDAP Trustlet, leading to arbitrary code...	9.8 Critical	—	0,86%	24 Mar 2020
CVE-2019-20588 google android An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. There is type confusion in the SEM Trustlet, leading to arbitrary code e...	9.8 Critical	—	0,86%	24 Mar 2020
CVE-2019-20589 google android An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. There is type confusion in the SKPM Trustlet, leading to arbitrary code...	9.8 Critical	—	0,86%	24 Mar 2020
CVE-2019-20628 gpac An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box. It contains a Use-After-Free vulnerability in gf_m2ts_process_pmt in media_tools/mpe...	5.5 Medium	—	1,0%	24 Mar 2020
CVE-2019-20562 google android An issue was discovered on Samsung mobile devices with P(9.0) (with TEEGRIS) software. There is a buffer overflow in the BIOSUB Trustlet. The Samsung ID is SVE-2019-15264...	9.8 Critical	—	0,45%	24 Mar 2020
CVE-2019-20563 google android An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. The SEC_FR trustlet has an out of bounds write. The Samsung ID is SVE-20...	9.8 Critical	—	0,47%	24 Mar 2020
CVE-2019-20564 samsung note9, samsung s9 An issue was discovered on Samsung mobile devices with any (before October 2019 for S9 or Note9) software. Attackers can manipulate the IMEI. The Samsung ID is SVE-2019-1...	7.5 High	—	0,87%	24 Mar 2020
CVE-2019-20565 google android An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) software. Attackers can change the USB configuration without authentication. The Samsung ID is SV...	7.5 High	—	0,36%	24 Mar 2020
CVE-2019-20566 samsung exynos smp1300 An issue was discovered on Samsung mobile devices with any (before September 2019 for SMP1300 Exynos modem chipsets) software. Attackers can trigger stack corruption in t...	9.8 Critical	—	1,5%	24 Mar 2020
CVE-2019-20567 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. A up_parm heap overflow leads to code execution in the bootl...	9.8 Critical	—	0,87%	24 Mar 2020
CVE-2019-20568 google android An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) devices (Exynos and Qualcomm chipsets) software. A race condition causes a Use-After-Free. The Sa...	8.1 High	—	0,31%	24 Mar 2020
CVE-2019-20569 google android An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can bypass Factory Reset Protection (FRP) via the status bar. The Samsung ID is SVE-2019...	6.2 Medium	—	0,13%	24 Mar 2020
CVE-2019-20570 google android An issue was discovered on Samsung mobile devices with P(9.0), O(8.0), and N(7.1) software. Attackers can bypass Factory Reset Protection (FRP) via Smart Switch. The Sams...	7.5 High	—	0,36%	24 Mar 2020
CVE-2019-20571 google android An issue was discovered on Samsung mobile devices with O(8.x) (with TEEGRIS) software. There is type confusion in the WVDRM Trustlet, leading to arbitrary code execution....	9.8 Critical	—	0,65%	24 Mar 2020
CVE-2019-20572 google android An issue was discovered on Samsung mobile devices with O(8.1) and P(9.0) (Exynos chipsets) software. load_kernel has a buffer overflow via untrusted data. The Samsung ID...	9.8 Critical	—	0,44%	24 Mar 2020
CVE-2019-20573 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. There is local SQL injection in the RCS Content Provider. The Samsung IDs are...	7.8 High	—	0,17%	24 Mar 2020
CVE-2019-20558 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. There is a Buffer Overflow in the Touch Screen Driver. The S...	9.8 Critical	—	0,44%	24 Mar 2020
CVE-2019-20559 google android An issue was discovered on Samsung mobile devices with P(9.0) software. Gallery allows viewing of photos on the lock screen. The Samsung ID is SVE-2019-15055 (October 201...	2.4 Low	—	0,13%	24 Mar 2020
CVE-2019-20560 google android An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (with TEEGRIS) software. The BIOSUB Trustlet has an out of bounds write. The Samsung ID is SVE-20...	9.8 Critical	—	0,47%	24 Mar 2020
CVE-2019-20561 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. The bootloader has an integer signedness error. The Samsung...	9.8 Critical	—	0,55%	24 Mar 2020
CVE-2019-20547 google android An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) software. Data may leak via a Bluetooth debug command. The Samsung ID is SVE-2019-15398 (November...	5.3 Medium	—	0,34%	24 Mar 2020
CVE-2019-20548 google android An issue was discovered on Samsung mobile devices with P(9.0) devices (Qualcomm chipsets) software. There is a buffer overflow in the bootloader. The Samsung ID is SVE-20...	9.8 Critical	—	0,44%	24 Mar 2020
CVE-2019-20549 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Broadcom chipsets) software. A heap out-of-bounds access can occur during LE Packet rec...	9.8 Critical	—	0,55%	24 Mar 2020
CVE-2019-20550 google android An issue was discovered on Samsung mobile devices with O(8.x) (released in China and India) software. The S Secure app can access the content of a locked app without a pa...	5.5 Medium	—	0,13%	24 Mar 2020
CVE-2019-20551 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Attackers can bypass Factory Reset Protection (FRP) via a Class 0 Type Message...	7.5 High	—	0,36%	24 Mar 2020
CVE-2019-20552 google android An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can bypass Factory Reset Protection (FRP) via an RCS call. The Samsung ID is SVE-2019-15...	7.5 High	—	0,36%	24 Mar 2020
CVE-2019-20553 google android An issue was discovered on Samsung mobile devices with P(9.0) (SM6150, SM8150, SM8150_FUSION, exynos7885, exynos9610, and exynos9820 chipsets) software. Arbitrary memory...	9.8 Critical	—	0,44%	24 Mar 2020
CVE-2019-20554 google android An issue was discovered on Samsung mobile devices with O(8.x) software. Attackers can bypass Factory Reset Protection (FRP) via an external keyboard. The Samsung ID is SV...	6.2 Medium	—	0,13%	24 Mar 2020
CVE-2019-20555 google android An issue was discovered on Samsung mobile devices with N(7.x) software. The Gallery app allows attackers to view all pictures of a locked device. The Samsung ID is SVE-20...	5.3 Medium	—	0,33%	24 Mar 2020
CVE-2019-20556 google android An issue was discovered on Samsung mobile devices with P(9.0) (SM6150, SM8150, SM8150_FUSION, exynos7885, exynos9610, and exynos9820 chipsets) software. RKP memory corrup...	9.8 Critical	—	0,44%	24 Mar 2020
CVE-2019-20557 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) software. Attackers can bypass Factory Reset Protection (FRP) via a SIM card by blocking...	4.6 Medium	—	0,13%	24 Mar 2020
CVE-2019-20546 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Broadcom Wi-Fi chipsets) software. A denial-of-service attack can leverage a shared int...	6.5 Medium	—	0,23%	24 Mar 2020
CVE-2020-10852 google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. There is a stack overflow in display driver. The Samsung ID is SVE-2019-15877...	7.8 High	—	0,14%	24 Mar 2020
CVE-2020-10853 google android An issue was discovered on Samsung mobile devices with P(9.0) software. Gallery leaks cached data. The Samsung IDs are SVE-2019-16010, SVE-2019-16011, SVE-2019-16012 (Jan...	5.3 Medium	—	0,34%	24 Mar 2020
CVE-2020-10854 google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Kernel stack addresses are leaked to userspace. The Samsung ID is SVE-2019-16...	7.5 High	—	0,41%	24 Mar 2020
CVE-2020-10855 google android An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can bypass Factory Reset Protection (FRP) via AppTray. The Samsung ID is SVE-2019-16192...	4.6 Medium	—	0,13%	24 Mar 2020
CVE-2020-7003 moxa iologik 2512 firmware, moxa iologik 2512-t firmware +18 lainnya In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is transmitted over some web...	7.5 High	—	0,97%	24 Mar 2020
CVE-2020-10845 google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. There is a race condition leading to a use-after-free in MTP. The Samsung ID...	6.4 Medium	—	0,10%	24 Mar 2020

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.