Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2020-0665
microsoft windows 10, microsoft windows 7 +6 lainnya
An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation...
|
8.1 High | — | 4,4% | 11 Feb 2020 |
|
CVE-2020-0666
microsoft windows 10, microsoft windows 7 +6 lainnya
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vu...
|
7.8 High | — | 0,85% | 11 Feb 2020 |
|
CVE-2020-0667
microsoft windows 10, microsoft windows 7 +6 lainnya
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vu...
|
7.8 High | — | 0,79% | 11 Feb 2020 |
|
CVE-2020-0668
microsoft windows 10, microsoft windows 7 +6 lainnya
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. Th...
|
7.8 High | — | 25,9% | 11 Feb 2020 |
|
CVE-2020-0669
microsoft windows 10, microsoft windows server 2016 +1 lainnya
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. Th...
|
7.8 High | — | 1,3% | 11 Feb 2020 |
|
CVE-2020-0670
microsoft windows 10, microsoft windows server 2016 +1 lainnya
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerabilit...
|
7.8 High | — | 1,4% | 11 Feb 2020 |
|
CVE-2020-0671
microsoft windows 10, microsoft windows server 2016 +1 lainnya
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerabilit...
|
7.8 High | — | 1,4% | 11 Feb 2020 |
|
CVE-2020-0672
microsoft windows 10, microsoft windows server 2016 +1 lainnya
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerabilit...
|
7.8 High | — | 1,4% | 11 Feb 2020 |
|
CVE-2020-0673
microsoft internet explorer
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption...
|
7.5 High | — | 9,9% | 11 Feb 2020 |
|
CVE-2020-0674
microsoft internet explorer
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption...
|
7.5 High | KEV | 86,9% | 11 Feb 2020 |
|
CVE-2020-0675
microsoft windows 10, microsoft windows 7 +6 lainnya
An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects in memory.To exploit this vulner...
|
5.5 Medium | — | 1,6% | 11 Feb 2020 |
|
CVE-2020-0618
microsoft sql server
A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Ser...
|
8.8 High | KEV · ransomware | 99,0% | 11 Feb 2020 |
|
CVE-2020-0655
microsoft windows 10, microsoft windows 7 +6 lainnya
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated attacker abuses clipboard redire...
|
8.0 High | — | 65,7% | 11 Feb 2020 |
|
CVE-2020-0657
microsoft windows 10, microsoft windows 7 +6 lainnya
An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File Sy...
|
7.8 High | — | 0,85% | 11 Feb 2020 |
|
CVE-2020-0658
microsoft windows 10, microsoft windows 7 +6 lainnya
An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle objects in memory, aka 'Windows Common...
|
5.5 Medium | — | 1,5% | 11 Feb 2020 |
|
CVE-2020-0659
microsoft windows 10, microsoft windows server 2016 +1 lainnya
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Service Elevation of Pr...
|
7.8 High | — | 0,85% | 11 Feb 2020 |
|
CVE-2020-0660
microsoft windows 10, microsoft windows 8.1 +4 lainnya
A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests, a...
|
7.5 High | — | 5,4% | 11 Feb 2020 |
|
CVE-2020-0661
microsoft windows 10, microsoft windows server 2016 +1 lainnya
A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user on a guest operating system, aka...
|
6.8 Medium | — | 1,6% | 11 Feb 2020 |
|
CVE-2020-1942
apache nifi
In Apache NiFi 0.0.1 to 1.11.0, the flow fingerprint factory generated flow fingerprints which included sensitive property descriptor values. In the event a node attempte...
|
7.5 High | — | 3,1% | 11 Feb 2020 |
|
CVE-2020-6063
accusoft imagegear
An exploitable out-of-bounds write vulnerability exists in the uncompress_scan_line function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A special...
|
8.8 High | — | 3,7% | 11 Feb 2020 |
|
CVE-2020-6064
accusoft imagegear
An exploitable out-of-bounds write vulnerability exists in the uncompress_scan_line function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A special...
|
8.8 High | — | 3,7% | 11 Feb 2020 |
|
CVE-2020-6065
accusoft imagegear
An exploitable out-of-bounds write vulnerability exists in the bmp_parsing function of the igcore19d.dll library of Accusoft ImageGear, version 19.5.0. A specially crafte...
|
8.8 High | — | 3,7% | 11 Feb 2020 |
|
CVE-2020-6066
accusoft imagegear
An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG SOFx parser of the Accusoft ImageGear 19.5.0 library. A specially crafted JPEG file can...
|
8.8 High | — | 3,7% | 11 Feb 2020 |
|
CVE-2020-6067
accusoft imagegear
An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll TIFF tifread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted TIFF file c...
|
8.8 High | — | 3,7% | 11 Feb 2020 |
|
CVE-2020-6069
accusoft imagegear
An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll JPEG jpegread precision parser of the Accusoft ImageGear 19.5.0 library. A specially crafted...
|
8.8 High | — | 3,7% | 11 Feb 2020 |
|
CVE-2011-4938
muze ariadne
Multiple cross-site scripting (XSS) vulnerabilities in Ariadne 2.7.6 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO parameter to (1) inde...
|
6.1 Medium | — | 1,2% | 11 Feb 2020 |
|
CVE-2013-4225
restful web services project restful web services
The RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for Drupal does not properly restrict access to entity write operations, which...
|
8.8 High | — | 2,1% | 11 Feb 2020 |
|
CVE-2020-1726
libpod project libpod, redhat openshift container platform +1 lainnya
A flaw was discovered in Podman where it incorrectly allows containers when created to overwrite existing files in volumes, even if they are mounted as read-only. When a...
|
5.9 Medium | — | 1,8% | 11 Feb 2020 |
|
CVE-2020-1711
qemu, redhat openstack +3 lainnya
An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU versions 2.12.0 before 4.2.1 handled a response coming from an iSCSI server w...
|
6.0 Medium | — | 4,0% | 11 Feb 2020 |
|
CVE-2013-2120
kde paste applet
The %{password(...)} macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-...
|
8.4 High | — | 0,56% | 11 Feb 2020 |
|
CVE-2013-2213
kde paste applet
The KRandom::random function in KDE Paste Applet after 4.10.5 in kdeplasma-addons uses the GNU C Library rand function's linear congruential generator, which makes it eas...
|
5.5 Medium | — | 0,31% | 11 Feb 2020 |
|
CVE-2012-1124
phxeventmanager project phxeventmanager
SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL commands via the search_terms parameter.
|
9.8 Critical | — | 4,3% | 11 Feb 2020 |
|
CVE-2012-2452
pragmamx
Multiple cross-site scripting (XSS) vulnerabilities in pragmaMx 1.x before 1.12.2 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter...
|
6.1 Medium | — | 1,7% | 11 Feb 2020 |
|
CVE-2012-2517
prestashop
Cross-site scripting (XSS) vulnerability in PrestaShop before 1.4.9 allows remote attackers to inject arbitrary web script or HTML via the index of the product[] paramete...
|
6.1 Medium | — | 1,9% | 11 Feb 2020 |
|
CVE-2012-6720
socialengine
Multiple cross-site scripting (XSS) vulnerabilities in SocialEngine before 4.2.4 allow remote attackers to inject arbitrary web script or HTML via the (1) title parameter...
|
6.1 Medium | — | 0,81% | 11 Feb 2020 |
|
CVE-2012-6721
socialengine
Multiple cross-site request forgery (CSRF) vulnerabilities in the (1) Forum, (2) Event, and (3) Classifieds plugins in SocialEngine before 4.2.4.
|
6.3 Medium | — | 0,34% | 11 Feb 2020 |
|
CVE-2013-5582
ammyy admin
Ammyy Admin 3.2 and earlier stores the client ID at a fixed memory location, which might make it easier for user-assisted remote attackers to bypass authentication by run...
|
7.8 High | — | 3,6% | 11 Feb 2020 |
|
CVE-2009-4067
linux kernel, redhat enterprise linux
Buffer overflow in the auerswald_probe function in the Auerswald Linux USB driver for the Linux kernel before 2.6.27 allows physically proximate attackers to execute arbi...
|
6.8 Medium | — | 2,1% | 11 Feb 2020 |
|
CVE-2014-3826
mybb
Cross-site scripting (XSS) vulnerability in MyBB before 1.6.13 allows remote authenticated users to inject arbitrary web script or HTML via the name parameter in the edit...
|
5.4 Medium | — | 0,61% | 11 Feb 2020 |
|
CVE-2014-3827
mybb
Multiple cross-site scripting (XSS) vulnerabilities in the MyBB (aka MyBulletinBoard) before 1.8.4 allow remote authenticated users to inject arbitrary web script or HTML...
|
5.4 Medium | — | 0,63% | 11 Feb 2020 |
|
CVE-2020-5826
symantec endpoint protection
Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may...
|
5.5 Medium | — | 0,34% | 11 Feb 2020 |
|
CVE-2020-5827
symantec endpoint protection manager
Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an exis...
|
3.3 Low | — | 0,35% | 11 Feb 2020 |
|
CVE-2020-5828
symantec endpoint protection manager
Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an exis...
|
3.3 Low | — | 0,35% | 11 Feb 2020 |
|
CVE-2020-5829
symantec endpoint protection manager
Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an exis...
|
3.3 Low | — | 0,35% | 11 Feb 2020 |
|
CVE-2020-5830
symantec endpoint protection manager
Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an exis...
|
3.3 Low | — | 0,35% | 11 Feb 2020 |
|
CVE-2020-5831
symantec endpoint protection manager
Symantec Endpoint Protection Manager (SEPM), prior to 14.2 RU2 MP1, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an exis...
|
3.3 Low | — | 0,35% | 11 Feb 2020 |
|
CVE-2020-8429
kinetica
The Admin web application in Kinetica 7.0.9.2.20191118151947 does not properly sanitise the input for the function getLogs. This lack of sanitisation could be exploited t...
|
8.8 High | — | 1,7% | 11 Feb 2020 |
|
CVE-2020-5820
symantec endpoint protection
Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may...
|
7.8 High | — | 0,39% | 11 Feb 2020 |
|
CVE-2020-5821
symantec endpoint protection
Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may...
|
7.8 High | — | 0,43% | 11 Feb 2020 |
|
CVE-2020-5822
symantec endpoint protection
Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may...
|
7.8 High | — | 0,39% | 11 Feb 2020 |