Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2019-20097
atlassian bitbucket
Bitbucket Server and Bitbucket Data Center versions starting from 1.0.0 before 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.1.9, from version 6....
|
8.8 High | — | 2,5% | 15 Jan 2020 |
|
CVE-2019-15010
atlassian bitbucket
Bitbucket Server and Bitbucket Data Center versions starting from version 3.0.0 before version 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.1.9,...
|
8.8 High | — | 2,6% | 15 Jan 2020 |
|
CVE-2019-15012
atlassian bitbucket
Bitbucket Server and Bitbucket Data Center from version 4.13. before 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.1.9, from version 6.2.0 before...
|
8.8 High | — | 1,6% | 15 Jan 2020 |
|
CVE-2009-3724
python-markdown2 project python-markdown2
python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues.
|
6.1 Medium | — | 0,77% | 15 Jan 2020 |
|
CVE-2009-5025
pyforum project pyforum
A backdoor (aka BMSA-2009-07) was found in PyForum v1.0.3 where an attacker who knows a valid user email could force a password reset on behalf of that user.
|
7.5 High | — | 1,8% | 15 Jan 2020 |
|
CVE-2009-5068
simplemachines simple machines forum
There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3. On some configurations a SMF deployment is shared by several "c...
|
7.2 High | — | 1,7% | 15 Jan 2020 |
|
CVE-2020-3941
vmware tools
The repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for privilege escalation in the Virtual Machine where Tools is installed. Thi...
|
7.0 High | — | 0,31% | 15 Jan 2020 |
|
CVE-2019-15961
clamav, cisco email security appliance firmware +2 lainnya
A vulnerability in the email parsing module Clam AntiVirus (ClamAV) Software versions 0.102.0, 0.101.4 and prior could allow an unauthenticated, remote attacker to cause...
|
6.5 Medium | — | 3,1% | 15 Jan 2020 |
|
CVE-2019-18244
osisoft pi vision
In OSIsoft PI System multiple products and versions, a local attacker could view sensitive information in log files when service accounts are customized during installati...
|
4.7 Medium | — | 0,25% | 15 Jan 2020 |
|
CVE-2019-18271
osisoft pi vision
OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to a cross-site request forgery that may be introduced on the PI Vision adm...
|
8.8 High | — | 0,64% | 15 Jan 2020 |
|
CVE-2019-18273
osisoft pi vision
OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 SP1. The affected product is vulnerable to cross-site scripting, which may allow invalid input to be introduced...
|
4.8 Medium | — | 0,69% | 15 Jan 2020 |
|
CVE-2019-18275
osisoft pi vision
OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access control, which may return unauthorized tag data when...
|
6.5 Medium | — | 1,1% | 15 Jan 2020 |
|
CVE-2020-1929
apache beam
The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification. However this configuration is not respected and the certif...
|
7.5 High | — | 1,0% | 15 Jan 2020 |
|
CVE-2015-1809
jenkins cloudbees
XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query.
|
7.5 High | — | 1,4% | 15 Jan 2020 |
|
CVE-2015-1811
jenkins cloudbees
XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML doc...
|
7.5 High | — | 1,4% | 15 Jan 2020 |
|
CVE-2015-6591
freereprintables articlefr
Directory traversal vulnerability in application/templates/amelia/loadjs.php in Free Reprintables ArticleFR 3.0.7 and earlier allows local users to read arbitrary files v...
|
5.5 Medium | — | 0,58% | 15 Jan 2020 |
|
CVE-2015-5071
bmc remedy ar system server
AR System Mid Tier in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary files v...
|
6.5 Medium | — | 1,8% | 15 Jan 2020 |
|
CVE-2015-5072
bmc remedy ar system server
The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary lo...
|
6.5 Medium | — | 1,7% | 15 Jan 2020 |
|
CVE-2014-6448
juniper junos
Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary Python code via vect...
|
7.8 High | — | 0,33% | 15 Jan 2020 |
|
CVE-2009-1120
dell emc replistor
EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability. The flaw exists within the DoRcvRpcCall RPC function -exposed via t...
|
9.8 Critical | — | 7,4% | 15 Jan 2020 |
|
CVE-2020-2717
oracle banking corporate lending
Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0...
|
5.4 Medium | — | 1,1% | 15 Jan 2020 |
|
CVE-2020-2718
oracle banking corporate lending
Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0...
|
7.1 High | — | 1,1% | 15 Jan 2020 |
|
CVE-2020-2719
oracle banking corporate lending
Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0...
|
4.3 Medium | — | 0,94% | 15 Jan 2020 |
|
CVE-2020-2720
oracle flexcube investor servicing
Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affecte...
|
5.4 Medium | — | 0,81% | 15 Jan 2020 |
|
CVE-2020-2721
oracle flexcube investor servicing
Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affecte...
|
6.5 Medium | — | 1,3% | 15 Jan 2020 |
|
CVE-2020-2722
oracle flexcube investor servicing
Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affecte...
|
5.4 Medium | — | 1,0% | 15 Jan 2020 |
|
CVE-2020-2723
oracle flexcube investor servicing
Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affecte...
|
7.1 High | — | 1,1% | 15 Jan 2020 |
|
CVE-2020-2724
oracle flexcube investor servicing
Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affecte...
|
4.3 Medium | — | 0,98% | 15 Jan 2020 |
|
CVE-2020-2725
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 an...
|
6.5 Medium | — | 0,43% | 15 Jan 2020 |
|
CVE-2020-2726
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 an...
|
7.5 High | — | 0,38% | 15 Jan 2020 |
|
CVE-2020-2727
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 an...
|
6.0 Medium | — | 0,45% | 15 Jan 2020 |
|
CVE-2020-2728
oracle identity manager
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM - LDAP user and role Synch). The supported version that is affected is 12.2.1.3....
|
7.5 High | — | 2,0% | 15 Jan 2020 |
|
CVE-2020-2729
oracle identity manager
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Advanced Console). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3....
|
5.4 Medium | — | 0,81% | 15 Jan 2020 |
|
CVE-2020-2730
oracle revenue management and billing
Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: File Upload). Supported versio...
|
5.4 Medium | — | 0,74% | 15 Jan 2020 |
|
CVE-2020-2731
oracle database server
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerab...
|
3.9 Low | — | 0,40% | 15 Jan 2020 |
|
CVE-2020-2700
oracle flexcube universal banking
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected...
|
4.3 Medium | — | 0,94% | 15 Jan 2020 |
|
CVE-2020-2701
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 an...
|
7.5 High | — | 0,56% | 15 Jan 2020 |
|
CVE-2020-2702
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 an...
|
7.5 High | — | 0,42% | 15 Jan 2020 |
|
CVE-2020-2703
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36 and prior to 6.0.16...
|
6.5 Medium | — | 0,43% | 15 Jan 2020 |
|
CVE-2020-2704
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 an...
|
6.5 Medium | — | 0,45% | 15 Jan 2020 |
|
CVE-2020-2705
oracle vm virtualbox
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 an...
|
6.5 Medium | — | 0,38% | 15 Jan 2020 |
|
CVE-2020-2707
oracle primavera p6 enterprise project portfolio management
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: WebAccess). Supported versions that a...
|
5.4 Medium | — | 0,74% | 15 Jan 2020 |
|
CVE-2020-2709
oracle ilearning
Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Learner Pages). The supported version that is affected is 6.1. Easily exploitable vulnerabil...
|
4.7 Medium | — | 1,1% | 15 Jan 2020 |
|
CVE-2020-2710
oracle banking payments
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.1.0-14.3.0....
|
5.4 Medium | — | 0,81% | 15 Jan 2020 |
|
CVE-2020-2711
oracle banking payments
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.1.0-14.3.0....
|
6.5 Medium | — | 1,3% | 15 Jan 2020 |
|
CVE-2020-2712
oracle banking payments
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.1.0-14.3.0....
|
5.4 Medium | — | 1,0% | 15 Jan 2020 |
|
CVE-2020-2713
oracle banking payments
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.1.0-14.3.0....
|
7.1 High | — | 1,1% | 15 Jan 2020 |
|
CVE-2020-2714
oracle banking payments
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 14.1.0-14.3.0....
|
4.3 Medium | — | 0,94% | 15 Jan 2020 |
|
CVE-2020-2715
oracle banking corporate lending
Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0...
|
5.4 Medium | — | 0,78% | 15 Jan 2020 |
|
CVE-2020-2716
oracle banking corporate lending
Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0...
|
6.5 Medium | — | 1,3% | 15 Jan 2020 |