Katalog CVE (hal. 5084)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.399 (Critical 35.897 · High 103.353 · KEV 1.745 · sejak 2020) · Pembaruan terakhir: 15 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 254.151–254.200 dari 258.399 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2020-0799 microsoft windows 10, microsoft windows 7 +5 lainnya An elevation of privilege vulnerability exists in Microsoft Windows when the Windows kernel fails to properly handle parsing of certain symbolic links, aka 'Windows Kerne...	7.8 High	—	0,85%	12 Mar 2020
CVE-2020-0800 microsoft windows 10, microsoft windows 8.1 +4 lainnya An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Priv...	7.8 High	—	1,0%	12 Mar 2020
CVE-2020-0801 microsoft windows 10, microsoft windows server 2016 +1 lainnya A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This...	8.8 High	—	5,3%	12 Mar 2020
CVE-2020-0765 microsoft remote desktop connection manager An information disclosure vulnerability exists in the Remote Desktop Connection Manager (RDCMan) application when it improperly parses XML input containing a reference to...	5.5 Medium	—	4,7%	12 Mar 2020
CVE-2020-0768 microsoft chakracore, microsoft internet explorer +1 lainnya A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vuln...	7.5 High	—	8,7%	12 Mar 2020
CVE-2020-0769 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain...	7.8 High	—	0,95%	12 Mar 2020
CVE-2020-0770 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first...	7.8 High	—	0,85%	12 Mar 2020
CVE-2020-0771 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain...	7.8 High	—	0,85%	12 Mar 2020
CVE-2020-0772 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles memory.To exploit this vulnerability, an attacker would first have to gain...	7.8 High	—	0,79%	12 Mar 2020
CVE-2020-0773 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first...	7.8 High	—	0,85%	12 Mar 2020
CVE-2020-0774 microsoft windows 10, microsoft windows 7 +6 lainnya An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vul...	6.5 Medium	—	5,9%	12 Mar 2020
CVE-2020-0775 microsoft windows 10, microsoft windows server 2016 +1 lainnya An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this vulnerability, an attacker would first have...	5.5 Medium	—	1,3%	12 Mar 2020
CVE-2020-0776 microsoft windows 10, microsoft windows server 2016 +1 lainnya An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles file operations.To exploit this vulnerability, an attacker would...	7.8 High	—	0,95%	12 Mar 2020
CVE-2020-0777 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Folder Service Elevation of Priv...	7.8 High	—	0,95%	12 Mar 2020
CVE-2020-0778 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka 'Windows Network Connections Service...	7.8 High	—	0,95%	12 Mar 2020
CVE-2020-0779 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerabil...	5.5 Medium	—	0,99%	12 Mar 2020
CVE-2020-0780 microsoft windows 10, microsoft windows 7 +5 lainnya An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows Network List Service Elevation of...	7.8 High	—	0,81%	12 Mar 2020
CVE-2020-0781 microsoft windows 10, microsoft windows 7 +6 lainnya An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in memory, aka 'Windows UPnP Service Ele...	7.8 High	—	0,92%	12 Mar 2020
CVE-2020-0645 microsoft windows 10, microsoft windows 7 +6 lainnya A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft IIS Server Tampering Vulnerability'.	7.5 High	—	3,9%	12 Mar 2020
CVE-2020-0684 microsoft windows 10, microsoft windows 7 +6 lainnya A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attacker who successfully exploite...	8.8 High	—	9,0%	12 Mar 2020
CVE-2020-0690 microsoft windows 10, microsoft windows server 2016 +1 lainnya An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege Vulnerability'.	9.8 Critical	—	7,0%	12 Mar 2020
CVE-2020-0700 microsoft team foundation server, microsoft azure devops server A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting V...	5.4 Medium	—	1,3%	12 Mar 2020
CVE-2020-0758 microsoft team foundation server, microsoft azure devops server An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job tokens, aka 'Azure DevOps Server and T...	7.5 High	—	2,0%	12 Mar 2020
CVE-2020-0762 microsoft windows 10, microsoft windows server 2016 An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.To exploit the vulnerability, an attacker would fir...	7.8 High	—	0,84%	12 Mar 2020
CVE-2020-0763 microsoft windows 10, microsoft windows server 2016 +1 lainnya An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.To exploit the vulnerability, an attacker would fir...	7.8 High	—	0,84%	12 Mar 2020
CVE-2020-10500 chadhaajay phpkb CSRF in admin/reply-ticket.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to reply to any ticket, given the id, via a crafted request.	4.3 Medium	—	0,49%	12 Mar 2020
CVE-2020-10501 chadhaajay phpkb CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a department, given the id, via a crafted request.	6.5 Medium	—	0,56%	12 Mar 2020
CVE-2020-10502 chadhaajay phpkb CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to approve any comment, given the id, via a crafted request.	4.3 Medium	—	0,49%	12 Mar 2020
CVE-2020-10503 chadhaajay phpkb CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to disapprove any comment, given the id, via a crafted request.	4.3 Medium	—	0,49%	12 Mar 2020
CVE-2020-10504 chadhaajay phpkb CSRF in admin/edit-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a comment, given the id, via a crafted request.	4.3 Medium	—	0,49%	12 Mar 2020
CVE-2020-9435 phoenixcontact tc router 3002t-4g firmware, phoenixcontact tc router 2002t-3g firmware +4 lainnya PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T-4G ATT through 2.05.3, TC CLO...	7.5 High	—	1,2%	12 Mar 2020
CVE-2020-9436 phoenixcontact tc router 3002t-4g firmware, phoenixcontact tc router 2002t-3g firmware +4 lainnya PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T-4G ATT through 2.05.3, TC CLO...	8.8 High	—	2,6%	12 Mar 2020
CVE-2020-9464 beckhoff bk9000 firmware A Denial-of-Service vulnerability exists in BECKHOFF Ethernet TCP/IP Bus Coupler BK9000. After an attack has occurred, the device's functionality can be restored by reboo...	7.5 High	—	1,4%	12 Mar 2020
CVE-2020-6858 hotels styx Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection. This is exploitable if untrusted user input can appear in a response header.	6.5 Medium	—	1,2%	12 Mar 2020
CVE-2020-8435 metagauss registrationmagic An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress. There is SQL injection via the rm_analytics_show_form rm_form_id parameter.	8.1 High	—	1,9%	12 Mar 2020
CVE-2020-8436 metagauss registrationmagic XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rm_form_id, rm_tr, or form_name parameter.	6.1 Medium	—	1,4%	12 Mar 2020
CVE-2020-10485 chadhaajay phpkb CSRF in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article via a crafted request.	4.3 Medium	—	0,49%	12 Mar 2020
CVE-2020-10486 chadhaajay phpkb CSRF in admin/manage-comments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a comment via a crafted request.	4.3 Medium	—	0,48%	12 Mar 2020
CVE-2020-10487 chadhaajay phpkb CSRF in admin/manage-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a glossary term via a crafted request.	4.3 Medium	—	0,53%	12 Mar 2020
CVE-2020-10488 chadhaajay phpkb CSRF in admin/manage-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a news article via a crafted request.	4.3 Medium	—	0,49%	12 Mar 2020
CVE-2020-10489 chadhaajay phpkb CSRF in admin/manage-tickets.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a ticket via a crafted request.	4.3 Medium	—	0,49%	12 Mar 2020
CVE-2020-10490 chadhaajay phpkb CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a department via a crafted request.	4.3 Medium	—	0,49%	12 Mar 2020
CVE-2020-10491 chadhaajay phpkb CSRF in admin/manage-departments.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to add a department via a crafted request.	4.3 Medium	—	0,49%	12 Mar 2020
CVE-2020-10492 chadhaajay phpkb CSRF in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete an article template via a crafted request.	4.3 Medium	—	0,49%	12 Mar 2020
CVE-2020-10493 chadhaajay phpkb CSRF in admin/edit-glossary.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a glossary term, given the id, via a crafted request.	4.3 Medium	—	0,48%	12 Mar 2020
CVE-2020-10494 chadhaajay phpkb CSRF in admin/edit-news.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a news article, given the id, via a crafted request.	4.3 Medium	—	0,49%	12 Mar 2020
CVE-2020-10495 chadhaajay phpkb CSRF in admin/edit-template.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article template, given the id, via a crafted request.	4.3 Medium	—	0,48%	12 Mar 2020
CVE-2020-10496 chadhaajay phpkb CSRF in admin/edit-article.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit an article, given the id, via a crafted request.	4.3 Medium	—	0,49%	12 Mar 2020
CVE-2020-10497 chadhaajay phpkb CSRF in admin/manage-categories.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to delete a category via a crafted request.	6.5 Medium	—	0,55%	12 Mar 2020
CVE-2020-10498 chadhaajay phpkb CSRF in admin/edit-category.php in Chadha PHPKB Standard Multi-Language 9 allows attackers to edit a category, given the id, via a crafted request.	6.5 Medium	—	0,55%	12 Mar 2020

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.