Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2009-1151
phpmyadmin, debian linux
Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitrary PHP code into a c...
|
9.8 Critical | KEV | 96,6% | 26 Mar 2009 |
|
CVE-2009-0927
adobe acrobat reader
Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a cr...
|
8.8 High | KEV | 96,6% | 19 Mar 2009 |
|
CVE-2009-0238
microsoft excel, microsoft excel viewer +3 lainnya
Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel Viewer 2003 Gold and SP3; Excel Viewer; Compatibility Pack for Word, Excel, and PowerPoint 2007 F...
|
8.8 High | KEV | 43,2% | 25 Feb 2009 |
|
CVE-2008-2992
adobe acrobat, adobe acrobat reader +1 lainnya
Stack-based buffer overflow in Adobe Acrobat and Reader 8.1.2 and earlier allows remote attackers to execute arbitrary code via a PDF file that calls the util.printf Java...
|
7.8 High | KEV · ransomware | 98,5% | 4 Nov 2008 |
|
CVE-2008-4250
microsoft windows 2000, microsoft windows server 2003 +3 lainnya
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to exec...
|
9.8 Critical | KEV | 98,8% | 23 Okt 2008 |
|
CVE-2008-4128
cisco ios
Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Router allow remote attac...
|
8.1 High | KEV | 33,9% | 18 Sep 2008 |
|
CVE-2008-3431
oracle virtualbox
The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHOD_NEITHER communication method for IOCTLs and does not properly valida...
|
8.8 High | KEV | 6,9% | 5 Agt 2008 |
|
CVE-2007-5659
adobe acrobat, adobe acrobat reader
Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified...
|
7.8 High | KEV | 87,4% | 12 Feb 2008 |
|
CVE-2008-0655
adobe acrobat, adobe acrobat reader
Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.
|
8.8 High | KEV | 37,9% | 7 Feb 2008 |
|
CVE-2007-3010
al-enterprise omnipcx enterprise communication server
masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to execute arbitrary commands via sh...
|
9.8 Critical | KEV | 97,4% | 18 Sep 2007 |
|
CVE-2007-0671
microsoft access, microsoft excel +12 lainnya
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitr...
|
8.8 High | KEV | 43,2% | 3 Feb 2007 |
|
CVE-2006-2492
microsoft office, microsoft works suite
Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Works Suites through 2006, allows user-assisted attackers to e...
|
8.8 High | KEV | 48,1% | 20 Mei 2006 |
|
CVE-2006-1547
apache struts
ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encod...
|
7.5 High | KEV | 54,6% | 30 Mar 2006 |
|
CVE-2005-2773
hp openview network node manager
HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) node parameter to connectedNod...
|
9.8 Critical | KEV | 74,6% | 2 Sep 2005 |
|
CVE-2004-1464
cisco ios
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Teln...
|
5.9 Medium | KEV | 4,8% | 31 Des 2004 |
|
CVE-2004-0210
microsoft interix, microsoft windows 2000 +1 lainnya
The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length val...
|
7.8 High | KEV | 7,2% | 6 Agt 2004 |
|
CVE-2002-0367
microsoft windows 2000, microsoft windows nt
smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate programs that connect to other programs, which allows local users to gain admin...
|
7.8 High | KEV | 4,9% | 25 Jun 2002 |