Katalog CVE
Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR · 26 kali dilihat
$ cat README.txt
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-17152
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
|
9.8 Critical | — | 0,80% | 20 Agt 2026 |
|
CVE-2026-17145
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper privilege management.
|
9.8 Critical | — | 0,74% | 20 Agt 2026 |
|
CVE-2026-17142
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary commands due to improper authentication.
|
9.8 Critical | — | 0,92% | 20 Agt 2026 |
|
CVE-2026-17141
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
|
9.8 Critical | — | 0,80% | 20 Agt 2026 |
|
CVE-2026-17138
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.
|
9.8 Critical | — | 0,67% | 20 Agt 2026 |
|
CVE-2026-17136
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a format string vulnerability.
|
9.8 Critical | — | 0,80% | 20 Agt 2026 |
|
CVE-2026-17124
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an out-of-bounds read.
|
7.8 High | — | 0,17% | 20 Agt 2026 |
|
CVE-2026-17122
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.
|
9.8 Critical | — | 0,80% | 20 Agt 2026 |
|
CVE-2026-17121
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
|
7.5 High | — | 0,55% | 20 Agt 2026 |
|
CVE-2026-17120
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a buffer overflow.
|
7.5 High | — | 0,55% | 20 Agt 2026 |
|
CVE-2026-17118
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability.
|
9.8 Critical | — | 0,80% | 20 Agt 2026 |
|
CVE-2026-17060
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information and cause a denial of service due to a kernel heap over-read.
|
9.1 Critical | — | 0,71% | 20 Agt 2026 |
|
CVE-2026-17040
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
|
9.8 Critical | — | 0,80% | 20 Agt 2026 |
|
CVE-2026-17024
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper certificate validation.
|
9.8 Critical | — | 0,35% | 20 Agt 2026 |
|
CVE-2026-17009
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a NULL pointer dereference.
|
5.5 Medium | — | 0,12% | 20 Agt 2026 |
|
CVE-2026-17007
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.
|
7.1 High | — | 0,15% | 20 Agt 2026 |
|
CVE-2026-17006
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow.
|
9.8 Critical | — | 0,77% | 20 Agt 2026 |
|
CVE-2026-17003
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to compromise the confidentiality and integrity of the system due to an out-of-bounds write.
|
9.1 Critical | — | 0,44% | 20 Agt 2026 |
|
CVE-2026-17000
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to improper authentication.
|
9.8 Critical | — | 0,77% | 20 Agt 2026 |
|
CVE-2026-16997
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary commands due to improper privilege management.
|
7.8 High | — | 0,18% | 20 Agt 2026 |
|
CVE-2026-16996
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to an integer underflow.
|
8.8 High | — | 0,17% | 20 Agt 2026 |
|
CVE-2026-16991
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper handling of symbolic links.
|
7.8 High | — | 0,14% | 20 Agt 2026 |
|
CVE-2026-16989
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper resolution of symbolic links.
|
7.8 High | — | 0,17% | 20 Agt 2026 |
|
CVE-2026-16980
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to improper validation of symbolic links.
|
5.5 Medium | — | 0,14% | 20 Agt 2026 |
|
CVE-2026-16973
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to disclose sensitive kernel memory due to an out-of-bounds read.
|
5.5 Medium | — | 0,14% | 20 Agt 2026 |
|
CVE-2026-16972
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to improper authentication.
|
7.5 High | — | 0,52% | 20 Agt 2026 |
|
CVE-2026-16964
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to intercept messages and forge replies due to the exposure of sensitive information.
|
6.5 Medium | — | 0,34% | 20 Agt 2026 |
|
CVE-2026-16958
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.
|
7.5 High | — | 0,63% | 20 Agt 2026 |
|
CVE-2026-16952
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to uncontrolled resource consumption.
|
5.5 Medium | — | 0,13% | 20 Agt 2026 |
|
CVE-2026-16951
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local authenticated attacker to execute arbitrary code due to a heap-based buffer overflow.
|
6.7 Medium | — | 0,17% | 20 Agt 2026 |
|
CVE-2026-16946
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a heap buffer overflow.
|
7.8 High | — | 0,15% | 20 Agt 2026 |
|
CVE-2026-16945
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow.
|
7.8 High | — | 0,17% | 20 Agt 2026 |
|
CVE-2026-16944
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow.
|
7.8 High | — | 0,17% | 20 Agt 2026 |
|
CVE-2026-16943
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a heap-based buffer overflow.
|
7.8 High | — | 0,17% | 20 Agt 2026 |
|
CVE-2026-16937
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper privilege management.
|
7.8 High | — | 0,14% | 20 Agt 2026 |
|
CVE-2026-16936
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a buffer overflow.
|
8.8 High | — | 0,17% | 20 Agt 2026 |
|
CVE-2026-16935
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a time-of-check to time-of-use (TOCTOU) race condition.
|
7.0 High | — | 0,10% | 20 Agt 2026 |
|
CVE-2026-16934
ibm vios, ibm aix
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to a heap-based buffer overflow.
|
8.8 High | — | 0,15% | 20 Agt 2026 |
|
CVE-2025-52182
The Library Corporation LS2 Admin v5.7 to v5.8.0 was discovered to contain an information disclosure vulnerability.
|
7.5 High | — | 0,47% | 20 Agt 2026 |
|
CVE-2026-77641
torproject tor
tor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails. The return value of relay_send_command_from_edge() was ignored, so a s...
|
8.2 High | — | 0,35% | 20 Agt 2026 |
|
CVE-2026-77640
torproject tor
tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream with done=1. A truncated stream never reaches Z_STREAM_END, causing zli...
|
5.3 Medium | — | 0,38% | 20 Agt 2026 |
|
CVE-2026-77639
torproject tor
Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection thre...
|
5.3 Medium | — | 0,39% | 20 Agt 2026 |
|
CVE-2026-77638
torproject tor
Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersonate) the onion service that the...
|
9.0 Critical | — | 0,30% | 20 Agt 2026 |
|
CVE-2026-77587
torproject tor
Tor before 0.4.9.11 is prone to a use-after-free (and potential double free) of a conflux object when a recovery leg revives a conflux set whose last linked leg has alrea...
|
7.5 High | — | 0,41% | 20 Agt 2026 |
|
CVE-2026-77584
torproject tor
Tor before 0.4.9.10 did not reject a CONFLUX_LINK cell that arrives on a circuit which already has attached streams. A malicious client could send a RELAY_COMMAND_BEGIN b...
|
8.2 High | — | 0,25% | 20 Agt 2026 |
|
CVE-2026-77506
Znuny before LTS 6.5.22 allows AgentTicketEmailResend template XSS.
|
4.8 Medium | — | 0,24% | 20 Agt 2026 |
|
CVE-2026-76023
google chrome
Improper resource control in Linux Toolkit Theming in Google Chrome prior to 151.0.7922.173 allowed a remote attacker who had compromised the renderer process to execute...
|
8.8 High | — | 0,45% | 20 Agt 2026 |
|
CVE-2026-76022
google chrome
Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chro...
|
8.8 High | — | 0,45% | 20 Agt 2026 |
|
CVE-2026-76021
google chrome
Use after free in DOM in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium s...
|
8.8 High | — | 0,41% | 20 Agt 2026 |
|
CVE-2026-76020
google chrome
Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se...
|
7.5 High | — | 0,29% | 20 Agt 2026 |
Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum
menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat
kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah
perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan
dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk
yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.