Katalog CVE (hal. 5072)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.538 (Critical 35.913 · High 103.408 · KEV 1.745 · sejak 2020) · Pembaruan terakhir: 16 Okt 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 253.551–253.600 dari 258.538 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2020-10846 google android An issue was discovered on Samsung mobile devices with P(9.x) and Q(10.x) software. Attackers can enable the OEM unlock feature on a KG-enrolled devices, leading to poten...	5.5 Medium	—	0,13%	24 Mar 2020
CVE-2020-10847 google android An issue was discovered on Samsung mobile devices with P(9.0) (Galaxy S8 and Note8) software. Facial recognition can be spoofed. The Samsung ID is SVE-2019-16614 (Februar...	6.8 Medium	—	0,14%	24 Mar 2020
CVE-2020-10848 google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos 9810 chipsets) software. Arbitrary memory mapping exists in TEE. The Samsung ID...	9.8 Critical	—	0,56%	24 Mar 2020
CVE-2020-10849 google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos7885, Exynos8895, and Exynos9810 chipsets) software. The Gatekeeper trustlet all...	9.8 Critical	—	0,40%	24 Mar 2020
CVE-2020-10850 google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. The secure bootloade has a buffer overflow of the USB buffe...	9.8 Critical	—	0,87%	24 Mar 2020
CVE-2020-10851 google android An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. There is a stack overflow in the kperfmon driver. The Samsung ID is SVE-2019-15876 (Ja...	7.8 High	—	0,14%	24 Mar 2020
CVE-2020-10837 google android An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (with TEEGRIS) software. The Esecomm Trustlet allows a stack overflow and arbitrary code executi...	9.8 Critical	—	0,87%	24 Mar 2020
CVE-2020-10838 google android An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. PROCA allows a use-after-free and arbitrary code execution. The Samsung ID is SVE-2019...	7.8 High	—	0,15%	24 Mar 2020
CVE-2020-10839 google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can bypass Factory Reset Protection (FRP) via a SIM card. The Samsu...	6.8 Medium	—	0,14%	24 Mar 2020
CVE-2020-10840 google android An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 9610 chipsets) software. There is a kernel pointer leak in the vipx driver. The Samsung...	7.1 High	—	0,13%	24 Mar 2020
CVE-2020-10841 google android An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 9610 chipsets) software. There is an arbitrary kfree in the vipx and vertex drivers. The...	7.8 High	—	0,14%	24 Mar 2020
CVE-2020-10842 google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (S.LSI chipsets) software. There is a heap out-of-bounds write in the tsmux driver. The...	7.8 High	—	0,14%	24 Mar 2020
CVE-2020-10843 google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (S.LSI chipsets) software. There are race conditions in the hdcp2 driver. The Samsung I...	7.0 High	—	0,10%	24 Mar 2020
CVE-2020-10844 google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.x), and Q(10.0) software. There is an out-of-bounds read vulnerability in media.audio_policy. The Samsu...	6.5 Medium	—	0,39%	24 Mar 2020
CVE-2020-10829 google android An issue was discovered on Samsung mobile devices with O(8.0), P(9.0), and Q(10.0) (Broadcom chipsets) software. A kernel driver heap overflow leads to arbitrary code exe...	7.8 High	—	0,16%	24 Mar 2020
CVE-2020-10830 google android An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) software. Attackers can view notifications by entering many PINs in Lockdown mode. The Samsung I...	2.4 Low	—	0,14%	24 Mar 2020
CVE-2020-10831 google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can trigger an update to arbitrary touch-screen firmware. The Samsu...	7.5 High	—	0,23%	24 Mar 2020
CVE-2020-10832 google android An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software. Kernel Wi-Fi drivers allow out-of-bounds Read or Write operations (e.g., a buffe...	7.8 High	—	0,14%	24 Mar 2020
CVE-2020-10833 google android An issue was discovered on Samsung mobile devices with Q(10.0) software. The DeX Lockscreen allows attackers to access the quick panel and notifications. The Samsung ID i...	7.5 High	—	0,40%	24 Mar 2020
CVE-2020-10834 google android An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can view notifications on the lock screen via Routines. The Samsung ID is SVE-2019-15074...	5.3 Medium	—	0,34%	24 Mar 2020
CVE-2020-10835 samsung exynos An issue was discovered on Samsung mobile devices with any (before February 2020 for Exynos modem chipsets) software. There is a buffer overflow in baseband CP message de...	9.8 Critical	—	1,5%	24 Mar 2020
CVE-2020-10836 google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Exynos chipsets) software. The Widevine Trustlet allows read and write operations on a...	9.8 Critical	—	0,45%	24 Mar 2020
CVE-2019-20542 google android An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) (Exynos chipsets) software. There is a stack overflow in the kernel driver. The Samsung...	7.8 High	—	0,14%	24 Mar 2020
CVE-2019-20543 google android An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can bypass Factory Reset Protection (FRP) via SamsungPay mini. The Samsung ID is SVE-201...	5.5 Medium	—	0,13%	24 Mar 2020
CVE-2019-20544 google android An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos chipsets) software. There is an out-of-bounds write in the ICCC Trustlet. The Samsung ID...	9.8 Critical	—	0,45%	24 Mar 2020
CVE-2019-20545 google android An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) (Exynos chipsets) software. A buffer overflow in the HDCP Trustlet affects secure TEEGRIS memory....	9.8 Critical	—	0,56%	24 Mar 2020
CVE-2019-20535 google android An issue was discovered on Samsung mobile devices with O(8.x) and P(9.0) software. A connection to a new Bluetooth devices can be established from the lock screen. The Sa...	6.2 Medium	—	0,13%	24 Mar 2020
CVE-2019-20536 google android An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), and P(9.0) (released in China) software. The Firewall application mishandles the PermissionWhiteLis...	9.8 Critical	—	0,43%	24 Mar 2020
CVE-2019-20537 google android An issue was discovered on Samsung mobile devices with P(9.0) (TEEGRIS and Qualcomm chipsets). There is arbitrary memory overwrite in the SEM Trustlet, leading to arbitra...	9.8 Critical	—	0,83%	24 Mar 2020
CVE-2019-20538 google android An issue was discovered on Samsung mobile devices with P(9.0) software. There is a heap overflow in the knox_kap driver. The Samsung ID is SVE-2019-14857 (November 2019).	7.8 High	—	0,14%	24 Mar 2020
CVE-2019-20539 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Broadcom chipsets) software. An out-of-bounds Read in the Wi-Fi vendor command leads to...	5.3 Medium	—	0,34%	24 Mar 2020
CVE-2019-20540 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (Exynos chipsets) software. There is a buffer over-read and possible information leak in...	5.5 Medium	—	0,13%	24 Mar 2020
CVE-2019-20541 google android An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software. The Wi-Fi kernel drivers have a stack overflow. The Samsung IDs are SVE-2019-149...	7.8 High	—	0,14%	24 Mar 2020
CVE-2019-20530 google android An issue was discovered on Samsung mobile devices with N(7.1), O(8.x), P(9.0), and Q(10.0) software. Arbitrary code execution is possible on the lock screen. The Samsung...	9.8 Critical	—	0,42%	24 Mar 2020
CVE-2019-20531 google android An issue was discovered on Samsung mobile devices with P(9.0) (Exynos chipsets) software. The Wi-Fi kernel drivers have an out-of-bounds Read. The Samsung IDs are SVE-201...	7.1 High	—	0,13%	24 Mar 2020
CVE-2019-20532 google android An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Attackers can access the Developer options without authentication. The Samsun...	5.3 Medium	—	0,35%	24 Mar 2020
CVE-2019-20533 google android An issue was discovered on Samsung mobile devices with N(7.x), O(8.x), and P(9.0) (released in China or India) software. The S Secure app can launch masked apps without a...	3.3 Low	—	0,12%	24 Mar 2020
CVE-2019-20534 google android An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can view home-screen wallpaper by adjusting the brightness of a locked screen. The Samsu...	2.4 Low	—	0,14%	24 Mar 2020
CVE-2019-17276 netapp oncommand system manager OnCommand System Manager versions 9.3 prior to 9.3P18 and 9.4 prior to 9.4P2 are susceptible to a cross site scripting vulnerability that could allow an authenticated att...	5.4 Medium	—	0,63%	24 Mar 2020
CVE-2019-18242 moxa iologik 2512 firmware, moxa iologik 2512-t firmware +18 lainnya In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, frequent and multiple requests for short-term use...	7.5 High	—	1,6%	24 Mar 2020
CVE-2020-6972 honeywell notifier webserver In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser.	9.1 Critical	—	1,3%	24 Mar 2020
CVE-2020-4253 ibm content navigator IBM Content Navigator 3.0CD does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 17...	8.8 High	—	0,90%	24 Mar 2020
CVE-2020-4309 ibm content navigator IBM Content Navigator 3.0CD could disclose sensitive information to an unauthenticated user which could be used to aid in further attacks against the system. IBM X-Force...	5.3 Medium	—	1,3%	24 Mar 2020
CVE-2019-4553 ibm api connect IBM API Connect V5.0.0.0 through 5.0.8.7iFix3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM...	7.5 High	—	0,79%	24 Mar 2020
CVE-2019-4681 ibm tivoli netcool/impact IBM Tivoli Netcool Impact 7.1.0.0 through 7.1.0.17 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI...	6.1 Medium	—	0,73%	24 Mar 2020
CVE-2020-10385 wpforms contact form A stored cross-site scripting (XSS) vulnerability exists in the WPForms Contact Form (aka wpforms-lite) plugin before 1.5.9 for WordPress.	5.4 Medium	—	4,4%	24 Mar 2020
CVE-2020-10938 graphicsmagick, debian linux +2 lainnya GraphicsMagick before 1.3.35 has an integer overflow and resultant heap-based buffer overflow in HuffmanDecodeImage in magick/compress.c.	9.8 Critical	—	5,4%	24 Mar 2020
CVE-2020-10931 memcached Memcached 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (daemon crash) via a crafted binary protocol header to try_read_command_binary in memcac...	7.5 High	—	28,1%	24 Mar 2020
CVE-2020-10934 acyba acymailing Acyba AcyMailing before 6.9.2 mishandles file uploads by admins.	7.2 High	—	1,3%	24 Mar 2020
CVE-2020-1747 pyyaml, fedoraproject fedora +2 lainnya A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files...	9.8 Critical	—	5,4%	24 Mar 2020

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.