Katalog CVE (hal. 618)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 264.331 (Critical 36.436 · High 105.591 · KEV 1.760 · sejak 2020) · Pembaruan terakhir: 28 Okt 2026, 12:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 30.851–30.900 dari 264.331 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-69183 Monkeytype is a minimalistic and customizable typing test. In 26.26.0 and earlier, the backend rate-limit key generator in backend/src/middlewares/rate-limit.ts uses clie...	7.5 High	—	0,48%	20 Agt 2026
CVE-2026-65842 Plate is a rich-text editor with AI and shadcn/ui. Prior to 53.3.2, @platejs/docx-io fetches remote image URLs while converting attacker-controlled HTML through htmlToDoc...	8.2 High	—	0,52%	20 Agt 2026
CVE-2026-64846 Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time...	2.8 Low	—	0,11%	20 Agt 2026
CVE-2026-63481 Hurl is a command line tool that runs and tests HTTP requests defined in plain text files. In version 8.0.1 and earlier, the redirect handling in packages/hurl/src/http/c...	6.9 Medium	—	0,66%	20 Agt 2026
CVE-2026-61704 Link Preview JS extracts web links information. Prior to 4.0.4, the resolveDNSHost mitigation in index.ts validates one resolved IP address but fetches the original hostn...	7.5 High	—	0,55%	20 Agt 2026
CVE-2026-61625 VictoriaMetrics is a scalable solution for monitoring and managing time series data. Prior to 1.122.25, 1.136.12, and 1.146.0, vmrestore does not validate backup part pat...	6.8 Medium	—	0,41%	20 Agt 2026
CVE-2026-55642 dbx is a cross-platform database client for databases. Prior to 0.5.51, dbx-web auth_middleware in crates/dbx-web/src/auth.rs passes every protected request to the handle...	9.8 Critical	—	0,69%	20 Agt 2026
CVE-2026-55586 SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, a crafted CHM file can supply malformed LZX Huffman code lengths to make_decode_table in ext/CHMLib...	6.6 Medium	—	0,17%	20 Agt 2026
CVE-2026-55095 OpenProject is open-source, web-based project management software. In version 17.5.1 and earlier, an authenticated non-admin project member can request the inplace-edit d...	5.3 Medium	—	0,40%	20 Agt 2026
CVE-2026-54770 WebOb provides objects for HTTP requests and responses. Prior to 1.8.11, Response._make_location_absolute() in src/webob/response.py checks a Location value for a URI sch...	6.1 Medium	—	0,42%	20 Agt 2026
CVE-2026-54616 NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 1.0.88.0 until stable version 6.0.1698.0 and preview version 6.5.1742.0, the Lz4D...	7.1 High	—	0,44%	20 Agt 2026
CVE-2026-54449 LangBot is a global IM bot platform designed for LLMs. In version 4.10.7 and earlier, any authenticated user can add or change an STDIO MCP server configuration without a...	8.8 High	—	0,72%	20 Agt 2026
CVE-2026-54136 Windmill is an open-source developer platform for internal code: APIs, background jobs, workflows and UIs. Prior to 1.715.0, a resource-scoped API token could read script...	5.1 Medium	—	0,47%	20 Agt 2026
CVE-2026-40345 deepmerge-ts is a typescript library providing functionality to deep merging of javascript objects. Prior to 8.0.0, the deepmerge, deepmergeCustom, deepmergeInto, and dee...	8.2 High	—	0,52%	20 Agt 2026
CVE-2026-18309 gimp GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installation...	7.8 High	—	0,47%	20 Agt 2026
CVE-2026-18308 gimp GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations...	7.8 High	—	0,34%	20 Agt 2026
CVE-2026-18307 gimp GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected ins...	7.8 High	—	0,42%	20 Agt 2026
CVE-2026-18306 gimp GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations...	7.8 High	—	0,34%	20 Agt 2026
CVE-2026-18305 gimp GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations...	7.8 High	—	0,36%	20 Agt 2026
CVE-2026-18304 gimp GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations...	7.8 High	—	0,36%	20 Agt 2026
CVE-2026-18303 gimp GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected in...	7.8 High	—	0,39%	20 Agt 2026
CVE-2026-18302 gimp GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected ins...	7.8 High	—	0,39%	20 Agt 2026
CVE-2026-18301 gimp GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations...	7.8 High	—	0,34%	20 Agt 2026
CVE-2026-18300 gimp GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations...	7.8 High	—	0,33%	20 Agt 2026
CVE-2026-18299 gstreamer GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations o...	7.8 High	—	0,21%	20 Agt 2026
CVE-2026-18298 gstreamer GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte...	7.8 High	—	0,22%	20 Agt 2026
CVE-2026-18297 gstreamer GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect...	7.8 High	—	0,24%	20 Agt 2026
CVE-2026-18296 gstreamer GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte...	7.8 High	—	0,23%	20 Agt 2026
CVE-2026-18295 gstreamer GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected insta...	7.8 High	—	0,21%	20 Agt 2026
CVE-2026-18294 OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af...	7.8 High	—	0,28%	20 Agt 2026
CVE-2026-18293 OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...	7.8 High	—	0,28%	20 Agt 2026
CVE-2026-18292 OriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect...	7.8 High	—	0,28%	20 Agt 2026
CVE-2026-18291 OriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affect...	7.8 High	—	0,28%	20 Agt 2026
CVE-2026-18290 OriginLab OriginPro OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affe...	7.8 High	—	0,28%	20 Agt 2026
CVE-2026-18289 OriginLab OriginPro OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affe...	7.8 High	—	0,28%	20 Agt 2026
CVE-2026-18288 OriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on aff...	7.8 High	—	0,28%	20 Agt 2026
CVE-2026-18287 Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a...	7.8 High	—	0,34%	20 Agt 2026
CVE-2026-18286 Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...	7.8 High	—	0,34%	20 Agt 2026
CVE-2026-18285 Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code o...	7.8 High	—	0,55%	20 Agt 2026
CVE-2026-18284 Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affecte...	7.8 High	—	1,0%	20 Agt 2026
CVE-2026-18283 Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authorization on affected installation...	2.4 Low	—	0,27%	20 Agt 2026
CVE-2026-18282 Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute a...	8.0 High	—	0,46%	20 Agt 2026
CVE-2026-18281 Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrar...	8.0 High	—	0,46%	20 Agt 2026
CVE-2026-18280 Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected...	3.9 Low	—	0,25%	20 Agt 2026
CVE-2026-18279 Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected...	8.8 High	—	0,69%	20 Agt 2026
CVE-2026-18278 Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive i...	3.5 Low	—	0,24%	20 Agt 2026
CVE-2026-18274 Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on af...	7.2 High	—	2,0%	20 Agt 2026
CVE-2026-18273 Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows physically present attackers to escalate privilege...	6.6 Medium	—	0,21%	20 Agt 2026
CVE-2026-18272 Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected install...	6.8 Medium	—	1,7%	20 Agt 2026
CVE-2026-18271 Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on...	6.8 Medium	—	0,39%	20 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.