Katalog CVE (hal. 5156)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 257.870 (Critical 35.834 · High 103.117 · KEV 1.741 · sejak 2020) · Pembaruan terakhir: 15 Okt 2026, 00:26 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 257.751–257.800 dari 257.870 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2014-0322 microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMar...	8.8 High	KEV	85,1%	14 Feb 2014
CVE-2014-0497 adobe flash player, google chrome +7 lainnya Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows r...	9.8 Critical	KEV	99,9%	5 Feb 2014
CVE-2014-0496 adobe acrobat Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via...	8.8 High	KEV	40,0%	15 Jan 2014
CVE-2013-3900 microsoft windows 10 1507, microsoft windows 10 1607 +20 lainnya Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers...	5.5 Medium	KEV	44,6%	11 Des 2013
CVE-2013-5065 microsoft windows 2003 server, microsoft windows xp NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wil...	7.8 High	KEV	34,7%	28 Nov 2013
CVE-2013-6282 linux kernel The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers...	8.8 High	KEV	39,7%	20 Nov 2013
CVE-2013-5223 dlink dsl-2760u firmware Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated users to inject arbitrary web script or HTML via the...	5.4 Medium	KEV	50,8%	19 Nov 2013
CVE-2013-3918 microsoft windows 7, microsoft windows 8 +8 lainnya The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008...	8.8 High	KEV	73,7%	12 Nov 2013
CVE-2013-3906 microsoft excel viewer, microsoft lync +6 lainnya GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 201...	7.8 High	KEV	84,9%	6 Nov 2013
CVE-2013-3897 microsoft internet explorer Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or c...	8.8 High	KEV	77,3%	9 Okt 2013
CVE-2013-3896 microsoft silverlight Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive in...	5.5 Medium	KEV	68,0%	9 Okt 2013
CVE-2013-3893 microsoft internet explorer Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary...	8.8 High	KEV	87,5%	18 Sep 2013
CVE-2013-4810 hp application lifecycle management, hp procurve manager HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management allow remote attackers to execute arbit...	9.8 Critical	KEV	79,5%	16 Sep 2013
CVE-2013-3346 adobe acrobat, adobe acrobat reader Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corr...	9.8 Critical	KEV	78,9%	30 Agt 2013
CVE-2013-2251 apache archiva, apache struts +2 lainnya Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirec...	9.8 Critical	KEV	100,0%	20 Jul 2013
CVE-2013-3163 microsoft internet explorer Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "I...	8.8 High	KEV	70,7%	10 Jul 2013
CVE-2013-1690 mozilla firefox, mozilla thunderbird +13 lainnya Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange e...	8.8 High	KEV	69,0%	26 Jun 2013
CVE-2013-2465 oracle jre, sun jre Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlie...	9.8 Critical	KEV · ransomware	98,8%	18 Jun 2013
CVE-2013-1331 microsoft office Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading...	7.8 High	KEV	79,8%	12 Jun 2013
CVE-2013-3660 microsoft windows 7, microsoft windows 8 +6 lainnya The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Ser...	7.8 High	KEV	39,3%	24 Mei 2013
CVE-2013-2729 adobe acrobat, adobe acrobat reader +6 lainnya Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vect...	9.8 Critical	KEV	66,6%	16 Mei 2013
CVE-2013-1675 mozilla firefox, mozilla thunderbird +16 lainnya Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures...	6.5 Medium	KEV	6,7%	16 Mei 2013
CVE-2013-2094 linux kernel The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges v...	8.4 High	KEV	47,7%	14 Mei 2013
CVE-2013-1347 microsoft internet explorer Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not...	8.8 High	KEV	77,7%	5 Mei 2013
CVE-2013-2423 oracle jre, canonical ubuntu linux +1 lainnya Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect inte...	3.7 Low	KEV	85,2%	17 Apr 2013
CVE-2013-2596 linux kernel, motorola android Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other product...	7.8 High	KEV	3,2%	13 Apr 2013
CVE-2013-0074 microsoft silverlight Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to ex...	7.8 High	KEV · ransomware	78,9%	13 Mar 2013
CVE-2013-2551 microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to...	8.8 High	KEV · ransomware	73,9%	11 Mar 2013
CVE-2013-0643 adobe flash player, redhat enterprise linux desktop +6 lainnya The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on...	8.8 High	KEV	10,5%	27 Feb 2013
CVE-2013-0648 adobe flash player, opensuse +6 lainnya Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS...	8.8 High	KEV	11,1%	27 Feb 2013
CVE-2013-0640 adobe acrobat, adobe acrobat reader +7 lainnya Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memo...	7.8 High	KEV	86,9%	14 Feb 2013
CVE-2013-0641 adobe acrobat, adobe acrobat reader +7 lainnya Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted...	7.8 High	KEV	32,3%	14 Feb 2013
CVE-2013-0431 oracle jre, oracle openjdk Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to b...	3.7 Low	KEV · ransomware	90,1%	31 Jan 2013
CVE-2013-0632 adobe coldfusion administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the...	9.8 Critical	KEV	93,6%	17 Jan 2013
CVE-2013-0422 oracle jdk, oracle jre +2 lainnya Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the Jmx...	9.8 Critical	KEV · ransomware	97,0%	10 Jan 2013
CVE-2013-0629 adobe coldfusion Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in...	7.5 High	KEV	65,8%	9 Jan 2013
CVE-2013-0631 adobe coldfusion Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.	7.5 High	KEV	66,4%	9 Jan 2013
CVE-2013-0625 adobe coldfusion Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspec...	9.8 Critical	KEV	93,8%	9 Jan 2013
CVE-2012-4792 microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a...	8.8 High	KEV	78,8%	30 Des 2012
CVE-2012-2539 microsoft office compatibility pack, microsoft office web apps +3 lainnya Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execut...	7.8 High	KEV	53,0%	12 Des 2012
CVE-2012-3152 oracle fusion middleware Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confide...	9.1 Critical	KEV	98,8%	16 Okt 2012
CVE-2012-0518 oracle fusion middleware Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via...	4.7 Medium	KEV	4,7%	16 Okt 2012
CVE-2012-5076 oracle jre, suse linux enterprise desktop Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, inte...	9.8 Critical	KEV	91,3%	16 Okt 2012
CVE-2012-5054 adobe flash player Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malform...	8.8 High	KEV	21,2%	24 Sep 2012
CVE-2012-4969 microsoft internet explorer Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code vi...	8.1 High	KEV	80,3%	18 Sep 2012
CVE-2012-4681 oracle jdk, oracle jre Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a c...	9.8 Critical	KEV · ransomware	98,5%	28 Agt 2012
CVE-2012-1535 adobe flash player, redhat enterprise linux desktop +4 lainnya Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary...	7.8 High	KEV	70,4%	15 Agt 2012
CVE-2012-1856 microsoft commerce server, microsoft host integration server +5 lainnya The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1...	8.8 High	KEV	72,0%	15 Agt 2012
CVE-2012-1854 microsoft office, microsoft visual basic for applications +1 lainnya Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and...	7.8 High	KEV	20,9%	10 Jul 2012
CVE-2012-1723 oracle jdk Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and...	9.8 Critical	KEV · ransomware	93,7%	16 Jun 2012

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.