Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-104347
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th...
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-104346
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th...
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-103829
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulne...
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-103828
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulne...
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-103827
Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vu...
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-103826
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulne...
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-103825
Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-103824
Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulne...
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-103823
Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application denial-of-service. An attacker could exploit this vu...
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-103822
Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-103821
Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation...
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-101294
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptograp...
|
8.7 High | — | — | 13 Okt 2026 |
|
CVE-2026-100131
Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-100130
Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability...
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-100129
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re...
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-100128
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re...
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-100127
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue re...
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-100126
Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sen...
|
5.5 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-100112
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th...
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-100111
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of th...
|
7.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-90532
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potenti...
|
10.0 Critical | — | — | 13 Okt 2026 |
|
CVE-2026-90531
Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in privilege escalation. A low-pr...
|
9.6 Critical | — | — | 13 Okt 2026 |
|
CVE-2026-86022
VNote is a note-taking platform. Prior to 4.3.0, SessionConfig::ExternalProgram::fetchCommand wraps a note path in double quotes and substitutes it into a command string...
|
7.0 High | — | — | 13 Okt 2026 |
|
CVE-2026-86016
VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment `preNode.innerHTML = p_metaData` in src/data/extra/web/js/markdownit.js to insert YAML frontmat...
|
8.2 High | — | — | 13 Okt 2026 |
|
CVE-2026-83960
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-83958
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-83662
Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts int...
|
9.3 Critical | — | — | 13 Okt 2026 |
|
CVE-2026-75732
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potenti...
|
9.9 Critical | — | — | 13 Okt 2026 |
|
CVE-2026-70098
Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.
|
8.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-63174
Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a space administrator to assign users into spaces outside their authorit...
|
8.1 High | — | — | 13 Okt 2026 |
|
CVE-2026-63172
Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a regular, non-administrative member to create user accounts by invoking...
|
7.1 High | — | — | 13 Okt 2026 |
|
CVE-2026-63165
Omnispace Agora Project before 26.10.0 contains a SQL injection vulnerability in the calendar functionality that allows attackers to inject malicious SQL by manipulating...
|
8.1 High | — | — | 13 Okt 2026 |
|
CVE-2026-63163
Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route that allows unauthenticated attackers to download ar...
|
7.5 High | — | — | 13 Okt 2026 |
|
CVE-2026-63162
Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary files outside the intended temporary directory by...
|
8.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-63161
Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known session...
|
8.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-63160
Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me token is stored verbatim server-side, making the stored value identical t...
|
7.4 High | — | — | 13 Okt 2026 |
|
CVE-2026-63159
Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthenticated attackers to take over user accounts by compu...
|
7.4 High | — | — | 13 Okt 2026 |
|
CVE-2026-63158
Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows attackers possessing a user's stored bcrypt password hash to authentica...
|
7.4 High | — | — | 13 Okt 2026 |
|
CVE-2026-63154
Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability that allows a space administrator to escalate privileges by supplying caller-cont...
|
8.8 High | — | — | 13 Okt 2026 |
|
CVE-2026-63153
Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectations() that allows authenticated attackers to insert access-right reco...
|
8.1 High | — | — | 13 Okt 2026 |
|
CVE-2026-63152
Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allows authenticated attackers to inject malicious SQL via the _idCategory...
|
8.1 High | — | — | 13 Okt 2026 |
|
CVE-2026-63149
Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerability that allows attackers to predict temporary or default account passwords generated by...
|
7.4 High | — | — | 13 Okt 2026 |
|
CVE-2026-63148
Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject HTML/script markup by uploading...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-63147
Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious script by uploading a file...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-63146
Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled values are written into the config.inc.php configurati...
|
9.8 Critical | — | — | 13 Okt 2026 |
|
CVE-2026-56826
Shopper is a Headless e-commerce Admin Panel. From 2.0.0 until 2.9.2, authenticated users who could reach the Settings pages with only access_setting could directly invok...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-55601
MultiTail is a utility for monitoring multiple log files in one terminal. In version 7.1.5 and earlier, the -ex and -eX execute-on-match feature appended attacker-control...
|
7.3 High | — | — | 13 Okt 2026 |
|
CVE-2026-48398
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...
|
5.4 Medium | — | — | 13 Okt 2026 |
|
CVE-2026-48383
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potenti...
|
10.0 Critical | — | — | 13 Okt 2026 |
|
CVE-2026-48382
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potenti...
|
10.0 Critical | — | — | 13 Okt 2026 |