Katalog CVE (hal. 5169)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.538 (Critical 35.913 · High 103.408 · KEV 1.745 · sejak 2020) · Pembaruan terakhir: 16 Okt 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 258.401–258.450 dari 258.538 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2014-6271 gnu bash, arista eos +14 lainnya GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code...	9.8 Critical	KEV	100,0%	24 Sep 2014
CVE-2014-4404 apple iphone os, apple mac os x +1 lainnya Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbitrary code in a privileged context via an applicatio...	7.8 High	KEV	48,9%	18 Sep 2014
CVE-2013-2597 codeaurora android-msm Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center...	8.4 High	KEV	1,5%	31 Agt 2014
CVE-2014-2817 microsoft internet explorer Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."	8.8 High	KEV	26,3%	12 Agt 2014
CVE-2014-0546 adobe acrobat, adobe acrobat reader Adobe Reader and Acrobat 10.x before 10.1.11 and 11.x before 11.0.08 on Windows allow attackers to bypass a sandbox protection mechanism, and consequently execute native...	9.8 Critical	KEV	22,3%	12 Agt 2014
CVE-2014-3120 elasticsearch The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the...	8.1 High	KEV	88,6%	28 Jul 2014
CVE-2013-3993 ibm infosphere biginsights IBM InfoSphere BigInsights before 2.1.0.3 allows remote authenticated users to bypass intended file and directory restrictions, or access untrusted data or code, via craf...	6.5 Medium	KEV · ransomware	4,8%	7 Jul 2014
CVE-2014-3153 linux kernel, redhat enterprise linux server aus +7 lainnya The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to...	7.8 High	KEV	37,2%	7 Jun 2014
CVE-2014-1812 microsoft windows 7, microsoft windows 8 +4 lainnya The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold an...	8.8 High	KEV · ransomware	64,9%	14 Mei 2014
CVE-2014-0130 redhat subscription asset manager, redhat enterprise linux server +1 lainnya Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5,...	7.5 High	KEV	53,7%	7 Mei 2014
CVE-2014-0196 linux kernel, debian linux +28 lainnya The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows l...	5.5 Medium	KEV	22,5%	7 Mei 2014
CVE-2014-1776 microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption...	9.8 Critical	KEV	82,7%	27 Apr 2014
CVE-2014-0780 indusoft web studio Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and...	9.8 Critical	KEV	74,7%	25 Apr 2014
CVE-2014-0160 openssl, filezilla-project filezilla server +26 lainnya The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensit...	7.5 High	KEV	100,0%	7 Apr 2014
CVE-2014-1761 microsoft office, microsoft office compatibility pack +5 lainnya Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Office for Mac 2011; Word Automation Services on Share...	7.8 High	KEV	77,7%	25 Mar 2014
CVE-2014-2120 cisco adaptive security appliance software Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web scri...	6.1 Medium	KEV	22,6%	19 Mar 2014
CVE-2013-7331 microsoft internet explorer The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intr...	6.5 Medium	KEV	50,2%	26 Feb 2014
CVE-2014-0502 adobe flash player, adobe air sdk +8 lainnya Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, A...	8.8 High	KEV	24,8%	21 Feb 2014
CVE-2014-0322 microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMar...	8.8 High	KEV	85,1%	14 Feb 2014
CVE-2014-0497 adobe flash player, google chrome +7 lainnya Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows r...	9.8 Critical	KEV	99,9%	5 Feb 2014
CVE-2014-0496 adobe acrobat Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via...	8.8 High	KEV	40,0%	15 Jan 2014
CVE-2013-3900 microsoft windows 10 1507, microsoft windows 10 1607 +20 lainnya Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers...	5.5 Medium	KEV	44,6%	11 Des 2013
CVE-2013-5065 microsoft windows 2003 server, microsoft windows xp NDProxy.sys in the kernel in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows local users to gain privileges via a crafted application, as exploited in the wil...	7.8 High	KEV	34,7%	28 Nov 2013
CVE-2013-6282 linux kernel The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers...	8.8 High	KEV	39,7%	20 Nov 2013
CVE-2013-5223 dlink dsl-2760u firmware Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow remote authenticated users to inject arbitrary web script or HTML via the...	5.4 Medium	KEV	50,8%	19 Nov 2013
CVE-2013-3918 microsoft windows 7, microsoft windows 8 +8 lainnya The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008...	8.8 High	KEV	73,7%	12 Nov 2013
CVE-2013-3906 microsoft excel viewer, microsoft lync +6 lainnya GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 201...	7.8 High	KEV	84,9%	6 Nov 2013
CVE-2013-3897 microsoft internet explorer Use-after-free vulnerability in the CDisplayPointer class in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or c...	8.8 High	KEV	77,3%	9 Okt 2013
CVE-2013-3896 microsoft silverlight Microsoft Silverlight 5 before 5.1.20913.0 does not properly validate pointers during access to Silverlight elements, which allows remote attackers to obtain sensitive in...	5.5 Medium	KEV	68,0%	9 Okt 2013
CVE-2013-3893 microsoft internet explorer Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary...	8.8 High	KEV	87,5%	18 Sep 2013
CVE-2013-4810 hp application lifecycle management, hp procurve manager HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management allow remote attackers to execute arbit...	9.8 Critical	KEV	79,5%	16 Sep 2013
CVE-2013-3346 adobe acrobat, adobe acrobat reader Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allow attackers to execute arbitrary code or cause a denial of service (memory corr...	9.8 Critical	KEV	78,9%	30 Agt 2013
CVE-2013-2251 apache archiva, apache struts +2 lainnya Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirec...	9.8 Critical	KEV	100,0%	20 Jul 2013
CVE-2013-3163 microsoft internet explorer Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "I...	8.8 High	KEV	70,7%	10 Jul 2013
CVE-2013-1690 mozilla firefox, mozilla thunderbird +13 lainnya Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange e...	8.8 High	KEV	69,0%	26 Jun 2013
CVE-2013-2465 oracle jre, sun jre Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlie...	9.8 Critical	KEV · ransomware	98,8%	18 Jun 2013
CVE-2013-1331 microsoft office Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading...	7.8 High	KEV	79,8%	12 Jun 2013
CVE-2013-3660 microsoft windows 7, microsoft windows 8 +6 lainnya The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Ser...	7.8 High	KEV	39,3%	24 Mei 2013
CVE-2013-2729 adobe acrobat, adobe acrobat reader +6 lainnya Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vect...	9.8 Critical	KEV	66,6%	16 Mei 2013
CVE-2013-1675 mozilla firefox, mozilla thunderbird +16 lainnya Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures...	6.5 Medium	KEV	6,7%	16 Mei 2013
CVE-2013-2094 linux kernel The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users to gain privileges v...	8.4 High	KEV	47,7%	14 Mei 2013
CVE-2013-1347 microsoft internet explorer Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not...	8.8 High	KEV	77,7%	5 Mei 2013
CVE-2013-2423 oracle jre, canonical ubuntu linux +1 lainnya Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect inte...	3.7 Low	KEV	85,2%	17 Apr 2013
CVE-2013-2596 linux kernel, motorola android Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other product...	7.8 High	KEV	3,2%	13 Apr 2013
CVE-2013-0074 microsoft silverlight Microsoft Silverlight 5, and 5 Developer Runtime, before 5.1.20125.0 does not properly validate pointers during HTML object rendering, which allows remote attackers to ex...	7.8 High	KEV · ransomware	78,9%	13 Mar 2013
CVE-2013-2551 microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to...	8.8 High	KEV · ransomware	73,9%	11 Mar 2013
CVE-2013-0643 adobe flash player, redhat enterprise linux desktop +6 lainnya The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on...	8.8 High	KEV	10,5%	27 Feb 2013
CVE-2013-0648 adobe flash player, opensuse +6 lainnya Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS...	8.8 High	KEV	11,1%	27 Feb 2013
CVE-2013-0640 adobe acrobat, adobe acrobat reader +7 lainnya Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memo...	7.8 High	KEV	86,9%	14 Feb 2013
CVE-2013-0641 adobe acrobat, adobe acrobat reader +7 lainnya Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted...	7.8 High	KEV	32,3%	14 Feb 2013

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.