Katalog CVE (hal. 5164)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.217 (Critical 35.883 · High 103.262 · KEV 1.745 · sejak 2020) · Pembaruan terakhir: 15 Okt 2026, 06:27 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 258.151–258.200 dari 258.217 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2012-1823 php, fedoraproject fedora +15 lainnya sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equ...	9.8 Critical	KEV	100,0%	11 Mei 2012
CVE-2012-1710 oracle fusion middleware Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, inte...	9.8 Critical	KEV · ransomware	7,8%	3 Mei 2012
CVE-2012-0151 microsoft windows 7, microsoft windows server 2003 +3 lainnya The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1,...	7.8 High	KEV	87,7%	10 Apr 2012
CVE-2012-0158 microsoft office, microsoft office web components +8 lainnya The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, a...	8.8 High	KEV · ransomware	100,0%	10 Apr 2012
CVE-2012-0754 adobe flash player Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115....	8.1 High	KEV	91,1%	16 Feb 2012
CVE-2012-0767 adobe flash player Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6...	6.1 Medium	KEV	6,2%	16 Feb 2012
CVE-2012-0391 apache struts The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data typ...	9.8 Critical	KEV	75,6%	8 Jan 2012
CVE-2011-4723 dlink dir-300 firmware The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.	5.7 Medium	KEV	3,1%	20 Des 2011
CVE-2011-2462 adobe acrobat, adobe acrobat reader Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows...	9.8 Critical	KEV	88,9%	7 Des 2011
CVE-2011-3402 microsoft windows 7, microsoft windows server 2003 +3 lainnya Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windo...	8.8 High	KEV	78,1%	4 Nov 2011
CVE-2011-3544 oracle jdk, oracle jre Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start app...	9.8 Critical	KEV	96,7%	19 Okt 2011
CVE-2011-2005 microsoft windows server 2003, microsoft windows xp afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which a...	7.8 High	KEV	31,8%	12 Okt 2011
CVE-2011-1889 microsoft forefront threat management gateway The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors...	9.8 Critical	KEV	49,0%	16 Jun 2011
CVE-2011-1823 google android The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitra...	7.8 High	KEV	41,4%	9 Jun 2011
CVE-2011-0611 adobe flash player, adobe acrobat reader +5 lainnya Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka A...	8.8 High	KEV	99,4%	13 Apr 2011
CVE-2011-0609 adobe flash player, adobe acrobat +5 lainnya Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and...	7.8 High	KEV	63,5%	15 Mar 2011
CVE-2010-4344 exim, opensuse +2 lainnya Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that inclu...	9.8 Critical	KEV	71,7%	14 Des 2010
CVE-2010-4345 exim, opensuse +2 lainnya Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive...	7.8 High	KEV	18,0%	14 Des 2010
CVE-2010-3904 linux kernel, opensuse +6 lainnya The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly valid...	7.8 High	KEV	15,9%	6 Des 2010
CVE-2010-4398 microsoft windows 7, microsoft windows server 2003 +3 lainnya Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2,...	7.8 High	KEV	8,7%	6 Des 2010
CVE-2010-3333 microsoft office, microsoft open xml file format converter Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML Fil...	7.8 High	KEV	89,4%	10 Nov 2010
CVE-2010-2572 microsoft powerpoint Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Pars...	7.8 High	KEV	58,6%	10 Nov 2010
CVE-2010-3962 microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (C...	8.1 High	KEV	96,8%	5 Nov 2010
CVE-2010-3765 mozilla firefox, mozilla thunderbird +1 lainnya Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is...	9.8 Critical	KEV	83,2%	28 Okt 2010
CVE-2010-2883 adobe acrobat, adobe acrobat reader Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute a...	7.3 High	KEV	81,4%	9 Sep 2010
CVE-2010-3035 cisco ios xr Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of ser...	7.5 High	KEV	5,7%	30 Agt 2010
CVE-2010-2861 adobe coldfusion Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the loc...	9.8 Critical	KEV · ransomware	99,7%	11 Agt 2010
CVE-2010-1871 redhat jboss enterprise application platform, netapp oncommand balance +2 lainnya JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL)...	8.8 High	KEV	83,4%	5 Agt 2010
CVE-2010-2568 microsoft windows 7, microsoft windows server 2003 +3 lainnya Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arb...	7.8 High	KEV	91,3%	22 Jul 2010
CVE-2010-1297 adobe air, adobe flash player +3 lainnya Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windo...	7.8 High	KEV	82,5%	8 Jun 2010
CVE-2010-0738 redhat jboss enterprise application platform The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 perfo...	5.3 Medium	KEV · ransomware	79,6%	28 Apr 2010
CVE-2010-1428 redhat jboss enterprise application platform The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 per...	7.5 High	KEV · ransomware	61,5%	28 Apr 2010
CVE-2010-0840 oracle jre, opensuse +1 lainnya Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attacke...	9.8 Critical	KEV	96,3%	1 Apr 2010
CVE-2010-0806 microsoft internet explorer Use-after-free vulnerability in the Peer Objects component (aka iepeers.dll) in Microsoft Internet Explorer 6, 6 SP1, and 7 allows remote attackers to execute arbitrary c...	8.8 High	KEV	82,2%	10 Mar 2010
CVE-2010-0188 adobe acrobat, adobe acrobat reader Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly...	7.8 High	KEV · ransomware	88,2%	22 Feb 2010
CVE-2009-3960 adobe blazeds, adobe coldfusion +3 lainnya Unspecified vulnerability in BlazeDS 3.2 and earlier, as used in LiveCycle 8.0.1, 8.2.1, and 9.0, LiveCycle Data Services 2.5.1, 2.6.1, and 3.0, Flex Data Services 2.0.1,...	6.5 Medium	KEV · ransomware	90,1%	15 Feb 2010
CVE-2010-0232 microsoft windows 2000, microsoft windows 7 +1 lainnya The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, a...	7.8 High	KEV	28,7%	21 Jan 2010
CVE-2010-0249 microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, S...	8.8 High	KEV	91,9%	15 Jan 2010
CVE-2009-3953 adobe acrobat, suse linux enterprise debuginfo +2 lainnya The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attackers to execute arbitra...	8.8 High	KEV	83,2%	13 Jan 2010
CVE-2009-4324 adobe acrobat, adobe acrobat reader +3 lainnya Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader and Acrobat 9.x before 9.3, and 8.x before 8.2 on Windows and Mac OS X, a...	7.8 High	KEV	81,9%	15 Des 2009
CVE-2009-3129 microsoft excel, microsoft excel viewer +2 lainnya Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer 2003 SP3; Offic...	7.8 High	KEV	84,0%	11 Nov 2009
CVE-2009-3459 adobe acrobat, adobe acrobat reader Heap-based buffer overflow in Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 allows remote attackers to execute arbitrary code via a craf...	8.8 High	KEV	86,6%	13 Okt 2009
CVE-2009-2055 cisco ios xr Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated...	5.9 Medium	KEV	3,3%	19 Agt 2009
CVE-2009-1862 adobe acrobat, adobe acrobat reader +1 lainnya Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers...	7.8 High	KEV	21,2%	23 Jul 2009
CVE-2008-0015 microsoft windows 2003 server, microsoft windows xp Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX control in msvidctl....	8.8 High	KEV	76,6%	7 Jul 2009
CVE-2009-0557 microsoft office, microsoft office compatibility pack +3 lainnya Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File For...	7.8 High	KEV	53,0%	10 Jun 2009
CVE-2009-1123 microsoft windows 2000, microsoft windows server 2003 +3 lainnya The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified...	7.8 High	KEV	4,9%	10 Jun 2009
CVE-2009-0563 microsoft office, microsoft office compatibility pack +2 lainnya Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Microsoft Office for Mac 2004 and 2008; Open XML File Format Converter for...	7.8 High	KEV	62,8%	10 Jun 2009
CVE-2009-1537 microsoft directx, microsoft windows 2000 +3 lainnya Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4, Windows XP SP2 and S...	8.8 High	KEV	51,2%	29 Mei 2009
CVE-2009-0556 microsoft office powerpoint, microsoft powerpoint Microsoft Office PowerPoint 2000 SP3, 2002 SP3, and 2003 SP3, and PowerPoint in Microsoft Office 2004 for Mac, allows remote attackers to execute arbitrary code via a Pow...	8.8 High	KEV	67,3%	3 Apr 2009

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.