Katalog CVE (hal. 5155)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 257.870 (Critical 35.834 · High 103.117 · KEV 1.741 · sejak 2020) · Pembaruan terakhir: 15 Okt 2026, 00:26 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 257.701–257.750 dari 257.870 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2015-4068 arcserve udp Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted f...	9.1 Critical	KEV	63,6%	29 Mei 2015
CVE-2015-3306 fedoraproject fedora, debian linux +3 lainnya The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.	10.0 Critical	KEV	99,5%	18 Mei 2015
CVE-2015-1671 microsoft .net framework, microsoft live meeting +2 lainnya The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Consol...	7.8 High	KEV	49,0%	13 Mei 2015
CVE-2014-8361 dlink dir-905l firmware, dlink dir-605l firmware +24 lainnya The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.	9.8 Critical	KEV	100,0%	1 Mei 2015
CVE-2015-3035 tp-link tl-wr741nd firmware, tp-link tl-wr841n firmware +9 lainnya Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316,...	7.5 High	KEV	83,9%	22 Apr 2015
CVE-2015-1701 microsoft windows 2003 server, microsoft windows 7 +2 lainnya Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application...	7.8 High	KEV · ransomware	55,9%	21 Apr 2015
CVE-2015-3043 adobe flash player, novell suse linux enterprise desktop +9 lainnya Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary co...	9.8 Critical	KEV	73,9%	14 Apr 2015
CVE-2015-1641 microsoft office, microsoft office compatibility pack +4 lainnya Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on Sh...	7.8 High	KEV	97,2%	14 Apr 2015
CVE-2015-1635 microsoft windows 7, microsoft windows 8 +3 lainnya HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary...	9.8 Critical	KEV	100,0%	14 Apr 2015
CVE-2015-1130 apple mac os x The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.	7.8 High	KEV	9,9%	10 Apr 2015
CVE-2015-0666 cisco prime data center network manager Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files...	7.5 High	KEV	40,4%	3 Apr 2015
CVE-2015-2051 dlink dir-645 firmware The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to...	8.8 High	KEV	97,1%	23 Feb 2015
CVE-2015-1427 elasticsearch, redhat fuse The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary...	9.8 Critical	KEV	99,9%	17 Feb 2015
CVE-2015-0071 microsoft internet explorer Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulner...	6.5 Medium	KEV	33,6%	11 Feb 2015
CVE-2015-0313 adobe flash player, opensuse evergreen +5 lainnya Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows r...	9.8 Critical	KEV	95,3%	2 Feb 2015
CVE-2015-0311 adobe flash player, suse linux enterprise desktop +3 lainnya Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allow...	9.8 Critical	KEV	85,6%	23 Jan 2015
CVE-2015-0310 adobe flash player Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of...	7.8 High	KEV	15,1%	23 Jan 2015
CVE-2015-0016 microsoft windows 7, microsoft windows 8 +6 lainnya Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Window...	7.8 High	KEV	75,8%	13 Jan 2015
CVE-2014-100005 dlink dir-600 firmware Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17b02 allow remote attackers to hijack the authentica...	8.0 High	KEV	43,5%	13 Jan 2015
CVE-2014-9163 adobe flash player Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attack...	7.8 High	KEV	20,7%	10 Des 2014
CVE-2014-8439 adobe flash player, adobe air +2 lainnya Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK...	8.8 High	KEV	20,4%	25 Nov 2014
CVE-2014-6324 microsoft windows 7, microsoft windows 8 +4 lainnya The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows...	8.8 High	KEV	87,3%	18 Nov 2014
CVE-2014-6332 microsoft windows 7, microsoft windows 8 +7 lainnya OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201...	8.8 High	KEV	94,9%	11 Nov 2014
CVE-2014-4077 microsoft office 2007 ime, microsoft windows 7 +3 lainnya Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Office 2007 SP3, when IMJPDCT.EXE (aka IME for Japanese) is i...	7.8 High	KEV	54,6%	11 Nov 2014
CVE-2014-6352 microsoft windows 7, microsoft windows 8 +6 lainnya Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow...	7.8 High	KEV	77,5%	22 Okt 2014
CVE-2014-4123 microsoft internet explorer Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability,"...	8.8 High	KEV	47,1%	15 Okt 2014
CVE-2014-4148 microsoft windows 7, microsoft windows 8 +7 lainnya win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1,...	8.8 High	KEV	59,9%	15 Okt 2014
CVE-2014-4113 microsoft windows 7, microsoft windows 8 +7 lainnya win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1,...	7.8 High	KEV	86,9%	15 Okt 2014
CVE-2014-4114 microsoft windows 7, microsoft windows 8 +6 lainnya Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow...	7.8 High	KEV	81,6%	15 Okt 2014
CVE-2014-6287 rejetto http file server The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to execute arbitrary progra...	9.8 Critical	KEV	99,3%	7 Okt 2014
CVE-2014-6278 gnu bash GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to execute arbitrary co...	8.8 High	KEV	99,7%	30 Sep 2014
CVE-2014-7169 gnu bash, arista eos +14 lainnya GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attack...	9.8 Critical	KEV	99,9%	25 Sep 2014
CVE-2014-6271 gnu bash, arista eos +14 lainnya GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code...	9.8 Critical	KEV	100,0%	24 Sep 2014
CVE-2014-4404 apple iphone os, apple mac os x +1 lainnya Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an applicatio...	7.8 High	KEV	48,9%	18 Sep 2014
CVE-2013-2597 codeaurora android-msm Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center...	8.4 High	KEV	1,5%	31 Agt 2014
CVE-2014-2817 microsoft internet explorer Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."	8.8 High	KEV	26,3%	12 Agt 2014
CVE-2014-0546 adobe acrobat, adobe acrobat reader Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native...	9.8 Critical	KEV	22,3%	12 Agt 2014
CVE-2014-3120 elasticsearch The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the...	8.1 High	KEV	88,6%	28 Jul 2014
CVE-2013-3993 ibm infosphere biginsights IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via craf...	6.5 Medium	KEV · ransomware	4,8%	7 Jul 2014
CVE-2014-3153 linux kernel, redhat enterprise linux server aus +7 lainnya The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to...	7.8 High	KEV	37,2%	7 Jun 2014
CVE-2014-1812 microsoft windows 7, microsoft windows 8 +4 lainnya The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an...	8.8 High	KEV · ransomware	64,9%	14 Mei 2014
CVE-2014-0130 redhat subscription asset manager, redhat enterprise linux server +1 lainnya Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5,...	7.5 High	KEV	53,7%	7 Mei 2014
CVE-2014-0196 linux kernel, debian linux +28 lainnya The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows l...	5.5 Medium	KEV	22,5%	7 Mei 2014
CVE-2014-1776 microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption...	9.8 Critical	KEV	82,7%	27 Apr 2014
CVE-2014-0780 indusoft web studio Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and...	9.8 Critical	KEV	74,7%	25 Apr 2014
CVE-2014-0160 openssl, filezilla-project filezilla server +26 lainnya The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensit...	7.5 High	KEV	100,0%	7 Apr 2014
CVE-2014-1761 microsoft office, microsoft office compatibility pack +5 lainnya Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on Share...	7.8 High	KEV	77,7%	25 Mar 2014
CVE-2014-2120 cisco adaptive security appliance software Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web scri...	6.1 Medium	KEV	22,6%	19 Mar 2014
CVE-2013-7331 microsoft internet explorer The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intr...	6.5 Medium	KEV	50,2%	26 Feb 2014
CVE-2014-0502 adobe flash player, adobe air sdk +8 lainnya Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, A...	8.8 High	KEV	24,8%	21 Feb 2014

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.