Katalog CVE (hal. 5170)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 258.538 (Critical 35.913 · High 103.408 · KEV 1.745 · sejak 2020) · Pembaruan terakhir: 16 Okt 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 258.451–258.500 dari 258.538 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2013-0431 oracle jre, oracle openjdk Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to b...	3.7 Low	KEV · ransomware	90,1%	31 Jan 2013
CVE-2013-0632 adobe coldfusion administrator.cfc in Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10 allows remote attackers to bypass authentication and possibly execute arbitrary code by logging in to the...	9.8 Critical	KEV	93,6%	17 Jan 2013
CVE-2013-0422 oracle jdk, oracle jre +2 lainnya Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the Jmx...	9.8 Critical	KEV · ransomware	97,0%	10 Jan 2013
CVE-2013-0629 adobe coldfusion Adobe ColdFusion 9.0, 9.0.1, 9.0.2, and 10, when a password is not configured, allows attackers to access restricted directories via unspecified vectors, as exploited in...	7.5 High	KEV	65,8%	9 Jan 2013
CVE-2013-0631 adobe coldfusion Adobe ColdFusion 9.0, 9.0.1, and 9.0.2 allows attackers to obtain sensitive information via unspecified vectors, as exploited in the wild in January 2013.	7.5 High	KEV	66,4%	9 Jan 2013
CVE-2013-0625 adobe coldfusion Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentication and possibly execute arbitrary code via unspec...	9.8 Critical	KEV	93,8%	9 Jan 2013
CVE-2012-4792 microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a...	8.8 High	KEV	78,8%	30 Des 2012
CVE-2012-2539 microsoft office compatibility pack, microsoft office web apps +3 lainnya Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; and Office Web Apps 2010 SP1 allow remote attackers to execut...	7.8 High	KEV	53,0%	12 Des 2012
CVE-2012-3152 oracle fusion middleware Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confide...	9.1 Critical	KEV	98,8%	16 Okt 2012
CVE-2012-0518 oracle fusion middleware Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle Fusion Middleware 10.1.4.3.0 allows remote attackers to affect integrity via...	4.7 Medium	KEV	4,7%	16 Okt 2012
CVE-2012-5076 oracle jre, suse linux enterprise desktop Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, inte...	9.8 Critical	KEV	91,3%	16 Okt 2012
CVE-2012-5054 adobe flash player Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before 11.4.402.265 allows remote attackers to execute arbitrary code via malform...	8.8 High	KEV	21,2%	24 Sep 2012
CVE-2012-4969 microsoft internet explorer Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code vi...	8.1 High	KEV	80,3%	18 Sep 2012
CVE-2012-4681 oracle jdk, oracle jre Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a c...	9.8 Critical	KEV · ransomware	98,5%	28 Agt 2012
CVE-2012-1535 adobe flash player, redhat enterprise linux desktop +4 lainnya Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary...	7.8 High	KEV	70,4%	15 Agt 2012
CVE-2012-1856 microsoft commerce server, microsoft host integration server +5 lainnya The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1...	8.8 High	KEV	72,0%	15 Agt 2012
CVE-2012-1854 microsoft office, microsoft visual basic for applications +1 lainnya Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and...	7.8 High	KEV	20,9%	10 Jul 2012
CVE-2012-1723 oracle jdk Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and...	9.8 Critical	KEV · ransomware	93,7%	16 Jun 2012
CVE-2012-1889 microsoft xml core services Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of s...	8.8 High	KEV	83,5%	13 Jun 2012
CVE-2012-2034 adobe flash player, adobe air +7 lainnya Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 o...	7.5 High	KEV	7,7%	9 Jun 2012
CVE-2012-0507 sun jre, oracle jre Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier...	9.8 Critical	KEV · ransomware	98,2%	7 Jun 2012
CVE-2012-1823 php, fedoraproject fedora +15 lainnya sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equ...	9.8 Critical	KEV	100,0%	11 Mei 2012
CVE-2012-1710 oracle fusion middleware Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, inte...	9.8 Critical	KEV · ransomware	7,8%	3 Mei 2012
CVE-2012-0151 microsoft windows 7, microsoft windows server 2003 +3 lainnya The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1,...	7.8 High	KEV	87,7%	10 Apr 2012
CVE-2012-0158 microsoft office, microsoft office web components +8 lainnya The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, a...	8.8 High	KEV · ransomware	100,0%	10 Apr 2012
CVE-2012-0754 adobe flash player Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115....	8.1 High	KEV	91,1%	16 Feb 2012
CVE-2012-0767 adobe flash player Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6...	6.1 Medium	KEV	6,2%	16 Feb 2012
CVE-2012-0391 apache struts The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data typ...	9.8 Critical	KEV	75,6%	8 Jan 2012
CVE-2011-4723 dlink dir-300 firmware The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.	5.7 Medium	KEV	3,1%	20 Des 2011
CVE-2011-2462 adobe acrobat, adobe acrobat reader Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX, allows...	9.8 Critical	KEV	88,9%	7 Des 2011
CVE-2011-3402 microsoft windows 7, microsoft windows server 2003 +3 lainnya Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windo...	8.8 High	KEV	78,1%	4 Nov 2011
CVE-2011-3544 oracle jdk, oracle jre Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start app...	9.8 Critical	KEV	96,7%	19 Okt 2011
CVE-2011-2005 microsoft windows server 2003, microsoft windows xp afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate user-mode input passed to kernel mode, which a...	7.8 High	KEV	31,8%	12 Okt 2011
CVE-2011-1889 microsoft forefront threat management gateway The NSPLookupServiceNext function in the client in Microsoft Forefront Threat Management Gateway (TMG) 2010 allows remote attackers to execute arbitrary code via vectors...	9.8 Critical	KEV	49,0%	16 Jun 2011
CVE-2011-1823 google android The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitra...	7.8 High	KEV	41,4%	9 Jun 2011
CVE-2011-0611 adobe flash player, adobe acrobat reader +5 lainnya Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka A...	8.8 High	KEV	99,4%	13 Apr 2011
CVE-2011-0609 adobe flash player, adobe acrobat +5 lainnya Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and...	7.8 High	KEV	63,5%	15 Mar 2011
CVE-2010-4344 exim, opensuse +2 lainnya Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that inclu...	9.8 Critical	KEV	71,7%	14 Des 2010
CVE-2010-4345 exim, opensuse +2 lainnya Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a directive...	7.8 High	KEV	18,0%	14 Des 2010
CVE-2010-3904 linux kernel, opensuse +6 lainnya The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly valid...	7.8 High	KEV	15,9%	6 Des 2010
CVE-2010-4398 microsoft windows 7, microsoft windows server 2003 +3 lainnya Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2,...	7.8 High	KEV	8,7%	6 Des 2010
CVE-2010-3333 microsoft office, microsoft open xml file format converter Stack-based buffer overflow in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML Fil...	7.8 High	KEV	89,4%	10 Nov 2010
CVE-2010-2572 microsoft powerpoint Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka "PowerPoint Pars...	7.8 High	KEV	58,6%	10 Nov 2010
CVE-2010-3962 microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code via vectors related to Cascading Style Sheets (C...	8.1 High	KEV	96,8%	5 Nov 2010
CVE-2010-3765 mozilla firefox, mozilla thunderbird +1 lainnya Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.10, when JavaScript is...	9.8 Critical	KEV	83,2%	28 Okt 2010
CVE-2010-2883 adobe acrobat, adobe acrobat reader Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote attackers to execute a...	7.3 High	KEV	81,4%	9 Sep 2010
CVE-2010-3035 cisco ios xr Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to cause a denial of ser...	7.5 High	KEV	5,7%	30 Agt 2010
CVE-2010-2861 adobe coldfusion Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the loc...	9.8 Critical	KEV · ransomware	99,7%	11 Agt 2010
CVE-2010-1871 redhat jboss enterprise application platform, netapp oncommand balance +2 lainnya JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL)...	8.8 High	KEV	83,4%	5 Agt 2010
CVE-2010-2568 microsoft windows 7, microsoft windows server 2003 +3 lainnya Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arb...	7.8 High	KEV	91,3%	22 Jul 2010

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.