Katalog CVE (hal. 5146)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 257.565 (Critical 35.800 · High 103.006 · KEV 1.741 · sejak 2020) · Pembaruan terakhir: 14 Okt 2026, 18:26 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 257.251–257.300 dari 257.565 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2017-11357 progress telerik ui for asp.net ajax Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attackers to perform arbitrary file u...	9.8 Critical	KEV · ransomware	77,7%	23 Agt 2017
CVE-2017-6327 symantec message gateway The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability...	8.8 High	KEV	35,9%	11 Agt 2017
CVE-2015-2291 intel ethernet diagnostics driver iqvw32.sys, intel ethernet diagnostics driver iqvw64.sys (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or po...	7.8 High	KEV · ransomware	9,0%	9 Agt 2017
CVE-2017-12637 sap netweaver application server java Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Server Java 7.5 allows remote attackers to read arbi...	7.5 High	KEV	95,1%	7 Agt 2017
CVE-2017-6663 cisco ios A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause autonomic n...	6.5 Medium	KEV	2,1%	7 Agt 2017
CVE-2017-9822 dnnsoftware dotnetnuke DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."	8.8 High	KEV · ransomware	94,8%	20 Jul 2017
CVE-2017-6316 citrix netscaler sd-wan Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On CloudBridge (the fo...	9.8 Critical	KEV	73,0%	20 Jul 2017
CVE-2017-6736 cisco ios, cisco ios xe The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attac...	8.8 High	KEV	70,4%	17 Jul 2017
CVE-2017-6737 cisco ios, cisco ios xe A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attac...	8.8 High	KEV	45,2%	17 Jul 2017
CVE-2017-6738 cisco ios, cisco ios xe The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attac...	8.8 High	KEV	10,9%	17 Jul 2017
CVE-2017-6739 cisco ios, cisco ios xe A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attac...	8.8 High	KEV	10,9%	17 Jul 2017
CVE-2017-6740 cisco ios, cisco ios xe The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attac...	8.8 High	KEV	11,1%	17 Jul 2017
CVE-2017-6742 cisco ios, cisco ios xe A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attac...	8.8 High	KEV	21,4%	17 Jul 2017
CVE-2017-6743 cisco ios, cisco ios xe The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attac...	8.8 High	KEV	10,9%	17 Jul 2017
CVE-2017-6744 cisco ios The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attac...	8.8 High	KEV	7,3%	17 Jul 2017
CVE-2017-8570 microsoft office Microsoft Office allows a remote code execution vulnerability due to the way that it handles objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability"...	7.8 High	KEV	89,9%	11 Jul 2017
CVE-2017-9791 apache struts The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.	9.8 Critical	KEV	98,9%	10 Jul 2017
CVE-2017-9248 progress sitefinity, telerik ui for asp.net ajax Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersE...	9.8 Critical	KEV	75,1%	3 Jul 2017
CVE-2017-9841 phpunit project phpunit, oracle communications diameter signaling router Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " s...	9.8 Critical	KEV	100,0%	27 Jun 2017
CVE-2017-8543 microsoft windows 10 1507, microsoft windows 10 1511 +8 lainnya Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Window...	9.8 Critical	KEV	74,2%	15 Jun 2017
CVE-2017-8464 microsoft windows 10 1511, microsoft windows 10 1607 +7 lainnya Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 15...	8.8 High	KEV	90,0%	15 Jun 2017
CVE-2016-7836 skygroup skysea client view SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console progra...	9.8 Critical	KEV	19,2%	9 Jun 2017
CVE-2017-7494 samba, debian linux Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library...	9.8 Critical	KEV · ransomware	99,4%	30 Mei 2017
CVE-2017-6862 netgear wnr2000 firmware NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0.0.42 allow authentication bypass and remote code execution...	9.8 Critical	KEV	45,7%	26 Mei 2017
CVE-2017-8540 microsoft malware protection engine, microsoft endpoint protection +7 lainnya The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,...	7.8 High	KEV	71,9%	26 Mei 2017
CVE-2017-0262 microsoft office Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka...	7.8 High	KEV	81,0%	12 Mei 2017
CVE-2017-0263 microsoft windows 10 1507, microsoft windows 10 1511 +8 lainnya The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 151...	7.8 High	KEV	10,0%	12 Mei 2017
CVE-2017-0261 microsoft office Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution vulnerability when the software fails to properly handle objects in memory, aka...	7.8 High	KEV	78,1%	12 Mei 2017
CVE-2017-0222 microsoft internet explorer A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Corruption Vulnerability." This C...	8.8 High	KEV	29,6%	12 Mei 2017
CVE-2017-0213 microsoft windows 10 1507, microsoft windows 10 1511 +8 lainnya Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 G...	7.3 High	KEV · ransomware	84,3%	12 Mei 2017
CVE-2017-7921 hikvision ds-2cd2032-i firmware, hikvision ds-2cd2112-i firmware +56 lainnya An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to...	9.8 Critical	KEV	100,0%	6 Mei 2017
CVE-2017-5689 hpe proliant ml10 gen9 server firmware, siemens simatic itp1000 firmware +34 lainnya An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Managea...	9.8 Critical	KEV	92,2%	2 Mei 2017
CVE-2017-3066 adobe coldfusion Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10 Update 22 and earlier have a Java deserialization vulnerability in the Apac...	9.8 Critical	KEV	90,6%	27 Apr 2017
CVE-2017-8291 artifex ghostscript, debian linux +6 lainnya Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a "/OutputFile (%pipe%" substring in a crafte...	7.8 High	KEV	97,0%	27 Apr 2017
CVE-2017-5030 google chrome, debian linux +3 lainnya Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to...	8.8 High	KEV	40,6%	24 Apr 2017
CVE-2017-3506 oracle weblogic server Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0, 12.1.3....	7.4 High	KEV	96,3%	24 Apr 2017
CVE-2016-1555 netgear wnap320 firmware, netgear wndap350 firmware +5 lainnya (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP3...	9.8 Critical	KEV	98,3%	21 Apr 2017
CVE-2017-0199 microsoft office, microsoft windows 7 +4 lainnya Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP...	7.8 High	KEV · ransomware	99,5%	12 Apr 2017
CVE-2017-0210 microsoft internet explorer An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an attacker to access information...	8.8 High	KEV	22,3%	12 Apr 2017
CVE-2016-8735 apache tomcat, canonical ubuntu linux +17 lainnya Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecyc...	9.8 Critical	KEV	90,3%	6 Apr 2017
CVE-2017-6884 zyxel emg2926 firmware A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in the diagnostic tools, spe...	8.8 High	KEV · ransomware	34,6%	6 Apr 2017
CVE-2014-3931 multi-router looking glass project multi-router looking glass fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption.	9.8 Critical	KEV	29,0%	31 Mar 2017
CVE-2017-7269 microsoft internet information services Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote at...	9.8 Critical	KEV	99,8%	27 Mar 2017
CVE-2017-3881 cisco ios, cisco ios xe A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to c...	9.8 Critical	KEV	99,0%	17 Mar 2017
CVE-2017-0144 microsoft server message block, siemens acuson p300 firmware +7 lainnya The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Wind...	8.8 High	KEV · ransomware	99,2%	17 Mar 2017
CVE-2017-0145 microsoft server message block, siemens acuson p300 firmware +7 lainnya The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Wind...	8.8 High	KEV · ransomware	89,9%	17 Mar 2017
CVE-2017-0146 microsoft server message block, siemens acuson p300 firmware +7 lainnya The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Wind...	8.8 High	KEV · ransomware	89,9%	17 Mar 2017
CVE-2017-0147 microsoft windows 10 1507, microsoft windows 10 1511 +16 lainnya The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Wind...	7.5 High	KEV · ransomware	99,7%	17 Mar 2017
CVE-2017-0148 microsoft server message block, siemens acuson p300 firmware +7 lainnya The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Wind...	8.1 High	KEV · ransomware	99,4%	17 Mar 2017
CVE-2017-0149 microsoft internet explorer Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "In...	8.8 High	KEV	29,2%	17 Mar 2017

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.