Katalog CVE (hal. 5354)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 268.197 (Critical 36.842 · High 107.199 · KEV 1.768 · sejak 2020) · Pembaruan terakhir: 5 Nov 2026, 12:28 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 267.651–267.700 dari 268.197 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2019-20203 postieplugin postie The Authorized Addresses feature in the Postie plugin 1.9.40 for WordPress allows remote attackers to publish posts by spoofing the From information of an email message.	5.3 Medium	—	2,1%	2 Jan 2020
CVE-2019-17621 dlink dir-859 firmware, dlink dir-822 firmware +12 lainnya The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows an Unauthenticated remote attacker to execute system commands as root, b...	9.8 Critical	KEV	90,6%	30 Des 2019
CVE-2019-17558 apache solr, oracle primavera unifier Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity...	7.5 High	KEV	98,6%	30 Des 2019
CVE-2019-20085 tvt nvms-1000 firmware TVT NVMS-1000 devices allow GET /.. Directory Traversal	7.5 High	KEV	96,1%	30 Des 2019
CVE-2019-19781 citrix application delivery controller firmware, citrix netscaler gateway firmware +1 lainnya An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal.	9.8 Critical	KEV · ransomware	100,0%	27 Des 2019
CVE-2019-10758 mongo-express project mongo-express mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands...	9.9 Critical	KEV	84,7%	24 Des 2019
CVE-2019-7483 sonicwall sma 100 firmware In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on the server.	7.5 High	KEV	4,0%	19 Des 2019
CVE-2019-8605 apple iphone os, apple mac os x +2 lainnya A use after free issue was addressed with improved memory management. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1. A malicious applica...	7.8 High	KEV	17,6%	18 Des 2019
CVE-2019-8526 apple mac os x A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.4. An application may be able to gain elevated privileges.	7.8 High	KEV	0,70%	18 Des 2019
CVE-2019-8506 apple icloud, apple itunes +7 lainnya A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iClou...	8.8 High	KEV	16,2%	18 Des 2019
CVE-2019-7287 apple iphone os A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kerne...	7.8 High	KEV	4,6%	18 Des 2019
CVE-2019-7286 apple iphone os, apple mac os x A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be...	7.8 High	KEV	15,9%	18 Des 2019
CVE-2019-4716 ibm planning analytics IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as ro...	9.8 Critical	KEV	86,4%	18 Des 2019
CVE-2019-7481 sonicwall sma 100 firmware Vulnerability in SonicWall SMA100 allow unauthenticated user to gain read-only access to unauthorized resources. This vulnerablity impacted SMA100 version 9.0.0.3 and ear...	7.5 High	KEV · ransomware	99,9%	17 Des 2019
CVE-2019-18935 telerik ui for asp.net ajax Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. This is exploitable when the encryp...	9.8 Critical	KEV · ransomware	99,7%	11 Des 2019
CVE-2019-1458 microsoft windows 10 1507, microsoft windows 10 1607 +6 lainnya An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnera...	7.8 High	KEV · ransomware	74,4%	10 Des 2019
CVE-2019-5544 vmware horizon daas, vmware esxi OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range w...	9.8 Critical	KEV · ransomware	98,1%	6 Des 2019
CVE-2019-7195 qnap photo station This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo...	9.8 Critical	KEV · ransomware	89,3%	5 Des 2019
CVE-2019-7194 qnap photo station This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo...	9.8 Critical	KEV · ransomware	82,7%	5 Des 2019
CVE-2019-7193 qnap qts This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to thei...	9.8 Critical	KEV · ransomware	14,4%	5 Des 2019
CVE-2019-7192 qnap photo station This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo...	9.8 Critical	KEV · ransomware	88,1%	5 Des 2019
CVE-2019-15271 cisco rv016 multi-wan vpn firmware, cisco rv042 dual wan vpn firmware +2 lainnya A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker to execute arbitrary...	8.8 High	KEV	5,5%	26 Nov 2019
CVE-2019-5825 google chrome Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	6.5 Medium	KEV	55,9%	25 Nov 2019
CVE-2019-13720 google chrome, opensuse leap Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	8.8 High	KEV	49,4%	25 Nov 2019
CVE-2019-19006 sangoma freepbx Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Control.	9.8 Critical	KEV	54,7%	21 Nov 2019
CVE-2019-6693 fortinet fortios Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup file to decipher the s...	6.5 Medium	KEV · ransomware	6,6%	21 Nov 2019
CVE-2019-1429 microsoft internet explorer A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption...	7.5 High	KEV	77,3%	12 Nov 2019
CVE-2019-1405 microsoft windows 10 1507, microsoft windows 10 1607 +13 lainnya An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly allows COM object creation, aka 'Windows UPnP Service El...	7.8 High	KEV · ransomware	30,2%	12 Nov 2019
CVE-2019-1388 microsoft windows 10 1507, microsoft windows 10 1607 +12 lainnya An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate Dialog Elevat...	7.8 High	KEV · ransomware	8,6%	12 Nov 2019
CVE-2019-1385 microsoft windows 10 1709, microsoft windows 10 1803 +4 lainnya An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.T...	7.8 High	KEV · ransomware	3,6%	12 Nov 2019
CVE-2019-18187 trendmicro officescan Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arbitrary zip...	7.5 High	KEV	25,1%	28 Okt 2019
CVE-2019-11043 php, canonical ubuntu linux +20 lainnya In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allo...	9.8 Critical	KEV · ransomware	99,8%	28 Okt 2019
CVE-2019-3010 oracle solaris Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability al...	8.8 High	KEV	13,5%	16 Okt 2019
CVE-2019-16278 nazgul nostromo nhttpd Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request.	9.8 Critical	KEV	99,0%	14 Okt 2019
CVE-2019-2215 google android, debian linux +51 lainnya A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, howe...	7.8 High	KEV	72,1%	11 Okt 2019
CVE-2019-1322 microsoft windows 10 1803, microsoft windows 10 1809 +4 lainnya An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This...	7.8 High	KEV · ransomware	18,8%	10 Okt 2019
CVE-2019-1315 microsoft windows 10 1607, microsoft windows 10 1703 +11 lainnya An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error Reporting Manager Elevation of Privi...	7.8 High	KEV · ransomware	3,5%	10 Okt 2019
CVE-2019-16928 exim, canonical ubuntu linux +2 lainnya Exim 4.92 through 4.92.2 allows remote code execution, a different vulnerability than CVE-2019-15846. There is a heap-based buffer overflow in string_vformat in string.c...	9.8 Critical	KEV	41,6%	27 Sep 2019
CVE-2019-16920 dlink dir-655 firmware, dlink dir-866l firmware +8 lainnya Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1565. The issue occurs when the attacker sends an arbitrary i...	9.8 Critical	KEV	100,0%	27 Sep 2019
CVE-2019-16759 vbulletin vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request.	9.8 Critical	KEV	99,7%	24 Sep 2019
CVE-2019-1367 microsoft internet explorer A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption...	7.5 High	KEV · ransomware	52,4%	23 Sep 2019
CVE-2019-16057 dlink dns-320 firmware The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command injection.	9.8 Critical	KEV · ransomware	86,5%	16 Sep 2019
CVE-2019-16256 trustedconnectivityalliance s@t browser Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information,...	9.8 Critical	KEV	4,9%	12 Sep 2019
CVE-2019-1297 microsoft excel, microsoft office +1 lainnya A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Ex...	8.8 High	KEV	21,8%	11 Sep 2019
CVE-2019-1253 microsoft windows 10 1703, microsoft windows 10 1709 +6 lainnya An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first...	7.8 High	KEV · ransomware	11,6%	11 Sep 2019
CVE-2019-1215 microsoft windows 10 1507, microsoft windows 10 1607 +14 lainnya An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This C...	7.8 High	KEV · ransomware	19,3%	11 Sep 2019
CVE-2019-1214 microsoft windows 10 1507, microsoft windows 10 1607 +14 lainnya An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File Sy...	7.8 High	KEV	1,4%	11 Sep 2019
CVE-2019-15949 nagios xi Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the admin user via the web inte...	8.8 High	KEV	77,0%	5 Sep 2019
CVE-2019-13608 citrix storefront server Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks.	7.5 High	KEV · ransomware	30,0%	29 Agt 2019
CVE-2019-15752 docker, apache geode Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\Docker...	7.8 High	KEV	48,8%	28 Agt 2019

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.