Katalog CVE (hal. 5081)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.399 (Critical 35.897 · High 103.353 · KEV 1.745 · sejak 2020) · Pembaruan terakhir: 15 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 254.001–254.050 dari 258.399 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2019-16157 fortinet fortiweb An information exposure vulnerability in Fortinet FortiWeb 6.2.0 CLI and earlier may allow an authenticated user to view sensitive information being logged via diagnose d...	6.5 Medium	—	0,86%	13 Mar 2020
CVE-2020-1953 apache commons configuration, oracle database server +1 lainnya Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements....	10.0 Critical	—	6,3%	13 Mar 2020
CVE-2009-5159 invisioncommunity invision power board, microsoft internet explorer Invision Power Board (aka IPB or IP.Board) 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment.	6.1 Medium	—	3,5%	13 Mar 2020
CVE-2020-10544 primetek primefaces An XSS issue was discovered in tooltip/tooltip.js in PrimeTek PrimeFaces 7.0.11. In a web application using PrimeFaces, an attacker can provide JavaScript code in an inpu...	6.1 Medium	—	0,83%	13 Mar 2020
CVE-2020-10540 webuntis Untis WebUntis before 2020.9.6 allows CSRF for certain combinations of rights and modules.	8.8 High	—	0,45%	13 Mar 2020
CVE-2020-10541 zohocorp manageengine opmanager Zoho ManageEngine OpManager before 12.4.179 allows remote code execution via a specially crafted Mail Server Settings v1 API request. This was fixed in 12.5.108.	9.8 Critical	—	10,1%	13 Mar 2020
CVE-2020-1887 linuxfoundation osquery Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configur...	9.1 Critical	—	1,6%	13 Mar 2020
CVE-2020-1863 huawei usg6000v firmware Huawei USG6000V with versions V500R001C20SPC300, V500R003C00SPC100, and V500R005C00SPC100 have an out-of-bounds read vulnerability. Due to a logical flaw in a JSON parsin...	7.5 High	—	0,93%	12 Mar 2020
CVE-2020-10534 mediawiki In the GlobalBlocking extension before 2020-03-10 for MediaWiki through 1.34.0, an issue related to IP range evaluation resulted in blocked users re-gaining escalated pri...	9.8 Critical	—	1,2%	12 Mar 2020
CVE-2020-10535 gitlab GitLab 12.8.x before 12.8.6, when sign-up is enabled, allows remote attackers to bypass email domain restrictions within the two-day grace period for an unconfirmed email...	5.3 Medium	—	1,0%	12 Mar 2020
CVE-2020-8469 trendmicro password manager Trend Micro Password Manager for Windows version 5.0 is affected by a DLL hijacking vulnerability would could potentially allow an attacker privleged escalation.	7.8 High	—	0,46%	12 Mar 2020
CVE-2020-7600 querymen project querymen querymen prior to 2.1.4 allows modification of object properties. The parameters of exported function handler(type, name, fn) can be controlled by users without any sanit...	5.3 Medium	—	1,2%	12 Mar 2020
CVE-2019-17653 fortinet fortisiem A Cross-Site Request Forgery (CSRF) vulnerability in the user interface of Fortinet FortiSIEM 5.2.5 could allow a remote, unauthenticated attacker to perform arbitrary ac...	8.8 High	—	0,56%	12 Mar 2020
CVE-2020-0550 intel celeron 1000m, intel celeron 1005m +58 lainnya Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access. Th...	5.6 Medium	—	0,33%	12 Mar 2020
CVE-2020-0551 intel atom c2308, intel atom c2316 +58 lainnya Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side c...	5.6 Medium	—	1,1%	12 Mar 2020
CVE-2020-0583 intel smart sound technology Improper access control in the subsystem for Intel(R) Smart Sound Technology may allow an authenticated user to potentially enable escalation of privilege via local acces...	8.8 High	—	0,37%	12 Mar 2020
CVE-2020-9064 huawei honor v30 firmware Huawei smartphone Honor V30 with versions earlier than OxfordS-AN00A 10.0.1.167(C00E166R4P1) have an improper authentication vulnerability. Authentication to target compo...	5.5 Medium	—	0,22%	12 Mar 2020
CVE-2020-6643 fortinet fortiisolator An improper neutralization of input vulnerability in the URL Description in Fortinet FortiIsolator version 1.2.2 allows a remote authenticated attacker to perform a cross...	5.4 Medium	—	0,84%	12 Mar 2020
CVE-2019-17658 fortinet forticlient An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior allow an attacker to gain elevated privileges via the...	9.8 Critical	—	2,2%	12 Mar 2020
CVE-2019-16156 fortinet fortiweb An Improper Neutralization of Input vulnerability in the Anomaly Detection Parameter Name in Fortinet FortiWeb 6.0.5, 6.2.0, and 6.1.1 may allow a remote unauthenticated...	6.1 Medium	—	1,00%	12 Mar 2020
CVE-2019-12278 opera Opera through 53 on Android allows Address Bar Spoofing. Characters from several languages are displayed in Right-to-Left order, due to mishandling of several Unicode cha...	4.3 Medium	—	0,82%	12 Mar 2020
CVE-2020-0530 intel nuc kit nuc8i7bek firmware, intel nuc 8 enthusiast pc nuc8i7bekqa firmware +58 lainnya Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access. The list of affe...	7.8 High	—	0,34%	12 Mar 2020
CVE-2020-0546 intel optane dc persistent memory module management Unquoted service path in Intel(R) Optane(TM) DC Persistent Memory Module Management Software before version 1.0.0.3461 may allow an authenticated user to potentially enab...	7.8 High	—	0,34%	12 Mar 2020
CVE-2020-0556 bluez, canonical ubuntu linux +2 lainnya Improper access control in subsystem for BlueZ before version 5.54 may allow an unauthenticated user to potentially enable escalation of privilege and denial of service v...	7.1 High	—	1,0%	12 Mar 2020
CVE-2020-0565 intel graphics driver Uncontrolled search path in Intel(R) Graphics Drivers before version 26.20.100.7158 may allow an authenticated user to potentially enable escalation of privilege via loca...	7.8 High	—	0,35%	12 Mar 2020
CVE-2020-0567 intel graphics driver Improper input validation in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to enable denial of service via local access.	5.5 Medium	—	0,31%	12 Mar 2020
CVE-2020-0574 intel max 10 fpga firmware Improper configuration in block design for Intel(R) MAX(R) 10 FPGA all versions may allow an authenticated user to potentially enable escalation of privilege and informat...	5.9 Medium	—	0,36%	12 Mar 2020
CVE-2020-0526 intel nuc kit nuc8i7bek firmware, intel nuc 8 enthusiast pc nuc8i7bekqa firmware +58 lainnya Improper input validation in firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege via local access. The list of affected pr...	6.7 Medium	—	0,34%	12 Mar 2020
CVE-2019-11343 torpedoquery torpedo query Torpedo Query before 2.5.3 mishandles the LIKE operator in ConditionBuilder.java, LikeCondition.java, and NotLikeCondition.java.	9.8 Critical	—	1,8%	12 Mar 2020
CVE-2019-11355 polycom hdx system software An issue was discovered in Poly (formerly Polycom) HDX 3.1.13. A feature exists that allows the creation of a server / client certificate, or the upload of the user certi...	7.2 High	—	1,1%	12 Mar 2020
CVE-2018-10704 yii2cmf project yii2cmf yidashi yii2cmf 2.0 has XSS via the /search q parameter.	6.1 Medium	—	0,93%	12 Mar 2020
CVE-2018-19516 kde applications messagepartthemes/default/defaultrenderer.cpp in messagelib in KDE Applications before 18.12.0 does not properly restrict the handling of an http-equiv="REFRESH" value.	5.3 Medium	—	1,1%	12 Mar 2020
CVE-2018-20586 bitcoin core bitcoind and Bitcoin-Qt prior to 0.17.1 allow injection of arbitrary data into the debug log via an RPC call.	5.3 Medium	—	1,1%	12 Mar 2020
CVE-2017-18350 bitcoin core bitcoind and Bitcoin-Qt prior to 0.15.1 have a stack-based buffer overflow if an attacker-controlled SOCKS proxy server is used. This results from an integer signedness e...	5.9 Medium	—	1,3%	12 Mar 2020
CVE-2015-3641 bitcoin core bitcoind and Bitcoin-Qt prior to 0.10.2 allow attackers to cause a denial of service (disabled functionality such as a client application crash) via an "Easy" attack.	7.5 High	—	1,8%	12 Mar 2020
CVE-2020-5959 nvidia virtual gpu manager NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in the vGPU plugin in which an input index value is incorrectly validated which may lead to denial of s...	5.5 Medium	—	0,27%	12 Mar 2020
CVE-2020-5960 nvidia virtual gpu manager NVIDIA Virtual GPU Manager contains a vulnerability in the kernel module (nvidia.ko), where a null pointer dereference may occur, which may lead to denial of service.	5.5 Medium	—	0,30%	12 Mar 2020
CVE-2020-5961 nvidia virtual gpu graphics driver NVIDIA vGPU graphics driver for guest OS contains a vulnerability in which an incorrect resource clean up on a failure path can impact the guest VM, leading to denial of...	5.5 Medium	—	0,27%	12 Mar 2020
CVE-2020-0508 intel graphics driver Incorrect default permissions in the installer for Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.721...	7.8 High	—	0,32%	12 Mar 2020
CVE-2020-0511 intel graphics driver Uncaught exception in system driver for Intel(R) Graphics Drivers before version 15.40.44.5107 may allow an authenticated user to potentially enable a denial of service v...	5.5 Medium	—	0,31%	12 Mar 2020
CVE-2020-0514 intel graphics driver Improper default permissions in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7463 and 15.45.30.5103 may allow an authenticated user to potentiall...	7.8 High	—	0,31%	12 Mar 2020
CVE-2020-0515 intel graphics driver Uncontrolled search path element in the installer for Intel(R) Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107, 15.36.38.5117, and 15.33.49....	7.8 High	—	0,38%	12 Mar 2020
CVE-2020-0516 intel graphics driver Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7463 may allow an authenticated user to potentially enable denial of service via local acces...	5.5 Medium	—	0,56%	12 Mar 2020
CVE-2020-0517 intel graphics driver Out-of-bounds write in Intel(R) Graphics Drivers before version 15.36.38.5117 may allow an authenticated user to potentially enable escalation of privilege or denial of s...	5.3 Medium	—	0,32%	12 Mar 2020
CVE-2020-0519 intel graphics driver Improper access control for Intel(R) Graphics Drivers before versions 15.33.49.5100 and 15.36.38.5117 may allow an authenticated user to potentially enable escalation of...	7.8 High	—	0,35%	12 Mar 2020
CVE-2020-0520 intel graphics driver Path traversal in igdkmd64.sys for Intel(R) Graphics Drivers before versions 15.45.30.5103, 15.40.44.5107, 15.36.38.5117 and 15.33.49.5100 may allow an authenticated user...	7.8 High	—	0,34%	12 Mar 2020
CVE-2020-10531 icu-project international components for unicode, redhat enterprise linux desktop +9 lainnya An issue was discovered in International Components for Unicode (ICU) for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the...	8.8 High	—	2,7%	12 Mar 2020
CVE-2020-10532 watchguard ad helper firmware The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI.	7.5 High	—	2,8%	12 Mar 2020
CVE-2020-0504 intel graphics driver Buffer overflow in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.30.5103, and 26.20.100.7158 may allow an authenticated user to potentially enable escala...	7.8 High	—	0,33%	12 Mar 2020
CVE-2020-0505 intel graphics driver Improper conditions check in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authent...	6.1 Medium	—	0,36%	12 Mar 2020

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.