Katalog CVE (hal. 5096)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.286 (Critical 35.887 · High 103.298 · KEV 1.745 · sejak 2020) · Pembaruan terakhir: 15 Okt 2026, 12:38 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 254.751–254.800 dari 258.286 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2020-3871 apple mac os x A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.3. An application may be able to execute arbitrary code...	7.8 High	—	1,3%	27 Feb 2020
CVE-2020-3872 apple ipados, apple iphone os +3 lainnya A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watch...	5.5 Medium	—	0,80%	27 Feb 2020
CVE-2020-3873 apple ipados, apple iphone os This issue was addressed with improved setting propagation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Turning off "Load remote content in messages” may not app...	3.3 Low	—	0,28%	27 Feb 2020
CVE-2020-3874 apple ipados, apple iphone os An issued existed in the naming of screenshots. The issue was corrected with improved naming. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Screenshots of the Mess...	5.3 Medium	—	0,80%	27 Feb 2020
CVE-2020-3875 apple ipados, apple iphone os +3 lainnya A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2...	5.5 Medium	—	0,80%	27 Feb 2020
CVE-2020-3877 apple mac os x, apple watchos An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3, watchOS 6.1.2. A remote attacker may be able to cause u...	7.5 High	—	2,0%	27 Feb 2020
CVE-2020-3878 apple icloud, apple itunes +5 lainnya An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, i...	7.8 High	—	9,4%	27 Feb 2020
CVE-2020-3843 apple iphone os, apple watchos A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.4.7, watchOS 5.3.7. A remote attacker may be able to cause unexpecte...	8.8 High	—	3,6%	27 Feb 2020
CVE-2020-3844 apple ipados, apple iphone os This issue was addressed with improved checks. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. Users removed from an iMessage conversation may still be able to alter...	3.3 Low	—	0,28%	27 Feb 2020
CVE-2020-3845 apple mac os x A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.3. An application may be able to execute arbitrary code...	7.8 High	—	1,3%	27 Feb 2020
CVE-2020-3846 apple icloud, apple itunes +5 lainnya A buffer overflow was addressed with improved size validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2, iT...	8.8 High	—	1,8%	27 Feb 2020
CVE-2020-3853 apple ipados, apple iphone os +3 lainnya A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1....	7.8 High	—	1,3%	27 Feb 2020
CVE-2020-3854 apple mac os x A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.3. An application may be able to execute arbitrary code...	7.8 High	—	1,4%	27 Feb 2020
CVE-2020-3856 apple ipados, apple iphone os +3 lainnya A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS...	7.8 High	—	0,92%	27 Feb 2020
CVE-2020-3857 apple ipados, apple iphone os +3 lainnya A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6...	7.8 High	—	0,37%	27 Feb 2020
CVE-2020-3858 apple ipados, apple iphone os A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. An application may be able to execute arbitrar...	7.8 High	—	1,3%	27 Feb 2020
CVE-2020-3859 apple ipados, apple iphone os An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. A person with physical access to a...	2.4 Low	—	0,32%	27 Feb 2020
CVE-2020-3860 apple ipados, apple iphone os +1 lainnya A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, watchOS 6.1.2. An application may be able to...	7.8 High	—	0,36%	27 Feb 2020
CVE-2020-3861 apple itunes The issue was addressed with improved permissions logic. This issue is fixed in iTunes for Windows 12.10.4. A user may gain access to protected parts of the file system.	7.1 High	—	0,40%	27 Feb 2020
CVE-2020-3862 apple icloud, apple itunes +5 lainnya A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows...	6.5 Medium	—	2,0%	27 Feb 2020
CVE-2020-3865 apple icloud, apple itunes +5 lainnya Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes fo...	8.8 High	—	1,9%	27 Feb 2020
CVE-2020-3828 apple ipados, apple iphone os A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 1...	2.4 Low	—	0,32%	27 Feb 2020
CVE-2020-3829 apple ipados, apple iphone os +3 lainnya An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2...	7.8 High	—	0,92%	27 Feb 2020
CVE-2020-3830 apple mac os x A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Catalina 10.15.3. A ma...	3.3 Low	—	0,33%	27 Feb 2020
CVE-2020-3831 apple ipados, apple iphone os A race condition was addressed with improved locking. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1. An application may be able to execute arbitrary code with kerne...	7.0 High	—	0,80%	27 Feb 2020
CVE-2020-3833 apple safari An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.5. Visiting a malicious website may lead to address...	4.3 Medium	—	0,72%	27 Feb 2020
CVE-2020-3834 apple watchos A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 6.1.2. An application may be able to execute arbitrary code with ke...	7.8 High	—	1,3%	27 Feb 2020
CVE-2020-3835 apple mac os x A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Catalina 10.15.3. A ma...	4.4 Medium	—	0,33%	27 Feb 2020
CVE-2020-3836 apple ipados, apple iphone os +3 lainnya An access issue was addressed with improved memory management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. A...	5.5 Medium	—	0,33%	27 Feb 2020
CVE-2020-3837 apple ipados, apple iphone os +3 lainnya A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6...	7.8 High	KEV	14,8%	27 Feb 2020
CVE-2020-3838 apple ipados, apple iphone os +3 lainnya The issue was addressed with improved permissions logic. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1.2. An appli...	7.8 High	—	1,5%	27 Feb 2020
CVE-2020-3839 apple mac os x A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Catalina 10.15.3. An application may be able to read restricted memory.	5.5 Medium	—	0,35%	27 Feb 2020
CVE-2020-3840 apple ipados, apple iphone os +2 lainnya An off by one issue existed in the handling of racoon configuration files. This issue was addressed through improved bounds checking. This issue is fixed in iOS 13.3.1 an...	7.8 High	—	1,1%	27 Feb 2020
CVE-2020-3841 apple safari, apple ipados +1 lainnya The issue was addressed with improved UI handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, Safari 13.0.5. A local user may unknowingly send a password unencr...	6.5 Medium	—	0,55%	27 Feb 2020
CVE-2020-3842 apple ipados, apple iphone os +3 lainnya A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6...	7.8 High	—	1,3%	27 Feb 2020
CVE-2020-3825 apple icloud, apple itunes +4 lainnya Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes fo...	8.8 High	—	1,3%	27 Feb 2020
CVE-2020-3826 apple icloud, apple itunes +5 lainnya An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, macOS Catalina 10.15.3, tvOS 13.3.1, watchOS 6.1....	7.8 High	—	1,2%	27 Feb 2020
CVE-2020-3827 apple mac os x A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15.3. Viewing a maliciously crafted JPEG file may lead to...	7.8 High	—	1,4%	27 Feb 2020
CVE-2020-5400 cloudfoundry capi-release, cloudfoundry cf-deployment Cloud Foundry Cloud Controller (CAPI), versions prior to 1.91.0, logs properties of background jobs when they are run, which may include sensitive information such as cre...	6.5 Medium	—	0,75%	27 Feb 2020
CVE-2020-5401 cloudfoundry routing release Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subs...	5.3 Medium	—	1,0%	27 Feb 2020
CVE-2020-5402 cloudfoundry cf-deployment, cloudfoundry user account and authentication In Cloud Foundry UAA, versions prior to 74.14.0, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function when authenticat...	8.8 High	—	0,49%	27 Feb 2020
CVE-2020-7041 openfortivpn project openfortivpn, fedoraproject fedora +2 lainnya An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because an X509_check_host negative error...	5.3 Medium	—	1,7%	27 Feb 2020
CVE-2020-7042 openfortivpn project openfortivpn, fedoraproject fedora +2 lainnya An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because the hostname check operates on un...	5.3 Medium	—	1,6%	27 Feb 2020
CVE-2020-7043 openfortivpn project openfortivpn, fedoraproject fedora +2 lainnya An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c mishandles certificate validation because hostname comparisons do not conside...	9.1 Critical	—	2,8%	27 Feb 2020
CVE-2015-2992 apache struts Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability.	6.1 Medium	—	5,8%	27 Feb 2020
CVE-2017-16900 hunesion i-onenet Incorrect Access Control in Hunesion i-oneNet 3.0.6042.1200 allows the local user to access other user's information which is unauthorized via brute force.	5.5 Medium	—	0,30%	27 Feb 2020
CVE-2019-5323 arubanetworks airwave There are command injection vulnerabilities present in the AirWave application. Certain input fields controlled by an administrative user are not properly sanitized befor...	7.2 High	—	2,6%	27 Feb 2020
CVE-2019-5326 arubanetworks airwave An administrative application user of or application user with write access to Aruba Airwave VisualRF is able to obtain code execution on the AMP platform. This is possib...	7.2 High	—	1,9%	27 Feb 2020
CVE-2020-6863 zte e8820v3 firmware ZTE E8820V3 router product is impacted by a permission and access control vulnerability. Attackers could use this vulnerability to tamper with DDNS parameters and send Do...	6.5 Medium	—	0,58%	27 Feb 2020
CVE-2020-6864 zte e8820v3 firmware ZTE E8820V3 router product is impacted by an information leak vulnerability. Attackers could use this vulnerability to to gain wireless passwords. After obtaining the wir...	6.5 Medium	—	0,53%	27 Feb 2020

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.