Katalog CVE (hal. 5082)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.399 (Critical 35.897 · High 103.353 · KEV 1.745 · sejak 2020) · Pembaruan terakhir: 15 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 254.051–254.100 dari 258.399 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2020-0506 intel graphics driver Improper initialization in Intel(R) Graphics Drivers before versions 15.40.44.5107, 15.45.29.5077, and 26.20.100.7000 may allow a privileged user to potentially enable a...	2.3 Low	—	0,27%	12 Mar 2020
CVE-2020-0507 intel graphics driver Unquoted service path in Intel(R) Graphics Drivers before versions 15.33.49.5100, 15.36.38.5117, 15.40.44.5107, 15.45.30.5103, and 26.20.100.7212 may allow an authenticat...	4.4 Medium	—	0,33%	12 Mar 2020
CVE-2020-1739 redhat ansible, redhat ansible tower +4 lainnya A flaw was found in Ansible 2.7.16 and prior, 2.8.8 and prior, and 2.9.5 and prior when a password is set with the argument "password" of svn module, it is used on svn co...	3.9 Low	—	0,36%	12 Mar 2020
CVE-2020-0501 intel graphics driver Buffer overflow in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable a denial of service via local access.	5.5 Medium	—	0,34%	12 Mar 2020
CVE-2020-0502 intel graphics driver Improper access control in Intel(R) Graphics Drivers before version 26.20.100.6912 may allow an authenticated user to potentially enable escalation of privilege via local...	5.3 Medium	—	0,32%	12 Mar 2020
CVE-2020-0503 intel graphics driver Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to potentially enable information disclosure via local...	5.5 Medium	—	0,35%	12 Mar 2020
CVE-2019-14625 intel field programmable gate array programmable acceleration card n3000 firmware Improper access control in on-card storage for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged user to potentially enable denia...	4.4 Medium	—	0,28%	12 Mar 2020
CVE-2019-14626 intel field programmable gate array programmable acceleration card n3000 firmware Improper access control in PCIe function for the Intel® FPGA Programmable Acceleration Card N3000, all versions, may allow a privileged user to potentially enable escalat...	6.7 Medium	—	0,34%	12 Mar 2020
CVE-2020-9543 openstack manila OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-...	8.3 High	—	1,3%	12 Mar 2020
CVE-2020-0898 microsoft windows 10, microsoft windows server 2016 An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Priv...	7.8 High	—	0,88%	12 Mar 2020
CVE-2020-0902 microsoft service fabric An elevation of privilege vulnerability exists in Service Fabric File Store Service under certain conditions, aka 'Service Fabric Elevation of Privilege'.	9.8 Critical	—	2,9%	12 Mar 2020
CVE-2020-0903 microsoft exchange server A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server...	5.4 Medium	—	1,6%	12 Mar 2020
CVE-2020-0905 microsoft dynamics 365 business central, microsoft dynamics nav An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution Vulnerability'.	8.0 High	—	10,8%	12 Mar 2020
CVE-2020-0876 microsoft windows 10, microsoft windows server 2016 An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.	7.5 High	—	5,9%	12 Mar 2020
CVE-2020-0877 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnera...	7.8 High	—	1,0%	12 Mar 2020
CVE-2020-0879 microsoft windows 10, microsoft windows 7 +6 lainnya An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve inf...	5.5 Medium	—	1,7%	12 Mar 2020
CVE-2020-0880 microsoft windows 10, microsoft windows 7 +6 lainnya An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vul...	6.5 Medium	—	6,3%	12 Mar 2020
CVE-2020-0881 microsoft windows 10, microsoft windows 7 +6 lainnya A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vu...	8.8 High	—	16,8%	12 Mar 2020
CVE-2020-0882 microsoft windows 10, microsoft windows 7 +6 lainnya An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vul...	6.5 Medium	—	6,3%	12 Mar 2020
CVE-2020-0883 microsoft windows 10, microsoft windows 7 +6 lainnya A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vu...	8.8 High	—	22,0%	12 Mar 2020
CVE-2020-0884 microsoft visual studio 2017, microsoft visual studio 2019 A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual Studio Spoofing Vulnerability'.	3.7 Low	—	1,7%	12 Mar 2020
CVE-2020-0885 microsoft windows 10, microsoft windows 7 +6 lainnya An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Graphics Component Information...	4.3 Medium	—	4,6%	12 Mar 2020
CVE-2020-0887 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnera...	7.8 High	—	2,2%	12 Mar 2020
CVE-2020-0891 microsoft sharepoint enterprise server, microsoft sharepoint foundation +1 lainnya This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker coul...	5.4 Medium	—	1,5%	12 Mar 2020
CVE-2020-0892 microsoft office, microsoft office 365 proplus +6 lainnya A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vuln...	7.8 High	—	11,8%	12 Mar 2020
CVE-2020-0893 microsoft sharepoint enterprise server, microsoft sharepoint server A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint se...	5.4 Medium	—	1,3%	12 Mar 2020
CVE-2020-0894 microsoft sharepoint enterprise server, microsoft sharepoint foundation +1 lainnya A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint se...	5.4 Medium	—	1,3%	12 Mar 2020
CVE-2020-0896 microsoft windows 10, microsoft windows server 2016 +1 lainnya An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is un...	7.8 High	—	0,73%	12 Mar 2020
CVE-2020-0897 microsoft windows 10, microsoft windows 8.1 +4 lainnya An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Priv...	7.8 High	—	0,95%	12 Mar 2020
CVE-2020-0857 microsoft windows 10, microsoft windows 7 +5 lainnya An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vu...	7.8 High	—	0,76%	12 Mar 2020
CVE-2020-0858 microsoft windows 10, microsoft windows 8.1 +4 lainnya An elevation of privilege vulnerability exists when the "Public Account Pictures" folder improperly handles junctions.To exploit this vulnerability, an attacker...	7.8 High	—	0,91%	12 Mar 2020
CVE-2020-0859 microsoft windows 10, microsoft windows 8.1 +4 lainnya An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Discl...	5.5 Medium	—	1,3%	12 Mar 2020
CVE-2020-0860 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first...	7.8 High	—	0,94%	12 Mar 2020
CVE-2020-0861 microsoft windows 10, microsoft windows 8.1 +4 lainnya An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To exploit this vulnerability, an...	7.8 High	—	1,0%	12 Mar 2020
CVE-2020-0863 microsoft windows 10, microsoft windows server 2016 An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Experiences a...	5.5 Medium	—	1,5%	12 Mar 2020
CVE-2020-0864 microsoft windows 10, microsoft windows 8.1 +4 lainnya An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Priv...	7.8 High	—	0,95%	12 Mar 2020
CVE-2020-0865 microsoft windows 10, microsoft windows 8.1 +4 lainnya An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Priv...	7.8 High	—	1,0%	12 Mar 2020
CVE-2020-0866 microsoft windows 10, microsoft windows 8.1 +4 lainnya An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Priv...	7.8 High	—	0,95%	12 Mar 2020
CVE-2020-0867 microsoft windows 10, microsoft windows server 2016 +1 lainnya An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service E...	7.8 High	—	0,76%	12 Mar 2020
CVE-2020-0868 microsoft windows 10, microsoft windows server 2016 +1 lainnya An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service E...	7.8 High	—	0,76%	12 Mar 2020
CVE-2020-0869 microsoft windows 10, microsoft windows server 2016 +1 lainnya A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This...	8.8 High	—	4,7%	12 Mar 2020
CVE-2020-0871 microsoft windows 10, microsoft windows 7 +6 lainnya An information disclosure vulnerability exists when Windows Network Connections Service fails to properly handle objects in memory, aka 'Windows Network Connections Servi...	5.5 Medium	—	1,4%	12 Mar 2020
CVE-2020-0872 microsoft application inspector A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code snippets from third-party source file...	9.6 Critical	—	10,1%	12 Mar 2020
CVE-2020-0874 microsoft windows 10, microsoft windows 7 +5 lainnya An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, allowing an attacker to retrieve inf...	5.5 Medium	—	1,4%	12 Mar 2020
CVE-2020-0841 microsoft windows 10, microsoft windows server 2016 +1 lainnya An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege Vulnerability'. This CVE ID is un...	7.8 High	—	0,88%	12 Mar 2020
CVE-2020-0842 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerabilit...	7.8 High	—	1,0%	12 Mar 2020
CVE-2020-0843 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerabilit...	7.8 High	—	1,0%	12 Mar 2020
CVE-2020-0844 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences a...	7.8 High	—	0,76%	12 Mar 2020
CVE-2020-0845 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service...	7.8 High	—	0,91%	12 Mar 2020
CVE-2020-0847 microsoft internet explorer A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code Execution Vulnerability'.	7.5 High	—	7,9%	12 Mar 2020

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.