Katalog CVE (hal. 5150)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 257.501 (Critical 35.796 · High 102.981 · KEV 1.741 · sejak 2020) · Pembaruan terakhir: 14 Okt 2026, 12:28 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 257.451–257.500 dari 257.501 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2010-4344 exim, opensuse +2 lainnya Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that inclu...	9.8 Critical	KEV	71,7%	14 Des 2010
CVE-2010-4345 exim, opensuse +2 lainnya Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive...	7.8 High	KEV	18,0%	14 Des 2010
CVE-2010-3904 linux kernel, opensuse +6 lainnya The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly valid...	7.8 High	KEV	15,7%	6 Des 2010
CVE-2010-4398 microsoft windows 7, microsoft windows server 2003 +3 lainnya Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2,...	7.8 High	KEV	8,7%	6 Des 2010
CVE-2010-3333 microsoft office, microsoft open xml file format converter Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML Fil...	7.8 High	KEV	89,4%	10 Nov 2010
CVE-2010-2572 microsoft powerpoint Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Pars...	7.8 High	KEV	58,6%	10 Nov 2010
CVE-2010-3962 microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (C...	8.1 High	KEV	96,8%	5 Nov 2010
CVE-2010-3765 mozilla firefox, mozilla thunderbird +1 lainnya Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is...	9.8 Critical	KEV	83,2%	28 Okt 2010
CVE-2010-2883 adobe acrobat, adobe acrobat reader Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute a...	7.3 High	KEV	81,4%	9 Sep 2010
CVE-2010-3035 cisco ios xr Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of ser...	7.5 High	KEV	5,7%	30 Agt 2010
CVE-2010-2861 adobe coldfusion Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the loc...	9.8 Critical	KEV · ransomware	99,7%	11 Agt 2010
CVE-2010-1871 redhat jboss enterprise application platform, netapp oncommand balance +2 lainnya JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL)...	8.8 High	KEV	83,4%	5 Agt 2010
CVE-2010-2568 microsoft windows 7, microsoft windows server 2003 +3 lainnya Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arb...	7.8 High	KEV	91,3%	22 Jul 2010
CVE-2010-1297 adobe air, adobe flash player +3 lainnya Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windo...	7.8 High	KEV	82,5%	8 Jun 2010
CVE-2010-0738 redhat jboss enterprise application platform The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 perfo...	5.3 Medium	KEV · ransomware	79,6%	28 Apr 2010
CVE-2010-1428 redhat jboss enterprise application platform The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 per...	7.5 High	KEV · ransomware	61,5%	28 Apr 2010
CVE-2010-0840 oracle jre, opensuse +1 lainnya Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attacke...	9.8 Critical	KEV	96,3%	1 Apr 2010
CVE-2010-0806 microsoft internet explorer Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary c...	8.8 High	KEV	82,2%	10 Mar 2010
CVE-2010-0188 adobe acrobat, adobe acrobat reader Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly...	7.8 High	KEV · ransomware	88,2%	22 Feb 2010
CVE-2009-3960 adobe blazeds, adobe coldfusion +3 lainnya Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1,...	6.5 Medium	KEV · ransomware	90,1%	15 Feb 2010
CVE-2010-0232 microsoft windows 2000, microsoft windows 7 +1 lainnya The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, a...	7.8 High	KEV	28,7%	21 Jan 2010
CVE-2010-0249 microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, S...	8.8 High	KEV	91,9%	15 Jan 2010
CVE-2009-3953 adobe acrobat, suse linux enterprise debuginfo +2 lainnya The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitra...	8.8 High	KEV	83,2%	13 Jan 2010
CVE-2009-4324 adobe acrobat, adobe acrobat reader +3 lainnya Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, a...	7.8 High	KEV	81,9%	15 Des 2009
CVE-2009-3129 microsoft excel, microsoft excel viewer +2 lainnya Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Offic...	7.8 High	KEV	84,0%	11 Nov 2009
CVE-2009-3459 adobe acrobat, adobe acrobat reader Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a craf...	8.8 High	KEV	86,6%	13 Okt 2009
CVE-2009-2055 cisco ios xr Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated...	5.9 Medium	KEV	3,3%	19 Agt 2009
CVE-2009-1862 adobe acrobat, adobe acrobat reader +1 lainnya Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers...	7.8 High	KEV	21,2%	23 Jul 2009
CVE-2008-0015 microsoft windows 2003 server, microsoft windows xp Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl....	8.8 High	KEV	76,6%	7 Jul 2009
CVE-2009-0557 microsoft office, microsoft office compatibility pack +3 lainnya Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File For...	7.8 High	KEV	53,0%	10 Jun 2009
CVE-2009-1123 microsoft windows 2000, microsoft windows server 2003 +3 lainnya The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified...	7.8 High	KEV	4,9%	10 Jun 2009
CVE-2009-0563 microsoft office, microsoft office compatibility pack +2 lainnya Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for...	7.8 High	KEV	62,8%	10 Jun 2009
CVE-2009-1537 microsoft directx, microsoft windows 2000 +3 lainnya Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and S...	8.8 High	KEV	51,2%	29 Mei 2009
CVE-2009-0556 microsoft office powerpoint, microsoft powerpoint Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a Pow...	8.8 High	KEV	67,3%	3 Apr 2009
CVE-2009-1151 phpmyadmin, debian linux Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitrary PHP code into a c...	9.8 Critical	KEV	96,6%	26 Mar 2009
CVE-2009-0927 adobe acrobat reader Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a cr...	8.8 High	KEV	96,6%	19 Mar 2009
CVE-2009-0238 microsoft excel, microsoft excel viewer +3 lainnya Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and PowerPoint 2007 F...	8.8 High	KEV	43,2%	25 Feb 2009
CVE-2008-2992 adobe acrobat, adobe acrobat reader +1 lainnya Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf Java...	7.8 High	KEV · ransomware	98,5%	4 Nov 2008
CVE-2008-4250 microsoft windows 2000, microsoft windows server 2003 +3 lainnya The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to exec...	9.8 Critical	KEV	98,8%	23 Okt 2008
CVE-2008-4128 cisco ios Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attac...	8.1 High	KEV	33,9%	18 Sep 2008
CVE-2008-3431 oracle virtualbox The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly valida...	8.8 High	KEV	6,9%	5 Agt 2008
CVE-2007-5659 adobe acrobat, adobe acrobat reader Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified...	7.8 High	KEV	87,4%	12 Feb 2008
CVE-2008-0655 adobe acrobat, adobe acrobat reader Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.	8.8 High	KEV	37,9%	7 Feb 2008
CVE-2007-3010 al-enterprise omnipcx enterprise communication server masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via sh...	9.8 Critical	KEV	97,4%	18 Sep 2007
CVE-2007-0671 microsoft access, microsoft excel +12 lainnya Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitr...	8.8 High	KEV	43,2%	3 Feb 2007
CVE-2006-2492 microsoft office, microsoft works suite Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to e...	8.8 High	KEV	48,1%	20 Mei 2006
CVE-2006-1547 apache struts ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encod...	7.5 High	KEV	54,6%	30 Mar 2006
CVE-2005-2773 hp openview network node manager HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNod...	9.8 Critical	KEV	74,6%	2 Sep 2005
CVE-2004-1464 cisco ios Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Teln...	5.9 Medium	KEV	4,8%	31 Des 2004
CVE-2004-0210 microsoft interix, microsoft windows 2000 +1 lainnya The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length val...	7.8 High	KEV	7,2%	6 Agt 2004

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.