Katalog CVE (hal. 5145)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 257.565 (Critical 35.800 · High 103.006 · KEV 1.741 · sejak 2020) · Pembaruan terakhir: 14 Okt 2026, 18:26 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 257.201–257.250 dari 257.565 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2018-0175 cisco ios, cisco ios xe +1 lainnya Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an u...	8.0 High	KEV	3,5%	28 Mar 2018
CVE-2018-0179 cisco ios Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an a...	5.9 Medium	KEV	4,9%	28 Mar 2018
CVE-2018-0180 cisco ios Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an a...	5.9 Medium	KEV	4,9%	28 Mar 2018
CVE-2018-0151 cisco ios xe A vulnerability in the quality of service (QoS) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a denia...	9.8 Critical	KEV	14,2%	28 Mar 2018
CVE-2018-0154 cisco ios A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthenticated, remote attacker...	7.5 High	KEV	7,1%	28 Mar 2018
CVE-2018-0155 cisco ios, cisco ios xe A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches co...	8.6 High	KEV	7,7%	28 Mar 2018
CVE-2018-0156 cisco ios, cisco ios xe A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an aff...	7.5 High	KEV	9,4%	28 Mar 2018
CVE-2018-0158 cisco ios, cisco ios xe A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to c...	8.6 High	KEV	7,2%	28 Mar 2018
CVE-2018-0159 cisco ios, cisco ios xe A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthentica...	7.5 High	KEV	6,9%	28 Mar 2018
CVE-2018-0161 cisco ios A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authe...	6.3 Medium	KEV	4,1%	28 Mar 2018
CVE-2018-0167 cisco ios, cisco ios xe +1 lainnya Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software cou...	8.8 High	KEV	3,4%	28 Mar 2018
CVE-2018-6882 synacor zimbra collaboration suite Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in Zimbra Collaboration Suite (ZCS) before 8.7 Patch 1 and 8.8.x before 8.8.7...	6.1 Medium	KEV · ransomware	29,8%	27 Mar 2018
CVE-2017-12319 cisco ios, cisco ios xe A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an unauthenticated, remote atta...	5.9 Medium	KEV	5,2%	27 Mar 2018
CVE-2018-7445 mikrotik routeros A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit...	9.8 Critical	KEV	60,8%	19 Mar 2018
CVE-2018-0147 cisco secure access control system A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthenticated, remote attacker to e...	9.8 Critical	KEV	18,2%	8 Mar 2018
CVE-2018-6530 dlink dir-860l firmware, dlink dir-865l firmware +2 lainnya OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_...	9.8 Critical	KEV · ransomware	96,7%	6 Mar 2018
CVE-2018-2380 sap customer relationship management SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "tra...	6.6 Medium	KEV · ransomware	28,9%	1 Mar 2018
CVE-2018-6789 exim, debian linux +1 lainnya An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted message, a buffer overflow may happen. This can be us...	9.8 Critical	KEV · ransomware	82,1%	8 Feb 2018
CVE-2018-0125 cisco rv132w firmware, cisco rv134w firmware A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to...	9.8 Critical	KEV	55,2%	8 Feb 2018
CVE-2018-4878 adobe flash player, redhat enterprise linux desktop +2 lainnya A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to...	7.8 High	KEV · ransomware	89,5%	6 Feb 2018
CVE-2017-1000353 jenkins, oracle communications cloud native core automated test suite Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution. An unauthenticated remote code execution v...	9.8 Critical	KEV	99,7%	29 Jan 2018
CVE-2018-0798 microsoft office, microsoft office compatibility pack +1 lainnya Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the...	8.8 High	KEV	95,1%	10 Jan 2018
CVE-2018-0802 microsoft office, microsoft office compatibility pack +1 lainnya Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the w...	7.8 High	KEV · ransomware	93,3%	10 Jan 2018
CVE-2017-1000486 primetek primefaces Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution	9.8 Critical	KEV	94,1%	3 Jan 2018
CVE-2017-17562 embedthis goahead, oracle integrated lights out manager Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of...	8.1 High	KEV	96,3%	12 Des 2017
CVE-2017-15944 paloaltonetworks pan-os Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute arbitrary code via vectors in...	9.8 Critical	KEV	98,3%	11 Des 2017
CVE-2017-11882 microsoft office Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbit...	7.8 High	KEV · ransomware	99,9%	15 Nov 2017
CVE-2017-16651 roundcube webmail, debian linux Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem, including configuratio...	7.8 High	KEV	45,7%	9 Nov 2017
CVE-2017-5070 google chrome, redhat enterprise linux desktop +2 lainnya Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code...	8.8 High	KEV	32,1%	27 Okt 2017
CVE-2017-11292 adobe flash player desktop runtime, adobe flash player +3 lainnya Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an ar...	8.8 High	KEV	11,9%	22 Okt 2017
CVE-2017-10271 oracle weblogic server Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1....	7.5 High	KEV · ransomware	100,0%	19 Okt 2017
CVE-2017-11826 microsoft office compatibility pack, microsoft office online server +5 lainnya Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Word Viewer, Word 2007, 2010, 20...	7.8 High	KEV	81,3%	13 Okt 2017
CVE-2017-11774 microsoft outlook Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in...	7.8 High	KEV	59,6%	13 Okt 2017
CVE-2017-1000253 centos, redhat enterprise linux +1 lainnya Linux distributions that have not patched their long-term kernels with https://git.kernel.org/linus/a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committed on April 14, 2015)...	7.8 High	KEV · ransomware	10,7%	5 Okt 2017
CVE-2017-12149 redhat jboss enterprise application platform In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Inv...	9.8 Critical	KEV · ransomware	90,7%	4 Okt 2017
CVE-2017-12617 apache tomcat, canonical ubuntu linux +20 lainnya When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly init...	8.1 High	KEV	100,0%	4 Okt 2017
CVE-2017-12240 cisco ios The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker to execute...	9.8 Critical	KEV	13,8%	29 Sep 2017
CVE-2017-12231 cisco ios A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attacker to...	7.5 High	KEV	7,1%	29 Sep 2017
CVE-2017-12232 cisco ios A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 could allow an...	6.5 Medium	KEV	2,2%	29 Sep 2017
CVE-2017-12233 cisco ios Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attac...	7.5 High	KEV	7,1%	29 Sep 2017
CVE-2017-12234 cisco ios Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote attac...	7.5 High	KEV	7,1%	29 Sep 2017
CVE-2017-12235 cisco ios A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an unauthenticated, remote...	7.5 High	KEV	7,1%	29 Sep 2017
CVE-2017-12237 cisco ios, cisco ios xe A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthenticated, rem...	7.5 High	KEV	7,1%	29 Sep 2017
CVE-2017-12238 cisco ios A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an unauthenticated, adja...	6.5 Medium	KEV	2,0%	29 Sep 2017
CVE-2015-1187 dlink dir-626l firmware, dlink dir-636l firmware +13 lainnya The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.	9.8 Critical	KEV	82,9%	21 Sep 2017
CVE-2017-12615 apache tomcat, netapp 7-mode transition tool +20 lainnya When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possi...	8.1 High	KEV · ransomware	99,6%	19 Sep 2017
CVE-2017-9805 apache struts, cisco digital media manager +5 lainnya The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without...	8.1 High	KEV	99,4%	15 Sep 2017
CVE-2017-8759 microsoft .net framework Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET F...	7.8 High	KEV	88,7%	13 Sep 2017
CVE-2017-6627 cisco ios, cisco ios xe A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote attacker to cause the inp...	7.5 High	KEV	6,2%	7 Sep 2017
CVE-2017-11317 telerik ui for asp.net ajax Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perf...	9.8 Critical	KEV	84,2%	23 Agt 2017

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.