Katalog CVE (hal. 5153)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 257.870 (Critical 35.834 · High 103.117 · KEV 1.741 · sejak 2020) · Pembaruan terakhir: 15 Okt 2026, 00:26 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 257.601–257.650 dari 257.870 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2017-0145 microsoft server message block, siemens acuson p300 firmware +7 lainnya The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Wind...	8.8 High	KEV · ransomware	89,9%	17 Mar 2017
CVE-2017-0146 microsoft server message block, siemens acuson p300 firmware +7 lainnya The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Wind...	8.8 High	KEV · ransomware	89,9%	17 Mar 2017
CVE-2017-0147 microsoft windows 10 1507, microsoft windows 10 1511 +16 lainnya The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Wind...	7.5 High	KEV · ransomware	99,7%	17 Mar 2017
CVE-2017-0148 microsoft server message block, siemens acuson p300 firmware +7 lainnya The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Wind...	8.1 High	KEV · ransomware	99,4%	17 Mar 2017
CVE-2017-0149 microsoft internet explorer Microsoft Internet Explorer 9 through 11 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "In...	8.8 High	KEV	29,2%	17 Mar 2017
CVE-2017-0143 microsoft server message block, philips intellispace portal +8 lainnya The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Wind...	8.8 High	KEV · ransomware	93,3%	17 Mar 2017
CVE-2017-0101 microsoft windows 7, microsoft windows server 2008 +1 lainnya The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2...	7.8 High	KEV · ransomware	57,5%	17 Mar 2017
CVE-2017-0059 microsoft internet explorer Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Internet Explorer Informa...	4.3 Medium	KEV	62,0%	17 Mar 2017
CVE-2017-0001 microsoft windows 10 1507, microsoft windows 10 1511 +8 lainnya The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windo...	7.8 High	KEV	3,1%	17 Mar 2017
CVE-2017-0005 microsoft windows 10 1507, microsoft windows 10 1511 +8 lainnya The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windo...	7.8 High	KEV	11,0%	17 Mar 2017
CVE-2017-0022 microsoft xml core services, microsoft windows 8.1 +2 lainnya Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP1; Windows Server 201...	6.5 Medium	KEV	18,1%	17 Mar 2017
CVE-2017-5638 apache struts, ibm storwize v3500 firmware +7 lainnya The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-up...	9.8 Critical	KEV · ransomware	100,0%	11 Mar 2017
CVE-2017-6334 netgear dgn2200 series firmware dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in th...	8.8 High	KEV	72,6%	6 Mar 2017
CVE-2017-0037 microsoft edge, microsoft internet explorer Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreakOnColumnSpanningElement functi...	8.1 High	KEV	80,4%	26 Feb 2017
CVE-2017-6077 netgear dgn2200 firmware ping.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the pin...	9.8 Critical	KEV	68,7%	22 Feb 2017
CVE-2016-10174 netgear d6100 firmware, netgear d7000 firmware +26 lainnya The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoking the URL /apply.cgi?/lang_check.html. This buffer overflow can be ex...	9.8 Critical	KEV	83,3%	30 Jan 2017
CVE-2016-5198 google chrome, redhat enterprise linux desktop +2 lainnya V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which...	8.8 High	KEV	34,2%	19 Jan 2017
CVE-2017-5521 netgear r6200 firmware, netgear r6300 firmware +11 lainnya An issue was discovered on NETGEAR R8500, R8300, R7000, R6400, R7300, R7100LG, R6300v2, WNDR3400v3, WNR3500Lv2, R6250, R6700, R6900, and R8000 devices. They are prone to...	8.1 High	KEV	89,2%	17 Jan 2017
CVE-2016-10033 phpmailer project phpmailer, wordpress +1 lainnya The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execut...	9.8 Critical	KEV	99,7%	30 Des 2016
CVE-2016-7262 microsoft excel, microsoft excel viewer +1 lainnya Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attack...	7.8 High	KEV	57,7%	20 Des 2016
CVE-2016-7892 adobe flash player desktop runtime, adobe flash player Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable use after free vulnerability in the TextField class. Successful exploitat...	8.8 High	KEV	18,8%	15 Des 2016
CVE-2016-6277 netgear d6220 firmware, netgear d6400 firmware +9 lainnya NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Beta, R6700 before 1.0.1.14.Beta, R6900, R7000 before 1.0.7.6.Beta, R7100LG before 1.0.0.28.Beta, R7300DST before...	8.8 High	KEV	99,8%	14 Des 2016
CVE-2016-9563 sap netweaver application server java BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via the sap.com~tc~bpem~him~uwlconn~provider~we...	6.5 Medium	KEV	24,2%	23 Nov 2016
CVE-2016-8562 siemens simatic cp 1543-1 firmware, siemens siplus net cp 1543-1 firmware A vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP 1543-1 (All versions < V2.0.28). Under special conditions it was possible...	7.5 High	KEV	3,6%	18 Nov 2016
CVE-2016-5195 canonical ubuntu linux, linux kernel +16 lainnya Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW...	7.0 High	KEV	83,5%	10 Nov 2016
CVE-2016-7256 microsoft windows 10 1507, microsoft windows 10 1511 +8 lainnya atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Win...	8.8 High	KEV	64,6%	10 Nov 2016
CVE-2016-7255 microsoft windows 10 1507, microsoft windows 10 1511 +8 lainnya The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, W...	7.8 High	KEV · ransomware	81,0%	10 Nov 2016
CVE-2016-7201 microsoft edge The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted...	8.8 High	KEV	80,0%	10 Nov 2016
CVE-2016-7200 microsoft edge The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted...	8.8 High	KEV	82,8%	10 Nov 2016
CVE-2016-7855 adobe flash player, redhat enterprise linux desktop +2 lainnya Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary cod...	8.8 High	KEV	25,2%	1 Nov 2016
CVE-2016-7193 microsoft office, microsoft office compatibility pack +2 lainnya Microsoft Word 2007 SP2, Office 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Wo...	7.8 High	KEV	57,6%	14 Okt 2016
CVE-2016-3393 microsoft windows 10 1507, microsoft windows 10 1511 +7 lainnya Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R...	7.8 High	KEV	68,5%	14 Okt 2016
CVE-2016-3298 microsoft internet explorer, microsoft windows 7 +2 lainnya Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers...	6.5 Medium	KEV	33,3%	14 Okt 2016
CVE-2016-6415 cisco ios, cisco ios xe +1 lainnya The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allow...	7.5 High	KEV	87,7%	19 Sep 2016
CVE-2016-3351 microsoft internet explorer, microsoft edge Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Informat...	6.5 Medium	KEV · ransomware	26,5%	14 Sep 2016
CVE-2016-4657 apple iphone os WebKit in Apple iOS before 9.3.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.	8.8 High	KEV	66,8%	25 Agt 2016
CVE-2016-4656 apple iphone os The kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app...	7.8 High	KEV	23,6%	25 Agt 2016
CVE-2016-4655 apple iphone os The kernel in Apple iOS before 9.3.5 allows attackers to obtain sensitive information from memory via a crafted app.	5.5 Medium	KEV	33,4%	25 Agt 2016
CVE-2016-6367 cisco adaptive security appliance software Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI comman...	7.8 High	KEV	22,6%	18 Agt 2016
CVE-2016-6366 cisco pix firewall software, cisco adaptive security appliance software +1 lainnya Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Secu...	8.8 High	KEV	87,6%	18 Agt 2016
CVE-2016-3309 microsoft windows 10 1507, microsoft windows 10 1511 +7 lainnya The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; a...	7.8 High	KEV · ransomware	20,5%	9 Agt 2016
CVE-2016-3643 solarwinds virtualization manager SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passw...	7.8 High	KEV	3,7%	17 Jun 2016
CVE-2016-4171 adobe flash player, redhat enterprise linux desktop +5 lainnya Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in...	9.8 Critical	KEV	20,1%	16 Jun 2016
CVE-2016-3235 microsoft visio, microsoft visio viewer Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to...	7.8 High	KEV	43,3%	16 Jun 2016
CVE-2016-4523 trihedral vtscada The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows remote attackers to cause a denial of service (out-of-bounds read and applica...	7.5 High	KEV	31,2%	9 Jun 2016
CVE-2016-4437 apache aurora, apache shiro +2 lainnya Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended a...	9.8 Critical	KEV	93,0%	7 Jun 2016
CVE-2016-3088 apache activemq The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE...	9.8 Critical	KEV	98,5%	1 Jun 2016
CVE-2010-5326 sap netweaver application server java The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote attackers to execute arb...	10.0 Critical	KEV	17,8%	13 Mei 2016
CVE-2016-4117 adobe flash player, redhat enterprise linux desktop +7 lainnya Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.	9.8 Critical	KEV · ransomware	94,4%	11 Mei 2016
CVE-2016-0189 microsoft jscript, microsoft vbscript +1 lainnya The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer 9 through 11 and other products, allow remote attackers to execute arbitr...	7.5 High	KEV · ransomware	94,1%	11 Mei 2016

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.