Katalog CVE (hal. 5209)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 261.947 (Critical 36.196 · High 104.724 · KEV 1.754 · sejak 2020) · Pembaruan terakhir: 21 Okt 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 260.401–260.450 dari 261.947 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2012-5190 accusoft prizm content connect Prizm Content Connect 5.1 has an Arbitrary File Upload Vulnerability	9.8 Critical	—	4,7%	21 Jan 2020
CVE-2011-4095 jara project jara Jara 1.6 has an XSS vulnerability	6.1 Medium	—	2,0%	21 Jan 2020
CVE-2011-4322 websitebaker websitebaker prior to and including 2.8.1 has an authentication error in backup module.	7.5 High	—	1,2%	21 Jan 2020
CVE-2020-7470 sonoff th10 firmware, sonoff th16 firmware Sonoff TH 10 and 16 devices with firmware 6.6.0.21 allows XSS via the Friendly Name 1 field (after a successful login with the Web Admin Password).	4.8 Medium	—	0,56%	21 Jan 2020
CVE-2011-2668 mozilla firefox Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length header	8.8 High	—	1,1%	21 Jan 2020
CVE-2011-2669 mozilla firefox Mozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of certificates.	6.5 Medium	—	0,56%	21 Jan 2020
CVE-2011-4094 jara project jara Jara 1.6 has a SQL injection vulnerability.	9.8 Critical	—	2,7%	21 Jan 2020
CVE-2020-7246 qdpm A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code file via the profile photo functionality, by lever...	8.8 High	—	83,2%	21 Jan 2020
CVE-2019-2267 qualcomm mdm9205 firmware, qualcomm qcs404 firmware +9 lainnya Locked regions may be modified through other interfaces in secure boot loader image due to improper access control. in Snapdragon Auto, Snapdragon Compute, Snapdragon Con...	7.8 High	—	0,22%	21 Jan 2020
CVE-2019-10611 qualcomm apq8009 firmware, qualcomm apq8017 firmware +38 lainnya Buffer overflow can occur while processing clip due to lack of check of object size before parsing in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdr...	9.8 Critical	—	0,90%	21 Jan 2020
CVE-2019-14003 qualcomm apq8009 firmware, qualcomm apq8017 firmware +44 lainnya Null pointer exception can happen while parsing invalid MKV clip where cue information is parsed before segment information in Snapdragon Auto, Snapdragon Compute, Snapdr...	7.5 High	—	0,81%	21 Jan 2020
CVE-2019-14004 qualcomm apq8009 firmware, qualcomm apq8017 firmware +44 lainnya Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer...	9.8 Critical	—	0,90%	21 Jan 2020
CVE-2019-14005 qualcomm apq8009 firmware, qualcomm apq8017 firmware +41 lainnya Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size duration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, S...	9.8 Critical	—	0,95%	21 Jan 2020
CVE-2019-14006 qualcomm apq8009 firmware, qualcomm apq8017 firmware +42 lainnya Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length check in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snap...	9.8 Critical	—	0,95%	21 Jan 2020
CVE-2019-14008 qualcomm mdm9150 firmware, qualcomm mdm9607 firmware +6 lainnya Possible null pointer dereference issue in location assistance data processing due to missing null check on resources before using it in Snapdragon Auto, Snapdragon Consu...	7.5 High	—	0,81%	21 Jan 2020
CVE-2019-14010 qualcomm mdm9607 firmware, qualcomm nicobar firmware +9 lainnya The device may enter into error state when some tool or application gets failure at 1st buffer map all and performs 2nd buffer map which happens to be at same physical ad...	7.5 High	—	0,66%	21 Jan 2020
CVE-2019-14013 qualcomm apq8009 firmware, qualcomm apq8017 firmware +45 lainnya While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data is read into the table in Snapdragon Auto, Snapdra...	9.8 Critical	—	0,91%	21 Jan 2020
CVE-2019-14014 qualcomm nicobar firmware, qualcomm sdm670 firmware +6 lainnya Possible buffer overflow when byte array receives incorrect input from reading source as array is not null terminated in Snapdragon Consumer IOT, Snapdragon Industrial IO...	9.8 Critical	—	0,90%	21 Jan 2020
CVE-2019-14016 qualcomm apq8009 firmware, qualcomm apq8017 firmware +39 lainnya Integer overflow occurs while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon I...	9.8 Critical	—	0,91%	21 Jan 2020
CVE-2019-14017 qualcomm apq8009 firmware, qualcomm apq8017 firmware +44 lainnya Heap buffer overflow can occur while parsing invalid MKV clip which is not standard and have invalid vorbis codec data in Snapdragon Auto, Snapdragon Compute, Snapdragon...	9.8 Critical	—	0,90%	21 Jan 2020
CVE-2019-14023 qualcomm mdm9607 firmware, qualcomm nicobar firmware +8 lainnya String format issue will occur while processing HLOS data as there is no user input validation to ensure inputs are properly NULL terminated before string copy in Snapdra...	7.8 High	—	0,20%	21 Jan 2020
CVE-2019-14024 qualcomm msm8917 firmware, qualcomm msm8953 firmware +15 lainnya Possible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8917, MSM8953, Nicobar, QM21...	7.8 High	—	0,20%	21 Jan 2020
CVE-2019-14034 qualcomm apq8009 firmware, qualcomm apq8053 firmware +25 lainnya Use after free while processing eeprom query as there is a chance to not unlock mutex after error occurs in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT,...	7.8 High	—	0,20%	21 Jan 2020
CVE-2019-14036 qualcomm apq8064 firmware, qualcomm apq8096au firmware +8 lainnya Possible buffer overflow issue in error processing due to improper validation of array index value in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapd...	7.8 High	—	0,20%	21 Jan 2020
CVE-2019-10532 qualcomm apq8009 firmware, qualcomm apq8017 firmware +39 lainnya Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consume...	9.8 Critical	—	1,1%	21 Jan 2020
CVE-2019-10548 qualcomm apq8009 firmware, qualcomm apq8053 firmware +32 lainnya While trying to obtain datad ipc handle during DPL initialization, Heap use-after-free issue can occur if modem SSR occurs at same time in Snapdragon Auto, Snapdragon Com...	7.8 High	—	0,20%	21 Jan 2020
CVE-2019-10558 qualcomm apq8009 firmware, qualcomm apq8017 firmware +39 lainnya While transferring data from APPS to DSP, Out of bound in FastRPC HLOS Driver due to the data buffer which can be controlled by DSP in Snapdragon Auto, Snapdragon Compute...	7.8 High	—	0,20%	21 Jan 2020
CVE-2019-10561 qualcomm apq8009 firmware, qualcomm apq8017 firmware +26 lainnya Improper initialization of local variables which are parameters to sfs api may cause invalid pointer dereference and leads to denial of service in Snapdragon Auto, Snapdr...	5.5 Medium	—	0,42%	21 Jan 2020
CVE-2019-10578 qualcomm apq8009 firmware, qualcomm apq8017 firmware +43 lainnya Null pointer dereference can occur while parsing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, S...	7.5 High	—	0,81%	21 Jan 2020
CVE-2019-10579 qualcomm apq8009 firmware, qualcomm apq8017 firmware +45 lainnya Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Sn...	9.1 Critical	—	0,88%	21 Jan 2020
CVE-2019-10581 qualcomm apq8009 firmware, qualcomm apq8053 firmware +26 lainnya NULL is assigned to local instance of audio device pointer after free instead of global static pointer and can lead to use after free issue in Snapdragon Auto, Snapdragon...	9.8 Critical	—	1,1%	21 Jan 2020
CVE-2019-10582 qualcomm apq8096au firmware, qualcomm mdm9607 firmware +14 lainnya Use after free issue due to using of invalidated iterator to delete an object in sensors HAL in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapd...	7.8 High	—	0,20%	21 Jan 2020
CVE-2019-10583 qualcomm apq8096au firmware, qualcomm mdm9607 firmware +14 lainnya Use after free issue occurs when camera access sensors data through direct report mode in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industr...	7.8 High	—	0,20%	21 Jan 2020
CVE-2019-10585 qualcomm apq8009 firmware, qualcomm apq8053 firmware +25 lainnya Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lead to use after free issue in Snapdragon Auto, Snap...	7.8 High	—	0,20%	21 Jan 2020
CVE-2019-10602 qualcomm apq8053 firmware, qualcomm apq8096au firmware +17 lainnya Potential use-after-free heap error during Validate/Present calls on display HW composer in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Indus...	7.8 High	—	0,20%	21 Jan 2020
CVE-2019-10606 qualcomm mdm9607 firmware, qualcomm msm8909w firmware +6 lainnya Out-of-bound access will occur in USB driver due to lack of check to validate the frame size passed by user in Snapdragon Auto, Snapdragon Consumer Electronics Connectivi...	7.8 High	—	0,20%	21 Jan 2020
CVE-2019-20386 systemd project systemd, canonical ubuntu linux +5 lainnya An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigger command, a memory leak may occur.	2.4 Low	—	0,43%	21 Jan 2020
CVE-2020-7239 chatbot with ibm watson The conversation-watson plugin before 0.8.21 for WordPress has a DOM-based XSS vulnerability that is executed when a chat message containing JavaScript is sent.	6.1 Medium	—	1,4%	21 Jan 2020
CVE-2020-7249 smc d3g0804 firmware SMC D3G0804W 3.5.2.5-LAT_GA devices allow XSS via the SSID field on the WiFi Network Configuration page (after a successful login to the admin account).	4.8 Medium	—	0,64%	21 Jan 2020
CVE-2019-20385 logaritmo aware callmanager The CSV upload feature in /supervisor/procesa_carga.php on Logaritmo Aware CallManager 2012 devices allows upload of .php files with a text/* content type. The PHP code c...	8.8 High	—	1,1%	21 Jan 2020
CVE-2019-20384 gentoo portage Gentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64/nagios/plugins directory by leveraging access to the nagios user account...	5.5 Medium	—	0,27%	21 Jan 2020
CVE-2020-7242 comtech stampede fx-1010 firmware Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Diagnostics Trace Route page and en...	7.2 High	—	4,4%	20 Jan 2020
CVE-2020-7243 comtech stampede fx-1010 firmware Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Fetch URL page and entering shell m...	7.2 High	—	4,2%	20 Jan 2020
CVE-2020-7244 comtech stampede fx-1010 firmware Comtech Stampede FX-1010 7.4.3 devices allow remote authenticated administrators to achieve remote code execution by navigating to the Poll Routes page and entering shell...	7.2 High	—	4,2%	20 Jan 2020
CVE-2020-7240 meinbergglobal lantime m300 firmware, meinbergglobal lantime m1000 firmware Meinberg Lantime M300 and M1000 devices allow attackers (with privileges to configure a device) to execute arbitrary OS commands by editing the /config/netconf.cmd script...	8.8 High	—	2,4%	20 Jan 2020
CVE-2020-7241 wpseeds wp database backup The WP Database Backup plugin through 5.5 for WordPress stores downloads by default locally in the directory wp-content/uploads/db-backup/. This might allow attackers to...	7.5 High	—	2,4%	20 Jan 2020
CVE-2020-7215 gallagher command centre An issue was discovered in Gallagher Command Centre 7.x before 7.90.991(MR5), 8.00 before 8.00.1161(MR5), and 8.10 before 8.10.1134(MR4). External system configuration da...	5.5 Medium	—	0,30%	20 Jan 2020
CVE-2019-20381 testlink TestLink before 1.9.20 allows XSS via non-lowercase javascript: in the index.php reqURI parameter. NOTE: this issue exists because of an incomplete fix for CVE-2019-19491...	6.1 Medium	—	0,95%	20 Jan 2020
CVE-2020-7237 cacti Cacti 1.2.8 allows Remote Code Execution (by privileged users) via shell metacharacters in the Performance Boost Debug Log field of poller_automation.php. OS commands are...	8.8 High	—	37,1%	20 Jan 2020
CVE-2020-7235 uhp-100 firmware UHP UHP-100 3.4.1.15, 3.4.2.4, and 3.4.3 devices allow XSS via cB3?ta= (profile title).	6.1 Medium	—	0,67%	19 Jan 2020

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.