Katalog CVE (hal. 5086)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.399 (Critical 35.897 · High 103.353 · KEV 1.745 · sejak 2020) · Pembaruan terakhir: 15 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 254.251–254.300 dari 258.399 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2020-10439 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-artic...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10440 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-artic...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10441 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-artic...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10442 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-artic...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10443 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/report-artic...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10416 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/kb-backup.ph...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10417 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-artic...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10418 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-attac...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10419 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-categ...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10420 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-comme...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10421 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-depar...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10422 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-draft...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10423 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-feedb...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10424 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-field...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10425 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-gloss...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10426 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-group...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10427 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-langu...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10428 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-news....	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10429 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-setti...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10430 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/manage-subsc...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10402 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-categor...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10403 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-comment...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10404 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-field.p...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10405 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-glossar...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10406 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-group.p...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10407 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-news.ph...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10408 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-subscri...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10409 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-templat...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10410 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-user.ph...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10411 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/email-harves...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10412 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/import-csv.p...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10413 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/import-html....	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10414 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/index-attach...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10415 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/index.php by...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10388 chadhaajay phpkb The way the Referer header in article.php is handled in Chadha PHPKB Standard Multi-Language 9 allows attackers to execute Stored (Blind) XSS (injecting arbitrary web scr...	5.4 Medium	—	0,60%	12 Mar 2020
CVE-2020-10389 chadhaajay phpkb admin/save-settings.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by injecting PHP code into any POST parameter when sav...	7.2 High	—	4,9%	12 Mar 2020
CVE-2020-10390 chadhaajay phpkb OS Command Injection in export.php (vulnerable function called from include/functions-article.php) in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to ac...	7.2 High	—	4,3%	12 Mar 2020
CVE-2020-10391 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-article....	4.8 Medium	—	0,73%	12 Mar 2020
CVE-2020-10392 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-category...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10393 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-field.ph...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10394 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-glossary...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10395 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-group.ph...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10396 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-language...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10397 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-news.php...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10398 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-template...	4.8 Medium	—	0,73%	12 Mar 2020
CVE-2020-10399 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/add-user.php...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10400 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/article-coll...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10401 chadhaajay phpkb The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS (injecting arbitrary web script or HTML) in admin/edit-article...	4.8 Medium	—	0,61%	12 Mar 2020
CVE-2020-10387 chadhaajay phpkb Path Traversal in admin/download.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to download files from the server using a dot-dot-slash sequence (....	4.9 Medium	—	7,8%	12 Mar 2020
CVE-2020-10386 chadhaajay phpkb admin/imagepaster/image-upload.php in Chadha PHPKB Standard Multi-Language 9 allows remote attackers to achieve Code Execution by uploading a .php file in the admin/js/ d...	7.2 High	—	12,3%	12 Mar 2020

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.