Katalog CVE (hal. 5149)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 257.501 (Critical 35.796 · High 102.981 · KEV 1.741 · sejak 2020) · Pembaruan terakhir: 14 Okt 2026, 12:28 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 257.401–257.450 dari 257.501 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2013-3660 microsoft windows 7, microsoft windows 8 +6 lainnya The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Ser...	7.8 High	KEV	39,3%	24 Mei 2013
CVE-2013-2729 adobe acrobat, adobe acrobat reader +6 lainnya Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vect...	9.8 Critical	KEV	66,6%	16 Mei 2013
CVE-2013-1675 mozilla firefox, mozilla thunderbird +16 lainnya Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures...	6.5 Medium	KEV	6,7%	16 Mei 2013
CVE-2013-2094 linux kernel The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges v...	8.4 High	KEV	47,7%	14 Mei 2013
CVE-2013-1347 microsoft internet explorer Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not...	8.8 High	KEV	77,7%	5 Mei 2013
CVE-2013-2423 oracle jre, canonical ubuntu linux +1 lainnya Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect inte...	3.7 Low	KEV	85,2%	17 Apr 2013
CVE-2013-2596 linux kernel, motorola android Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other product...	7.8 High	KEV	3,2%	13 Apr 2013
CVE-2013-0074 microsoft silverlight Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to ex...	7.8 High	KEV · ransomware	78,9%	13 Mar 2013
CVE-2013-2551 microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to...	8.8 High	KEV · ransomware	73,9%	11 Mar 2013
CVE-2013-0643 adobe flash player, redhat enterprise linux desktop +6 lainnya The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on...	8.8 High	KEV	10,5%	27 Feb 2013
CVE-2013-0648 adobe flash player, opensuse +6 lainnya Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS...	8.8 High	KEV	11,1%	27 Feb 2013
CVE-2013-0640 adobe acrobat, adobe acrobat reader +7 lainnya Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memo...	7.8 High	KEV	86,9%	14 Feb 2013
CVE-2013-0641 adobe acrobat, adobe acrobat reader +7 lainnya Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted...	7.8 High	KEV	32,3%	14 Feb 2013
CVE-2013-0431 oracle jre, oracle openjdk Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to b...	3.7 Low	KEV · ransomware	90,1%	31 Jan 2013
CVE-2013-0632 adobe coldfusion administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the...	9.8 Critical	KEV	93,6%	17 Jan 2013
CVE-2013-0422 oracle jdk, oracle jre +2 lainnya Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the Jmx...	9.8 Critical	KEV · ransomware	97,0%	10 Jan 2013
CVE-2013-0629 adobe coldfusion Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in...	7.5 High	KEV	65,8%	9 Jan 2013
CVE-2013-0631 adobe coldfusion Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.	7.5 High	KEV	66,4%	9 Jan 2013
CVE-2013-0625 adobe coldfusion Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspec...	9.8 Critical	KEV	93,8%	9 Jan 2013
CVE-2012-4792 microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a...	8.8 High	KEV	78,8%	30 Des 2012
CVE-2012-2539 microsoft office compatibility pack, microsoft office web apps +3 lainnya Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execut...	7.8 High	KEV	53,0%	12 Des 2012
CVE-2012-3152 oracle fusion middleware Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confide...	9.1 Critical	KEV	98,8%	16 Okt 2012
CVE-2012-0518 oracle fusion middleware Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via...	4.7 Medium	KEV	4,7%	16 Okt 2012
CVE-2012-5076 oracle jre, suse linux enterprise desktop Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, inte...	9.8 Critical	KEV	91,3%	16 Okt 2012
CVE-2012-5054 adobe flash player Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malform...	8.8 High	KEV	21,2%	24 Sep 2012
CVE-2012-4969 microsoft internet explorer Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code vi...	8.1 High	KEV	80,3%	18 Sep 2012
CVE-2012-4681 oracle jdk, oracle jre Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a c...	9.8 Critical	KEV · ransomware	98,5%	28 Agt 2012
CVE-2012-1535 adobe flash player, redhat enterprise linux desktop +4 lainnya Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary...	7.8 High	KEV	70,4%	15 Agt 2012
CVE-2012-1856 microsoft commerce server, microsoft host integration server +5 lainnya The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1...	8.8 High	KEV	72,0%	15 Agt 2012
CVE-2012-1854 microsoft office, microsoft visual basic for applications +1 lainnya Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and...	7.8 High	KEV	20,9%	10 Jul 2012
CVE-2012-1723 oracle jdk Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and...	9.8 Critical	KEV · ransomware	93,7%	16 Jun 2012
CVE-2012-1889 microsoft xml core services Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of s...	8.8 High	KEV	83,5%	13 Jun 2012
CVE-2012-2034 adobe flash player, adobe air +7 lainnya Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 o...	7.5 High	KEV	7,7%	9 Jun 2012
CVE-2012-0507 sun jre, oracle jre Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier...	9.8 Critical	KEV · ransomware	98,2%	7 Jun 2012
CVE-2012-1823 php, fedoraproject fedora +15 lainnya sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equ...	9.8 Critical	KEV	100,0%	11 Mei 2012
CVE-2012-1710 oracle fusion middleware Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, inte...	9.8 Critical	KEV · ransomware	7,8%	3 Mei 2012
CVE-2012-0151 microsoft windows 7, microsoft windows server 2003 +3 lainnya The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1,...	7.8 High	KEV	87,7%	10 Apr 2012
CVE-2012-0158 microsoft office, microsoft office web components +8 lainnya The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, a...	8.8 High	KEV · ransomware	100,0%	10 Apr 2012
CVE-2012-0754 adobe flash player Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115....	8.1 High	KEV	91,1%	16 Feb 2012
CVE-2012-0767 adobe flash player Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6...	6.1 Medium	KEV	6,2%	16 Feb 2012
CVE-2012-0391 apache struts The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data typ...	9.8 Critical	KEV	75,6%	8 Jan 2012
CVE-2011-4723 dlink dir-300 firmware The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.	5.7 Medium	KEV	3,1%	20 Des 2011
CVE-2011-2462 adobe acrobat, adobe acrobat reader Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows...	9.8 Critical	KEV	88,9%	7 Des 2011
CVE-2011-3402 microsoft windows 7, microsoft windows server 2003 +3 lainnya Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windo...	8.8 High	KEV	78,1%	4 Nov 2011
CVE-2011-3544 oracle jdk, oracle jre Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start app...	9.8 Critical	KEV	96,7%	19 Okt 2011
CVE-2011-2005 microsoft windows server 2003, microsoft windows xp afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which a...	7.8 High	KEV	31,8%	12 Okt 2011
CVE-2011-1889 microsoft forefront threat management gateway The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors...	9.8 Critical	KEV	49,0%	16 Jun 2011
CVE-2011-1823 google android The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitra...	7.8 High	KEV	41,4%	9 Jun 2011
CVE-2011-0611 adobe flash player, adobe acrobat reader +5 lainnya Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka A...	8.8 High	KEV	99,4%	13 Apr 2011
CVE-2011-0609 adobe flash player, adobe acrobat +5 lainnya Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and...	7.8 High	KEV	63,5%	15 Mar 2011

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.