Katalog CVE (hal. 606)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 264.271 (Critical 36.431 · High 105.570 · KEV 1.760 · sejak 2020) · Pembaruan terakhir: 28 Okt 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 30.251–30.300 dari 264.271 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-63312 nltk NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView that bypasses pathsec.ENFORCE by calling builtins.open() directly instead...	7.5 High	—	0,65%	22 Agt 2026
CVE-2026-63311 nltk NLTK before 3.10.0 (affected versions <= 3.9.4) contains a server-side request forgery (SSRF) vulnerability in the validate_network_url() function in nltk/pathsec.py. The...	5.3 Medium	—	0,33%	22 Agt 2026
CVE-2026-62388 nltk NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation functions to emit warnings instead of raising exceptions. Attackers ca...	7.5 High	—	0,51%	22 Agt 2026
CVE-2026-62385 nltk NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside the corpu...	7.5 High	—	0,42%	22 Agt 2026
CVE-2026-62384 nltk NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root. Atta...	7.5 High	—	0,65%	22 Agt 2026
CVE-2026-62383 nltk nltk versions before 3.10.2 contain a symlink-based arbitrary file read vulnerability in IPIPANCorpusReader methods that bypass nltk.pathsec validation entirely. Attacker...	5.5 Medium	—	0,18%	22 Agt 2026
CVE-2026-75870 Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret. The session keyword freezes it...	9.1 Critical	—	0,50%	22 Agt 2026
CVE-2026-75866 Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them. Pu...	9.1 Critical	—	0,50%	22 Agt 2026
CVE-2026-71514 nltk NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader. _load_lang_ngrams joins the corpus root with crubadan_code, the column-0 value...	3.3 Low	—	0,17%	22 Agt 2026
CVE-2026-71513 nltk NLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing att...	8.8 High	—	1,1%	22 Agt 2026
CVE-2026-5093 The GreenShift – Animation and Page Builder Blocks plugin for WordPress is vulnerable to unauthorized modification of data in versions up to, and including, 12.8.9. This...	4.3 Medium	—	0,37%	22 Agt 2026
CVE-2026-4561 The MC4WP: Mailchimp for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form response message post meta fields (e.g., 'text_subscribe...	6.4 Medium	—	0,33%	22 Agt 2026
CVE-2026-4559 The Image Photo Gallery Final Tiles Grid plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'delay' shortcode attribute in all versions up to, and...	6.4 Medium	—	0,33%	22 Agt 2026
CVE-2026-2996 The Advanced Product Fields (Product Addons) for WooCommerce plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 1.6.21....	7.5 High	—	0,53%	22 Agt 2026
CVE-2026-62382 PasswordPusher versions v1.45.11 through v2.9.5 contain an improper authorization vulnerability in the push deletion logic. The ownership check compares @push.user agains...	6.9 Medium	—	1,2%	22 Agt 2026
CVE-2026-62381 luci-lib-px5g (LuCI) contains a heap-based buffer overflow in the native ASN.1 encoding routine asn1_add_obj (x509write.c) when signing a certificate with a 2040-bit RSA...	6.6 Medium	—	0,11%	22 Agt 2026
CVE-2026-62380 netty Netty (io.netty:netty-codec-socks) versions 4.2.0.Final through 4.2.16.Final and 4.1.x through 4.1.136.Final contain null byte, CRLF, and credential injection vulnerabili...	7.5 High	—	0,25%	22 Agt 2026
CVE-2026-62243 Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPEN...	7.5 High	—	0,16%	22 Agt 2026
CVE-2026-62204 SiYuan versions before v3.7.4 fail to validate that packageName matches the downloaded package content in bazaar install endpoints. Attackers with same-origin access can...	6.6 Medium	—	0,09%	22 Agt 2026
CVE-2026-60084 SiYuan versions before v3.7.4 contain an arbitrary file deletion vulnerability in the /api/search/removeTemplate endpoint that accepts an unvalidated path parameter passe...	8.7 High	—	0,40%	22 Agt 2026
CVE-2026-60083 SiYuan versions before v3.8.0 contain an incomplete path blocklist in the MCP file tool that fails to restrict access to sensitive workspace files protected by the HTTP A...	4.9 Medium	—	0,39%	22 Agt 2026
CVE-2026-59809 SiYuan before v3.8.0 interpolates secret placeholders into the destination URL parameter of the http_request MCP tool, allowing attackers to exfiltrate stored secrets. An...	4.9 Medium	—	0,41%	22 Agt 2026
CVE-2026-59808 AVideo through commit 9c39d8c8 contains an authentication bypass vulnerability where deduplicateByEncoderQueueId() returns video_id_hash credentials for any video by enco...	8.8 High	—	0,41%	22 Agt 2026
CVE-2026-59256 WWBN AVideo through commit 9c39d8c8 contains an authorization bypass vulnerability where getToken() creates tokens without binding to user identity or purpose, and plugin...	7.5 High	—	0,34%	22 Agt 2026
CVE-2026-58003 WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in the releaseVideoNow.json.php endpoint that lacks authenticity checks and accept...	7.1 High	—	0,13%	22 Agt 2026
CVE-2026-58002 WWBN AVideo through commit 9c39d8c8b4c1f75540788d6b391740852ceb0732 contains an authorization bypass vulnerability in the Users_affiliations add.json.php endpoint that al...	6.5 Medium	—	0,16%	22 Agt 2026
CVE-2026-58001 WWBN AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in objects/videoEditLight.php that lacks request authenticity checks and accepts G...	5.7 Medium	—	0,17%	22 Agt 2026
CVE-2026-57998 better-npm-audit through 3.11.0, and the 4.0.0-rc.2 prerelease, builds its npm audit command by interpolating the user-supplied --registry option into a command string in...	7.8 High	—	0,21%	22 Agt 2026
CVE-2026-57944 AVideo through commit 9c39d8c8 contains a cross-site request forgery vulnerability in channelToGallery.json.php that allows attackers to modify site-wide Gallery configur...	5.4 Medium	—	0,12%	22 Agt 2026
CVE-2026-56380 AVideo through commit 9c39d8c8 contains an information exposure vulnerability in feed/index.php that allows unauthenticated attackers to retrieve channel owner email addr...	5.3 Medium	—	0,28%	22 Agt 2026
CVE-2026-4244 The Post Duplicator plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `duplicate_post()` function in all ve...	4.3 Medium	—	0,34%	22 Agt 2026
CVE-2026-77988 A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvram_get of the component CLI Configuration Tool. This manipulat...	6.6 Medium	—	2,4%	22 Agt 2026
CVE-2026-66917 Joomla Extension - joomgalleryfriends.net - Stored XSS in JoomGallery < 4.4.0 - An authenticated, privileged can store an XSS payload in any image causing JS execution in...	8.6 High	—	0,52%	22 Agt 2026
CVE-2026-66916 Joomla Extension - joomgalleryfriends.net - Password-Protected Category Bypass via JSON Format in JoomGallery < 4.4.0- An unauthenticated access control bypass exists in...	6.9 Medium	—	0,43%	22 Agt 2026
CVE-2026-4245 The Post Duplicator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.0.11. This is due to the `duplicate_post_permission...	4.3 Medium	—	0,39%	22 Agt 2026
CVE-2026-3424 The The kk Star Ratings – Rate Post & Collect User Feedbacks plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.4...	5.3 Medium	—	0,52%	22 Agt 2026
CVE-2026-77946 A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function uci_safe_get of the file /cgi-bin/apply_time.cgi of the co...	10.0 Critical	—	1,0%	22 Agt 2026
CVE-2026-77945 A vulnerability was found in TRENDnet TEW-821DAP 2.2.01b05. Affected is an unknown function of the file /cgi-bin/upload.cgi of the component ssi. Performing a manipulatio...	7.4 High	—	1,8%	22 Agt 2026
CVE-2026-78003 The Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) via path traversal in versions up to and including 2.2.0. This is due t...	9.8 Critical	—	0,79%	22 Agt 2026
CVE-2026-12710 A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration (versions from 2025-04-28 to 2026-04-04) allows an external attacker...	9.3 Critical	—	0,41%	22 Agt 2026
CVE-2026-77002 The SmilePass Selfie Login WordPress plugin through 1.0.2 does not perform any server-side verification of the identity it is asked to authenticate, allowing unauthentica...	9.8 Critical	—	0,50%	22 Agt 2026
CVE-2026-77001 The Social Login & Sharing buttons with Analytics By SoClever WordPress plugin through 1.2.0 does not perform any authentication, authorisation or nonce checks in one of...	9.8 Critical	—	0,63%	22 Agt 2026
CVE-2026-77000 The WP Social Media Login WordPress plugin through 1.0.6 does not verify that a social login was actually completed with the identity provider before authenticating a vis...	9.8 Critical	—	0,50%	22 Agt 2026
CVE-2026-76793 The Firebase Authentication WordPress plugin before 1.7.1 does not require the email address in an authentication token to be verified before matching it to a WordPress a...	8.1 High	—	0,47%	22 Agt 2026
CVE-2026-76789 The Slider Hero with Video Background, Animation WordPress plugin before 9.1.3 does not have authorisation and nonce checks on two of its request handlers, and does not e...	8.8 High	—	0,51%	22 Agt 2026
CVE-2026-19222 The Forminator Forms WordPress plugin before 1.57.0.7 does not consistently enforce the role restriction it applies to registration forms, allowing users who are permitt...	6.6 Medium	—	0,36%	22 Agt 2026
CVE-2026-19221 The Forminator Forms WordPress plugin before 1.57.0.5 does not restrict a network-wide setting to network administrators, allowing an administrator of any single site on...	7.2 High	—	0,67%	22 Agt 2026
CVE-2026-19093 The Tutor LMS WordPress plugin before 4.0.6 does not validate a stored file path before using it to stream media, allowing users with the instructor role to read arbitra...	6.8 Medium	—	0,46%	22 Agt 2026
CVE-2026-18052 The ManageWP Worker WordPress plugin before 4.9.37 does not bind the account being logged in to the signature which authorises the login, nor prevent an already used logi...	8.1 High	—	0,37%	22 Agt 2026
CVE-2026-16738 The Conekta Payment Gateway WordPress plugin before 6.2.2 does not verify the authenticity of incoming payment gateway webhook notifications, nor bind the confirmed payme...	5.3 Medium	—	0,33%	22 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.