Katalog CVE (hal. 5147)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 257.501 (Critical 35.796 · High 102.981 · KEV 1.741 · sejak 2020) · Pembaruan terakhir: 14 Okt 2026, 12:28 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 257.301–257.350 dari 257.501 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2016-0040 microsoft windows 7, microsoft windows server 2008 +1 lainnya The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allows local users to gain privileges via a crafted application, aka "Win...	7.8 High	KEV	24,5%	10 Feb 2016
CVE-2016-0034 microsoft silverlight Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of servi...	8.8 High	KEV · ransomware	69,4%	13 Jan 2016
CVE-2015-7450 ibm sterling b2b integrator, ibm sterling integrator +5 lainnya Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute...	9.8 Critical	KEV	97,8%	2 Jan 2016
CVE-2015-8651 adobe air sdk, adobe air sdk & compiler +15 lainnya Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0...	8.8 High	KEV	67,7%	28 Des 2015
CVE-2015-7755 juniper screenos Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6....	9.8 Critical	KEV	61,1%	19 Des 2015
CVE-2015-6175 microsoft windows 10 1507 The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Privilege Vulnerability."	7.8 High	KEV	5,1%	9 Des 2015
CVE-2015-5287 Advisory redhat automatic bug reporting tool, oracle linux +5 lainnya The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on...	7.8 High	KEV	5,0%	7 Des 2015
CVE-2015-5317 jenkins, redhat openshift The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request...	7.5 High	KEV	23,0%	25 Nov 2015
CVE-2015-4852 oracle virtual desktop infrastructure, oracle storagetek tape analytics sw tool +1 lainnya The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serial...	9.8 Critical	KEV	96,0%	18 Nov 2015
CVE-2015-4902 oracle jdk, oracle jre +19 lainnya Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.	5.3 Medium	KEV	13,6%	22 Okt 2015
CVE-2015-7645 adobe flash player, opensuse evergreen +8 lainnya Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbit...	7.8 High	KEV · ransomware	65,3%	15 Okt 2015
CVE-2015-2546 microsoft windows 10 1507, microsoft windows 7 +7 lainnya The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows...	8.2 High	KEV · ransomware	10,1%	9 Sep 2015
CVE-2015-2545 microsoft office Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image, aka "Microsoft Office Malformed...	7.8 High	KEV	85,9%	9 Sep 2015
CVE-2015-2502 microsoft internet explorer Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "M...	8.8 High	KEV	51,0%	19 Agt 2015
CVE-2015-1769 microsoft windows 10, microsoft windows 7 +7 lainnya Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold...	6.6 Medium	KEV	4,1%	15 Agt 2015
CVE-2015-1642 microsoft office Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulner...	7.8 High	KEV	53,1%	15 Agt 2015
CVE-2015-3246 Advisory redhat enterprise linux, opensuse +1 lainnya libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cau...	7.4 High	KEV	8,4%	11 Agt 2015
CVE-2015-4495 mozilla firefox, mozilla firefox os +13 lainnya The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and r...	8.8 High	KEV	68,6%	8 Agt 2015
CVE-2015-5477 juniper junos named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKE...	7.5 High	KEV	99,4%	29 Jul 2015
CVE-2015-2426 microsoft windows 10, microsoft windows 7 +7 lainnya Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Wind...	8.8 High	KEV	86,6%	20 Jul 2015
CVE-2015-2590 oracle jdk, oracle jre +17 lainnya Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and ava...	9.8 Critical	KEV	25,5%	16 Jul 2015
CVE-2015-2387 microsoft windows 7, microsoft windows 8 +7 lainnya ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win...	7.8 High	KEV	34,9%	14 Jul 2015
CVE-2015-2425 microsoft internet explorer Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Ex...	8.8 High	KEV	44,7%	14 Jul 2015
CVE-2015-2424 microsoft excel viewer, microsoft office +4 lainnya Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to...	8.8 High	KEV	40,4%	14 Jul 2015
CVE-2015-2419 microsoft internet explorer JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web si...	8.8 High	KEV	53,1%	14 Jul 2015
CVE-2015-5123 redhat enterprise linux desktop, redhat enterprise linux server +7 lainnya Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x th...	9.8 Critical	KEV	18,8%	14 Jul 2015
CVE-2015-5122 adobe flash player, adobe flash player desktop runtime +7 lainnya Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x...	9.8 Critical	KEV	93,9%	14 Jul 2015
CVE-2015-5119 adobe flash player, redhat enterprise linux desktop +9 lainnya Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 o...	9.8 Critical	KEV	99,3%	8 Jul 2015
CVE-2015-3113 adobe flash player, opensuse evergreen +13 lainnya Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows rem...	9.8 Critical	KEV	99,8%	23 Jun 2015
CVE-2015-2360 microsoft windows 7, microsoft windows 8 +7 lainnya win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Wi...	8.8 High	KEV	14,8%	10 Jun 2015
CVE-2015-1770 microsoft office Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use...	8.8 High	KEV	35,0%	10 Jun 2015
CVE-2015-4068 arcserve udp Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted f...	9.1 Critical	KEV	63,6%	29 Mei 2015
CVE-2015-3306 fedoraproject fedora, debian linux +3 lainnya The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.	10.0 Critical	KEV	99,5%	18 Mei 2015
CVE-2015-1671 microsoft .net framework, microsoft live meeting +2 lainnya The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Consol...	7.8 High	KEV	49,0%	13 Mei 2015
CVE-2014-8361 dlink dir-905l firmware, dlink dir-605l firmware +24 lainnya The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.	9.8 Critical	KEV	100,0%	1 Mei 2015
CVE-2015-3035 tp-link tl-wr741nd firmware, tp-link tl-wr841n firmware +9 lainnya Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316,...	7.5 High	KEV	83,9%	22 Apr 2015
CVE-2015-1701 microsoft windows 2003 server, microsoft windows 7 +2 lainnya Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application...	7.8 High	KEV · ransomware	55,9%	21 Apr 2015
CVE-2015-3043 adobe flash player, novell suse linux enterprise desktop +9 lainnya Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary co...	9.8 Critical	KEV	73,9%	14 Apr 2015
CVE-2015-1641 microsoft office, microsoft office compatibility pack +4 lainnya Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on Sh...	7.8 High	KEV	97,2%	14 Apr 2015
CVE-2015-1635 microsoft windows 7, microsoft windows 8 +3 lainnya HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary...	9.8 Critical	KEV	100,0%	14 Apr 2015
CVE-2015-1130 apple mac os x The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.	7.8 High	KEV	9,9%	10 Apr 2015
CVE-2015-0666 cisco prime data center network manager Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files...	7.5 High	KEV	40,4%	3 Apr 2015
CVE-2015-2051 dlink dir-645 firmware The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to...	8.8 High	KEV	97,1%	23 Feb 2015
CVE-2015-1427 elasticsearch, redhat fuse The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary...	9.8 Critical	KEV	99,9%	17 Feb 2015
CVE-2015-0071 microsoft internet explorer Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulner...	6.5 Medium	KEV	33,6%	11 Feb 2015
CVE-2015-0313 adobe flash player, opensuse evergreen +5 lainnya Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows r...	9.8 Critical	KEV	95,3%	2 Feb 2015
CVE-2015-0311 adobe flash player, suse linux enterprise desktop +3 lainnya Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allow...	9.8 Critical	KEV	85,6%	23 Jan 2015
CVE-2015-0310 adobe flash player Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of...	7.8 High	KEV	15,1%	23 Jan 2015
CVE-2015-0016 microsoft windows 7, microsoft windows 8 +6 lainnya Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Window...	7.8 High	KEV	75,8%	13 Jan 2015
CVE-2014-100005 dlink dir-600 firmware Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17b02 allow remote attackers to hijack the authentica...	8.0 High	KEV	43,5%	13 Jan 2015

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.