Katalog CVE (hal. 5091)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.286 (Critical 35.887 · High 103.298 · KEV 1.745 · sejak 2020) · Pembaruan terakhir: 15 Okt 2026, 12:38 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 254.501–254.550 dari 258.286 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2019-17645 centreon An issue was discovered in Centreon before 2.8.31, 18.10.9, 19.04.6, and 19.10.3. It provides sensitive information via an unauthenticated direct request for include/conf...	7.5 High	—	1,8%	5 Mar 2020
CVE-2020-5250 prestashop In PrestaShop before version 1.7.6.4, when a customer edits their address, they can freely change the id_address in the form, and thus steal someone else's address. It is...	6.3 Medium	—	0,85%	5 Mar 2020
CVE-2020-4278 ibm platform lsf, ibm spectrum computing for high performance analytics +1 lainnya IBM Platform LSF 9.1 and 10.1, IBM Spectrum LSF Suite 10.2, and IBM Spectrum Suite for HPA 10.2 could allow a local user to escalate their privileges due to weak file per...	7.8 High	—	0,27%	5 Mar 2020
CVE-2020-9418 redsoftware pdfescape An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hij...	7.8 High	—	0,43%	5 Mar 2020
CVE-2020-8994 mi mdz-25-dt firmware An issue was discovered on XIAOMI AI speaker MDZ-25-DT 1.34.36, and 1.40.14. Attackers can get root shell by accessing the UART interface and then they can read Wi-Fi SSI...	6.8 Medium	—	0,56%	5 Mar 2020
CVE-2020-10174 timeshift project timeshift, fedoraproject fedora +1 lainnya init_tmp in TeeJee.FileSystem.vala in Timeshift before 20.03 unsafely reuses a preexisting temporary directory in the predictable location /tmp/timeshift. It follows syml...	7.0 High	—	0,28%	5 Mar 2020
CVE-2020-10173 comtrend vr-3033 firmware Comtrend VR-3033 DE11-416SSG-C01_R02.A2pvI042j1.d26m devices have Multiple Authenticated Command Injection vulnerabilities via the ping and traceroute diagnostic pages, a...	8.8 High	—	77,1%	5 Mar 2020
CVE-2020-9402 djangoproject django, debian linux +3 lainnya Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregate...	8.8 High	—	22,5%	5 Mar 2020
CVE-2020-9544 d-link dsl-2640b firmware An issue was discovered on D-Link DSL-2640B E1 EU_1.01 devices. The administrative interface doesn't perform authentication checks for a firmware-update POST request. Any...	7.5 High	—	1,4%	5 Mar 2020
CVE-2019-20499 dlink dwl-2600ap firmware D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionality in the Web interface, using...	7.8 High	—	94,8%	5 Mar 2020
CVE-2019-20500 dlink dwl-2600ap firmware D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Save Configuration functionality in the Web interface, using she...	7.8 High	KEV	96,7%	5 Mar 2020
CVE-2019-20501 dlink dwl-2600ap firmware D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Upgrade Firmware functionality in the Web interface, using shell...	7.8 High	—	89,8%	5 Mar 2020
CVE-2019-20107 testlink Multiple SQL injection vulnerabilities in TestLink through 1.9.19 allows remote authenticated users to execute arbitrary SQL commands via the (1) tproject_id parameter to...	8.8 High	—	2,0%	5 Mar 2020
CVE-2020-10106 phpgurukul daily expense tracker system PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to SQL injection, as demonstrated by the email parameter in index.php or register.php. The SQL injection allows...	9.8 Critical	—	1,2%	5 Mar 2020
CVE-2020-10107 phpgurukul daily expense tracker system PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php.	5.4 Medium	—	0,53%	5 Mar 2020
CVE-2020-9370 humaxdigital hga12r-02 firmware HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking.	9.1 Critical	—	1,2%	5 Mar 2020
CVE-2020-9380 whmcssmarters web tv player IPTV Smarters WEB TV PLAYER through 2020-02-22 allows attackers to execute OS commands by uploading a script.	9.8 Critical	—	4,0%	5 Mar 2020
CVE-2019-2300 qualcomm apq8009 firmware, qualcomm apq8017 firmware +30 lainnya Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying into it in Snapdragon Auto, Snapdragon Compute, Snapdragon Co...	9.8 Critical	—	0,90%	5 Mar 2020
CVE-2019-2311 qualcomm apq8009 firmware, qualcomm apq8017 firmware +39 lainnya Possible buffer overflow in WLAN handler due to lack of validation of destination buffer size before copying it in Snapdragon Auto, Snapdragon Compute, Snapdragon Connect...	9.8 Critical	—	0,90%	5 Mar 2020
CVE-2019-2317 qualcomm msm8905 firmware, qualcomm msm8909 firmware +18 lainnya The secret key used to make the Initial Sequence Number in the TCP SYN packet could be brute forced and therefore can be predicted in Snapdragon Auto, Snapdragon Compute,...	9.8 Critical	—	0,67%	5 Mar 2020
CVE-2019-14098 qualcomm apq8009 firmware, qualcomm apq8017 firmware +42 lainnya Possible buffer overflow in data offload handler due to lack of check of keydata length when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity,...	9.8 Critical	—	0,90%	5 Mar 2020
CVE-2019-14032 qualcomm apq8009 firmware, qualcomm apq8017 firmware +32 lainnya Memory use after free issue in audio due to lack of resource control in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdrago...	7.8 High	—	0,20%	5 Mar 2020
CVE-2019-14045 qualcomm apq8096au firmware, qualcomm qcs605 firmware +3 lainnya Possible buffer overflow while processing clientlog and serverlog due to lack of validation of data received in logs in Snapdragon Auto, Snapdragon Consumer IOT, Snapdrag...	9.8 Critical	—	0,90%	5 Mar 2020
CVE-2019-14048 qualcomm sm8150 firmware Possible out of bound memory access while playing a crafted clip in media player in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IO...	7.8 High	—	0,19%	5 Mar 2020
CVE-2019-14050 qualcomm apq8009 firmware, qualcomm mdm9150 firmware +23 lainnya Out-of-bound writes occurs due to lack of check of buffer size will cause buffer overflow only in 32bit architecture. in Snapdragon Auto, Snapdragon Compute, Snapdragon C...	7.8 High	—	0,20%	5 Mar 2020
CVE-2019-14061 qualcomm apq8009 firmware, qualcomm apq8017 firmware +43 lainnya Null-pointer dereference can occur while accessing the segment element info when it is not allocated and assigned in Snapdragon Auto, Snapdragon Compute, Snapdragon Conne...	7.5 High	—	0,81%	5 Mar 2020
CVE-2019-14068 qualcomm apq8009 firmware, qualcomm apq8053 firmware +19 lainnya Out of bound access in msm routing due to lack of check of size before accessing in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IO...	7.8 High	—	0,20%	5 Mar 2020
CVE-2019-14071 qualcomm apq8017 firmware, qualcomm apq8053 firmware +41 lainnya Compromised reset handler may bypass access control due to AC config is being reset if debug path is enabled to collect secure or non-secure ram dumps in Snapdragon Auto,...	7.8 High	—	0,22%	5 Mar 2020
CVE-2019-14072 qualcomm apq8009 firmware, qualcomm apq8096au firmware +30 lainnya Unhandled paging request is observed due to dereferencing an already freed object because of race condition between sparse free and sparse bind ioctls which access the sa...	7.0 High	—	0,13%	5 Mar 2020
CVE-2019-14079 qualcomm apq8009 firmware, qualcomm apq8053 firmware +18 lainnya Access to the uninitialized variable when the driver tries to unmap the dma buffer of a request which was never mapped in the first place leading to kernel failure in Sna...	7.8 High	—	0,45%	5 Mar 2020
CVE-2019-14081 qualcomm apq8098 firmware, qualcomm ipq8074 firmware +15 lainnya Buffer Over-read when WLAN module gets a WMI message for SAR limits with invalid number of limits to be enforced in Snapdragon Compute, Snapdragon Consumer Electronics Co...	7.1 High	—	0,20%	5 Mar 2020
CVE-2019-14082 qualcomm ipq8074 firmware, qualcomm mdm9206 firmware +4 lainnya Potential buffer over-read due to lack of bound check of memory offset passed in WLAN firmware in Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdr...	9.1 Critical	—	0,88%	5 Mar 2020
CVE-2019-14083 qualcomm apq8009 firmware, qualcomm apq8053 firmware +35 lainnya While parsing Service Descriptor Extended Attribute received as part of SDF frame, there is a possibility that incorrect length is specified in the attribute length field...	9.8 Critical	—	0,96%	5 Mar 2020
CVE-2019-14085 qualcomm qcn7605 firmware, qualcomm qcs605 firmware +7 lainnya Possible Integer underflow in WLAN function due to lack of check of data received from user side in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics C...	7.8 High	—	0,20%	5 Mar 2020
CVE-2019-14086 qualcomm apq8098 firmware, qualcomm mdm9607 firmware +16 lainnya Possible integer overflow while checking the length of frame which is a 32 bit integer and is added to another 32 bit integer which can lead to unexpected result during t...	9.8 Critical	—	0,91%	5 Mar 2020
CVE-2019-14095 qualcomm apq8009 firmware, qualcomm apq8016 firmware +58 lainnya Buffer overflow occurs while processing LMP packet in which name length parameter exceeds value specified in BT-specification in Snapdragon Auto, Snapdragon Compute, Snap...	9.8 Critical	—	0,90%	5 Mar 2020
CVE-2019-14097 qualcomm apq8096 firmware, qualcomm apq8096au firmware +38 lainnya Possible buffer overflow in WLAN Parser due to lack of length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer...	9.8 Critical	—	0,90%	5 Mar 2020
CVE-2019-14000 qualcomm apq8009 firmware, qualcomm apq8017 firmware +56 lainnya Lack of check that the RX FIFO write index that is read from shared RAM is less than the FIFO size results into memory corruption and potential information leakage in Sna...	7.8 High	—	0,20%	5 Mar 2020
CVE-2019-14015 qualcomm apq8096 firmware, qualcomm apq8096au firmware +26 lainnya A stack-based buffer overflow exists in the initialization of the identification stage due to lack of check on the number of templates provided. in Snapdragon Auto, Snapd...	7.8 High	—	0,20%	5 Mar 2020
CVE-2019-14026 qualcomm apq8009 firmware, qualcomm apq8017 firmware +46 lainnya Possible buffer overflow in WLAN WMI handler due to lack of ssid length check when copying data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdrago...	7.8 High	—	0,20%	5 Mar 2020
CVE-2019-14027 qualcomm apq8098 firmware, qualcomm ipq6018 firmware +23 lainnya Buffer overflow due to lack of upper bound check on channel length which is used for a loop. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electroni...	7.8 High	—	0,20%	5 Mar 2020
CVE-2019-14028 qualcomm apq8009 firmware, qualcomm apq8017 firmware +50 lainnya Buffer overwrite during memcpy due to lack of check on SSID length validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electro...	7.8 High	—	0,20%	5 Mar 2020
CVE-2019-14029 qualcomm apq8009 firmware, qualcomm apq8053 firmware +31 lainnya Use-after-free in graphics module due to destroying already queued syncobj in error case in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indus...	7.8 High	—	0,20%	5 Mar 2020
CVE-2019-14030 qualcomm mdm9205 firmware, qualcomm qcs404 firmware +10 lainnya The size of a buffer is determined by addition and multiplications operations that have the potential to overflow due to lack of bound check in Snapdragon Auto, Snapdrago...	7.8 High	—	0,20%	5 Mar 2020
CVE-2019-14031 qualcomm apq8009 firmware, qualcomm apq8017 firmware +49 lainnya Buffer overflow can occur while parsing RSN IE containing list of PMK ID`s which are more than the buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connecti...	9.8 Critical	—	0,90%	5 Mar 2020
CVE-2019-10603 qualcomm apq8053 firmware, qualcomm apq8096au firmware +16 lainnya Use after free issue occurs If the real device interface goes down and a route lookup is performed while sending a raw IPv6 message in Snapdragon Auto, Snapdragon Compute...	7.8 High	—	0,22%	5 Mar 2020
CVE-2019-10604 qualcomm apq8053 firmware, qualcomm apq8096au firmware +26 lainnya Possibility of heap-buffer-overflow during last iteration of loop while populating image version information in diag command response packet, in Snapdragon Auto, Snapdrag...	7.8 High	—	0,20%	5 Mar 2020
CVE-2019-10612 qualcomm mdm9205 firmware, qualcomm mdm9650 firmware +15 lainnya UTCB object has a function pointer called by the reaper to deallocate its memory resources and this address can potentially be corrupted by stack overflow in Snapdragon A...	9.8 Critical	—	0,90%	5 Mar 2020
CVE-2019-10616 qualcomm apq8009 firmware, qualcomm apq8016 firmware +10 lainnya Possibility of null pointer access if the SPDM commands are executed in the non-standard way in TZ. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapd...	5.5 Medium	—	0,19%	5 Mar 2020
CVE-2019-10587 qualcomm apq8009 firmware, qualcomm apq8017 firmware +51 lainnya Possible Stack overflow can occur when processing a large SDP body or non standard SDP body without right delimiters in Snapdragon Auto, Snapdragon Compute, Snapdragon Co...	9.8 Critical	—	0,90%	5 Mar 2020

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.