Katalog CVE (hal. 5087)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.399 (Critical 35.897 · High 103.353 · KEV 1.745 · sejak 2020) · Pembaruan terakhir: 15 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 254.301–254.350 dari 258.399 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2020-10108 twisted, fedoraproject fedora +4 lainnya In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with two content-length headers, it ignored the first header. When the s...	9.8 Critical	—	4,0%	12 Mar 2020
CVE-2020-10109 twisted, fedoraproject fedora +2 lainnya In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. When presented with a content-length and a chunked encoding header, the content-length...	9.8 Critical	—	3,3%	12 Mar 2020
CVE-2019-5648 barracuda load balancer adc firmware Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware <= v6.4 allows one to edit the LDAP service configuration of the balancer...	6.5 Medium	—	1,1%	12 Mar 2020
CVE-2020-7253 mcafee agent Improper access control vulnerability in masvc.exe in McAfee Agent (MA) prior to 5.6.4 allows local users with administrator privileges to disable self-protection via a M...	4.4 Medium	—	0,24%	12 Mar 2020
CVE-2020-7254 mcafee advanced threat defense Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbitrary code v...	7.8 High	—	0,30%	12 Mar 2020
CVE-2019-5170 wago pfc200 firmware An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted...	7.8 High	—	1,4%	12 Mar 2020
CVE-2019-5171 wago pfc200 firmware An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send...	7.8 High	—	1,4%	12 Mar 2020
CVE-2019-5176 wago pfc200 firmware An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). A...	5.5 Medium	—	0,53%	12 Mar 2020
CVE-2019-5177 wago pfc200 firmware An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). T...	5.5 Medium	—	0,46%	12 Mar 2020
CVE-2019-5178 wago pfc200 firmware An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). A...	7.8 High	—	0,66%	12 Mar 2020
CVE-2019-5179 wago pfc200 firmware An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). A...	7.8 High	—	0,66%	12 Mar 2020
CVE-2019-5180 wago pfc200 firmware An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). A...	7.8 High	—	0,66%	12 Mar 2020
CVE-2019-5181 wago pfc200 firmware An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). A...	7.8 High	—	0,82%	12 Mar 2020
CVE-2019-5169 wago pfc200 firmware An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted...	7.8 High	—	1,4%	12 Mar 2020
CVE-2019-5172 wago pfc200 firmware An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). An attacker can send...	7.8 High	—	1,3%	11 Mar 2020
CVE-2019-5173 wago pfc200 firmware An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted...	7.8 High	—	1,4%	11 Mar 2020
CVE-2019-5174 wago pfc200 firmware An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). A specially crafted XML cache...	7.8 High	—	1,4%	11 Mar 2020
CVE-2019-5175 wago pfc200 firmware An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 Firmware version 03.02.02(14). A specially crafted...	7.8 High	—	1,4%	11 Mar 2020
CVE-2019-5182 wago pfc200 firmware An exploitable stack buffer overflow vulnerability vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 Firmware version 03.02.02(14). A...	5.5 Medium	—	0,53%	11 Mar 2020
CVE-2019-10808 xcritical.software utilitify utilitify prior to 1.0.3 allows modification of object properties. The merge method could be tricked into adding or modifying properties of the Object.prototype.	8.8 High	—	2,0%	11 Mar 2020
CVE-2020-7598 substack minimist, opensuse leap minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "__proto__" payload.	5.6 Medium	—	1,9%	11 Mar 2020
CVE-2020-7943 puppet enterprise, puppet server +1 lainnya Puppet Server and PuppetDB provide useful performance and debugging information via their metrics API endpoints. For PuppetDB this may contain things like hostnames. Pupp...	7.5 High	—	8,8%	11 Mar 2020
CVE-2020-5958 nvidia quadro firmware, nvidia geforce experience +1 lainnya NVIDIA Windows GPU Display Driver, all versions, contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can plant a...	7.8 High	—	0,37%	11 Mar 2020
CVE-2019-5159 wago e!cockpit An exploitable improper input validation vulnerability exists in the firmware update functionality of WAGO e!COCKPIT automation software v1.6.0.7. A specially crafted fir...	7.8 High	—	1,9%	11 Mar 2020
CVE-2019-5160 wago pfc200 firmware An exploitable improper host validation vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.0...	9.1 Critical	—	2,7%	11 Mar 2020
CVE-2019-5161 wago pfc200 firmware An exploitable remote code execution vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). A...	9.1 Critical	—	2,5%	11 Mar 2020
CVE-2019-5166 wago pfc200 firmware An exploitable stack buffer overflow vulnerability exists in the iocheckd service ‘I/O-Check’ functionality of WAGO PFC 200 version 03.02.02(14). A specially crafted XML...	7.8 High	—	0,82%	11 Mar 2020
CVE-2019-5167 wago pfc200 firmware An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). At 0x1e3f0 the extracted dns...	7.8 High	—	1,2%	11 Mar 2020
CVE-2019-5168 wago pfc200 firmware An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). An attacker can send a specia...	7.8 High	—	1,3%	11 Mar 2020
CVE-2019-5134 wago pfc200 firmware, wago pfc100 firmware An exploitable regular expression without anchors vulnerability exists in the Web-Based Management (WBM) authentication functionality of WAGO PFC200 versions 03.00.39(12)...	7.5 High	—	2,3%	11 Mar 2020
CVE-2019-5135 wago pfc200 firmware, wago pfc100 firmware An exploitable timing discrepancy vulnerability exists in the authentication functionality of the Web-Based Management (WBM) web application on WAGO PFC100/200 controller...	5.3 Medium	—	1,0%	11 Mar 2020
CVE-2019-5149 wago pfc200 firmware, wago pfc100 firmware The WBM web application on firmwares prior to 03.02.02 and 03.01.07 on the WAGO PFC100 and PFC2000, respectively, runs on a lighttpd web server and makes use of the FastC...	7.5 High	—	1,8%	11 Mar 2020
CVE-2019-5155 wago pfc200 firmware An exploitable command injection vulnerability exists in the cloud connectivity feature of WAGO PFC200. An attacker can inject operating system commands into any of the p...	7.2 High	—	4,6%	11 Mar 2020
CVE-2019-5156 wago pfc200 firmware An exploitable command injection vulnerability exists in the cloud connectivity functionality of WAGO PFC200 versions 03.02.02(14), 03.01.07(13), and 03.00.39(12). An att...	7.2 High	—	4,2%	11 Mar 2020
CVE-2019-5157 wago pfc200 firmware An exploitable command injection vulnerability exists in the Cloud Connectivity functionality of WAGO PFC200 Firmware versions 03.02.02(14), 03.01.07(13), and 03.00.39(12...	7.2 High	—	4,2%	11 Mar 2020
CVE-2019-5158 wago e!cockpit An exploitable firmware downgrade vulnerability exists in the firmware update package functionality of the WAGO e!COCKPIT automation software v1.6.1.5. A specially crafte...	7.8 High	—	1,1%	11 Mar 2020
CVE-2019-5106 wago e!cockpit A hard-coded encryption key vulnerability exists in the authentication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to communications between...	5.5 Medium	—	0,34%	11 Mar 2020
CVE-2019-5107 wago e!cockpit A cleartext transmission vulnerability exists in the network communication functionality of WAGO e!Cockpit version 1.5.1.1. An attacker with access to network traffic can...	7.5 High	—	1,1%	11 Mar 2020
CVE-2019-10807 blamer project blamer Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer.	9.8 Critical	—	2,4%	11 Mar 2020
CVE-2020-1947 apache shardingsphere In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere's web console uses the SnakeYAML library for parsing YAML inputs to load datasource configurat...	9.8 Critical	—	33,9%	11 Mar 2020
CVE-2020-9408 tibco spotfire analytics platform for aws, tibco spotfire server The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theo...	8.8 High	—	1,3%	11 Mar 2020
CVE-2016-1000111 twisted Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrust...	5.3 Medium	—	2,8%	11 Mar 2020
CVE-2020-1979 paloaltonetworks pan-os A format string vulnerability in the PAN-OS log daemon (logd) on Panorama allows a network based attacker with knowledge of registered firewall devices and access to Pano...	7.8 High	—	1,0%	11 Mar 2020
CVE-2020-1980 paloaltonetworks pan-os A shell command injection vulnerability in the PAN-OS CLI allows a local authenticated user to escape the restricted shell and escalate privileges. This issue affects onl...	7.8 High	—	0,63%	11 Mar 2020
CVE-2020-1981 paloaltonetworks pan-os A predictable temporary filename vulnerability in PAN-OS allows local privilege escalation. This issue allows a local attacker who bypassed the restricted shell to execut...	7.8 High	—	0,36%	11 Mar 2020
CVE-2020-1733 redhat ansible, redhat ansible tower +4 lainnya A race condition flaw was found in Ansible Engine 2.7.17 and prior, 2.8.9 and prior, 2.9.6 and prior when running a playbook with an unprivileged become user. When Ansibl...	5.0 Medium	—	0,40%	11 Mar 2020
CVE-2020-8540 zohocorp manageengine desktop central An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows remote unauthenticated users to read arbitrary files...	9.8 Critical	—	12,8%	11 Mar 2020
CVE-2013-1753 python The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HT...	7.5 High	—	3,6%	11 Mar 2020
CVE-2020-10181 sumavision enhanced multimedia router firmware goform/formEMR30 in Sumavision Enhanced Multimedia Router (EMR) 3.0.4.27 allows creation of arbitrary users with elevated privileges (administrator) on a device, as demon...	9.8 Critical	KEV	14,7%	11 Mar 2020
CVE-2011-2487 apache cxf, apache wss4j +8 lainnya The implementations of PKCS#1 v1.5 key transport mechanism for XMLEncryption in JBossWS and Apache WSS4J before 1.6.5 is susceptible to a Bleichenbacher attack.	5.9 Medium	—	1,8%	11 Mar 2020

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.