Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2020-5823
symantec endpoint protection
Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may...
|
7.8 High | — | 0,39% | 11 Feb 2020 |
|
CVE-2020-5824
symantec endpoint protection
Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may...
|
5.5 Medium | — | 0,34% | 11 Feb 2020 |
|
CVE-2020-5825
symantec endpoint protection
Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to 14.2 RU2 MP1 and prior to 14.2.5569.2100 respectively, may...
|
5.5 Medium | — | 0,36% | 11 Feb 2020 |
|
CVE-2014-9753
atutor
confirm.php in ATutor 2.2 and earlier allows remote attackers to bypass authentication and gain access as an existing user via the auto_login parameter.
|
9.8 Critical | — | 2,9% | 11 Feb 2020 |
|
CVE-2013-5988
semperplugins all in one seo pack
A Cross-site Scripting (XSS) vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter.
|
6.1 Medium | — | 1,1% | 11 Feb 2020 |
|
CVE-2012-4519
zenphoto
Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS.
|
6.1 Medium | — | 0,70% | 11 Feb 2020 |
|
CVE-2013-0517
ibm sterling external authentication server
A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and 2.4.1 via an unspecified OS command, which could let a l...
|
7.8 High | — | 0,59% | 11 Feb 2020 |
|
CVE-2013-1607
pdfkit project pdfkit
Ruby PDFKit gem prior to 0.5.3 has a Code Execution Vulnerability
|
9.8 Critical | — | 2,7% | 11 Feb 2020 |
|
CVE-2013-1760
thebuggenie the bug genie
The Bug Genie before 3.2.6 has Multiple XSS and HTML Injection Vulnerabilities
|
6.1 Medium | — | 1,1% | 11 Feb 2020 |
|
CVE-2013-2057
yabb
YaBB through 2.5.2: 'guestlanguage' Cookie Parameter Local File Include Vulnerability
|
9.8 Critical | — | 2,1% | 11 Feb 2020 |
|
CVE-2013-3684
imagely nextgen gallery
NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload
|
9.8 Critical | — | 19,2% | 11 Feb 2020 |
|
CVE-2013-3942
daum potplayer
Potplayer prior to 1.5.39659: DLL Loading Arbitrary Code Execution Vulnerability
|
7.8 High | — | 1,4% | 11 Feb 2020 |
|
CVE-2013-0803
polarbear cms project polarbear cms
A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code.
|
9.8 Critical | — | 75,0% | 11 Feb 2020 |
|
CVE-2013-1359
sonicwall analyzer, sonicwall global management system +2 lainnya
An Authentication Bypass Vulnerability exists in DELL SonicWALL Analyzer 7.0, Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0; Universal Management Appliance (...
|
9.8 Critical | — | 89,4% | 11 Feb 2020 |
|
CVE-2014-6447
juniper junos
Multiple vulnerabilities exist in Juniper Junos J-Web error handling that may lead to cross site scripting (XSS) issues or crash the J-Web service (DoS). This affects Jun...
|
7.1 High | — | 0,94% | 11 Feb 2020 |
|
CVE-2014-9748
libuv, nodejs node.js
The uv_rwlock_t fallback implementation for Windows XP and Server 2003 in libuv before 1.7.4 does not properly prevent threads from releasing the locks of other threads,...
|
8.1 High | — | 2,5% | 11 Feb 2020 |
|
CVE-2019-13946
siemens dk standard ethernet controller, siemens profinet driver +50 lainnya
Profinet-IO (PNIO) stack versions prior V06.00 do not properly limit
internal resource allocation when multiple legitimate diagnostic package
requests are sent to the DCE...
|
7.5 High | — | 1,5% | 11 Feb 2020 |
|
CVE-2019-13940
siemens s7-1200 cpu 1211c firmware, siemens s7-1200 cpu 1212c firmware +22 lainnya
A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU (All versions < V3.X.17), SIMATIC ET 200pro IM154-8F PN/DP CPU (All versions < V3.X.17), SIMATI...
|
7.5 High | — | 1,7% | 11 Feb 2020 |
|
CVE-2019-13941
siemens ozw672 firmware, siemens ozw772 firmware
A vulnerability has been identified in OZW672 (All versions < V10.00), OZW772 (All versions < V10.00). Vulnerable versions of OZW Web Server use predictable path names fo...
|
7.5 High | — | 1,6% | 11 Feb 2020 |
|
CVE-2019-13924
siemens scalance xc-200 firmware, siemens scalance xf-200 firmware +6 lainnya
A vulnerability has been identified in SCALANCE S602 (All versions < V4.1), SCALANCE S612 (All versions < V4.1), SCALANCE S623 (All versions < V4.1), SCALANCE S627-2M (Al...
|
5.4 Medium | — | 0,83% | 11 Feb 2020 |
|
CVE-2019-13925
siemens scalance s602 firmware, siemens scalance s612 firmware +2 lainnya
A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3...
|
7.5 High | — | 1,5% | 11 Feb 2020 |
|
CVE-2019-13926
siemens scalance s602 firmware, siemens scalance s612 firmware +2 lainnya
A vulnerability has been identified in SCALANCE S602 (All versions >= V3.0 and < V4.1), SCALANCE S612 (All versions >= V3.0 and < V4.1), SCALANCE S623 (All versions >= V3...
|
7.5 High | — | 1,5% | 11 Feb 2020 |
|
CVE-2014-2052
owncloud, owncloud server
Zend Framework, as used in ownCloud Server before 5.0.15 and 6.0.x before 6.0.2, allows remote attackers to read arbitrary files, cause a denial of service, or possibly h...
|
9.8 Critical | — | 2,5% | 11 Feb 2020 |
|
CVE-2013-1360
sonicwall analyzer, sonicwall global management system +2 lainnya
An Authentication Bypass vulnerability exists in DELL SonicWALL Global Management System (GMS) 4.1, 5.0, 5.1, 6.0, and 7.0, Analyzer 7.0, Universal Management Appliance (...
|
9.8 Critical | — | 23,2% | 11 Feb 2020 |
|
CVE-2013-4535
qemu, redhat virtualization +4 lainnya
The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-...
|
8.8 High | — | 0,96% | 11 Feb 2020 |
|
CVE-2020-6409
google chrome
Inappropriate implementation in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker who convinced the user to enter a URI to bypass navigation restri...
|
8.8 High | — | 1,7% | 11 Feb 2020 |
|
CVE-2020-6410
google chrome
Insufficient policy enforcement in navigation in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to confuse the user via a crafted domain name.
|
8.8 High | — | 1,7% | 11 Feb 2020 |
|
CVE-2020-6411
google chrome
Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a...
|
5.4 Medium | — | 1,4% | 11 Feb 2020 |
|
CVE-2020-6412
google chrome, opensuse backports sle
Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a...
|
5.4 Medium | — | 1,5% | 11 Feb 2020 |
|
CVE-2020-6413
google chrome, opensuse backports sle
Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass HTML validators via a crafted HTML page.
|
8.8 High | — | 1,9% | 11 Feb 2020 |
|
CVE-2020-6414
google chrome, opensuse backports sle
Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass navigation restrictions via a crafted HTML pag...
|
8.8 High | — | 1,9% | 11 Feb 2020 |
|
CVE-2020-6415
google chrome, fedoraproject fedora +6 lainnya
Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
|
8.8 High | — | 2,0% | 11 Feb 2020 |
|
CVE-2020-6416
google chrome, fedoraproject fedora +6 lainnya
Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
8.8 High | — | 2,0% | 11 Feb 2020 |
|
CVE-2020-6417
google chrome
Inappropriate implementation in installer in Google Chrome prior to 80.0.3987.87 allowed a local attacker to execute arbitrary code via a crafted registry entry.
|
7.8 High | — | 0,30% | 11 Feb 2020 |
|
CVE-2020-6396
google chrome, opensuse backports sle +6 lainnya
Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML pa...
|
4.3 Medium | — | 1,7% | 11 Feb 2020 |
|
CVE-2020-6397
google chrome, opensuse backports sle +6 lainnya
Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page.
|
6.5 Medium | — | 1,9% | 11 Feb 2020 |
|
CVE-2020-6398
google chrome, opensuse backports sle +6 lainnya
Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.
|
8.8 High | — | 1,8% | 11 Feb 2020 |
|
CVE-2020-6399
google chrome, opensuse backports sle
Insufficient policy enforcement in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
|
6.5 Medium | — | 2,0% | 11 Feb 2020 |
|
CVE-2020-6400
google chrome, opensuse backports sle +6 lainnya
Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
|
6.5 Medium | — | 2,0% | 11 Feb 2020 |
|
CVE-2020-6401
google chrome, opensuse backports sle
Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to perform domain spoofing via IDN homographs via a...
|
6.5 Medium | — | 1,9% | 11 Feb 2020 |
|
CVE-2020-6402
google chrome, opensuse backports sle +6 lainnya
Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to e...
|
8.8 High | — | 2,7% | 11 Feb 2020 |
|
CVE-2020-6403
google chrome, opensuse backports sle +6 lainnya
Incorrect implementation in Omnibox in Google Chrome on iOS prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted H...
|
4.3 Medium | — | 1,6% | 11 Feb 2020 |
|
CVE-2020-6404
google chrome, opensuse backports sle +6 lainnya
Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
8.8 High | — | 2,0% | 11 Feb 2020 |
|
CVE-2020-6405
google chrome
Out of bounds read in SQLite in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafte...
|
6.5 Medium | — | 2,6% | 11 Feb 2020 |
|
CVE-2020-6406
google chrome, fedoraproject fedora +5 lainnya
Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
8.8 High | — | 1,8% | 11 Feb 2020 |
|
CVE-2020-6408
google chrome, opensuse backports sle +6 lainnya
Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attacker to obtain potentially sensitive information via a crafted HTML pag...
|
6.5 Medium | — | 1,6% | 11 Feb 2020 |
|
CVE-2020-6380
google chrome, fedoraproject fedora
Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.130 allowed a remote attacker who had compromised the renderer process to bypass site is...
|
8.8 High | — | 1,2% | 11 Feb 2020 |
|
CVE-2020-6381
google chrome, opensuse backports sle +6 lainnya
Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a craft...
|
8.8 High | — | 2,2% | 11 Feb 2020 |
|
CVE-2020-6382
google chrome, fedoraproject fedora +6 lainnya
Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
|
8.8 High | — | 2,3% | 11 Feb 2020 |
|
CVE-2020-6385
google chrome, opensuse backports sle +6 lainnya
Insufficient policy enforcement in storage in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass site isolation via a crafted HTML page.
|
8.8 High | — | 2,3% | 11 Feb 2020 |