Katalog CVE
Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR · 27 kali dilihat
$ cat README.txt
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-62291
libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted image sequence with a 2x2 primary plane and a 256x256 auxiliary alpha plane c...
|
5.3 Medium | — | 0,19% | 18 Agt 2026 |
|
CVE-2026-62289
libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.0 and earlier, a crafted HEIF or AVIF file containing a clean aperture box can reduce an image dimensi...
|
4.3 Medium | — | 0,30% | 18 Agt 2026 |
|
CVE-2026-53959
4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows any authenticated user to enumerate account information for every user thro...
|
6.5 Medium | — | 1,0% | 18 Agt 2026 |
|
CVE-2026-53958
4gaBoards is a boards system for realtime project management. Prior to 3.3.9, 4gaBoards allows an authenticated user to modify ssoGoogleId, ssoGoogleEmail, ssoGithubId, s...
|
7.6 High | — | 0,40% | 18 Agt 2026 |
|
CVE-2026-52877
Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-external IPC handler in src/ipc/downloads.js pa...
|
8.3 High | — | 0,41% | 18 Agt 2026 |
|
CVE-2026-52876
Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to version 2.6.0, the open-path-at-time IPC handler in src/ipc/player.js a...
|
8.8 High | — | 0,20% | 18 Agt 2026 |
|
CVE-2026-52875
Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to 2.6.0, the perform-scheduled-backup IPC handler in src/ipc/storage.js t...
|
8.4 High | — | 0,16% | 18 Agt 2026 |
|
CVE-2026-52873
Streambert is a cross-platform Electron Desktop App to stream and download video content. From version 2.5.0 until version 2.6.0, the wyzie-open-redeem IPC handler in ind...
|
6.9 Medium | — | 0,36% | 18 Agt 2026 |
|
CVE-2026-52872
Streambert is a cross-platform Electron Desktop App to stream and download video content. Prior to 2.5.0, the downloadSubtitleFile utility in src/ipc/downloads.js, reache...
|
8.8 High | — | 0,18% | 18 Agt 2026 |
|
CVE-2026-52854
Maps is a MediaWiki extension that enables visualization of geographic data through dynamic embedded maps. Prior to version 12.1.3, the display_map parser function in the...
|
8.6 High | — | 0,58% | 18 Agt 2026 |
|
CVE-2026-50191
4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards is vulnerable to pre-account takeover when registrationEnabled, localRegistrationE...
|
8.8 High | — | 0,47% | 18 Agt 2026 |
|
CVE-2026-50186
4gaBoards is a boards system for realtime project management. Prior to 3.3.8, 4gaBoards allows an authenticated project manager to supply traversal sequences in the filen...
|
8.8 High | — | 0,59% | 18 Agt 2026 |
|
CVE-2026-50142
libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.0, a crafted HEIF sequence accepted by heif_context_read_from_memory() with the msf1 se...
|
7.5 High | — | 0,66% | 18 Agt 2026 |
|
CVE-2026-48796
CefSharp provides .NET bindings for the Chromium Embedded Framework for Windows Forms and Windows Presentation Foundation applications. Prior to version 148.0.90, CefShar...
|
5.3 Medium | — | 0,40% | 18 Agt 2026 |
|
CVE-2026-47699
Confidential Containers Guest Components provides guest tools and components for confidential container workloads. From 0.16.0 until 0.20.0, a crafted OCI image layer can...
|
6.4 Medium | — | 0,29% | 18 Agt 2026 |
|
CVE-2026-21584
atlassian bamboo
This High severity Improper Authorization vulnerability was introduced in versions 10.0.0, 10.1.0, 10.2.0, 11.0.0, 12.0.0, and 12.1.0 of Bamboo Data Center.
This Impr...
|
8.1 High | — | 0,42% | 18 Agt 2026 |
|
CVE-2026-21582
This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 of Crowd Data Center.
This B...
|
8.8 High | — | 0,46% | 18 Agt 2026 |
|
CVE-2026-21580
This Critical severity Stored XSS, PrivEsc (Privilege Escalation), and Security Misconfiguration vulnerability was introduced in versions 7.1.1, 7.4.0, 7.13.0, 7.17.0, 7....
|
9.3 Critical | — | 0,51% | 18 Agt 2026 |
|
CVE-2026-15316
tp-link tapo c200 firmware
An improper input
validation vulnerability in the configuration service for processing encrypted
credential data has been identified in Tapo C200 v5. An attacker can sen...
|
6.5 Medium | — | 0,33% | 18 Agt 2026 |
|
CVE-2026-15315
tp-link tapo c120 firmware, tp-link tapo c200 firmware
Tapo C120 v1 and C200 v5
contain an improper authentication vulnerability within the login
authentication verification module. An attacker on the local network can
exploi...
|
8.8 High | — | 0,46% | 18 Agt 2026 |
|
CVE-2026-76047
google chrome
Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se...
|
8.8 High | — | 0,45% | 18 Agt 2026 |
|
CVE-2026-76046
google chrome
Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to execute arbitrary co...
|
8.3 High | — | 0,37% | 18 Agt 2026 |
|
CVE-2026-76045
google chrome
Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium...
|
8.8 High | — | 0,52% | 18 Agt 2026 |
|
CVE-2026-76044
google chrome
Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code ou...
|
8.3 High | — | 0,32% | 18 Agt 2026 |
|
CVE-2026-76043
google chrome
Incorrect calculation in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chro...
|
8.8 High | — | 0,41% | 18 Agt 2026 |
|
CVE-2026-76042
google chrome
Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside th...
|
3.1 Low | — | 0,25% | 18 Agt 2026 |
|
CVE-2026-76041
google chrome
Information leak in Skia in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium sec...
|
4.3 Medium | — | 0,35% | 18 Agt 2026 |
|
CVE-2026-76040
google chrome
Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the...
|
8.8 High | — | 0,53% | 18 Agt 2026 |
|
CVE-2026-76039
google chrome
Incorrect reference resolution in Core in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to obtain sensitive...
|
6.5 Medium | — | 0,32% | 18 Agt 2026 |
|
CVE-2026-76038
google chrome
Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium se...
|
8.8 High | — | 0,45% | 18 Agt 2026 |
|
CVE-2026-76037
google chrome
Link following in CredentialProvider in Google Chrome on on Windows prior to 151.0.7922.169 allowed a local attacker to potentially execute arbitrary code outside the san...
|
8.4 High | — | 0,15% | 18 Agt 2026 |
|
CVE-2026-76036
google chrome
Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML...
|
9.6 Critical | — | 0,51% | 18 Agt 2026 |
|
CVE-2026-76035
google chrome
Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a cra...
|
9.6 Critical | — | 0,46% | 18 Agt 2026 |
|
CVE-2026-76034
google chrome
Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromi...
|
8.8 High | — | 0,57% | 18 Agt 2026 |
|
CVE-2026-76033
google chrome
Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to bypass site isolation...
|
4.2 Medium | — | 0,22% | 18 Agt 2026 |
|
CVE-2026-73939
oracle helidon
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.19. Easily exploi...
|
8.6 High | — | 0,35% | 18 Agt 2026 |
|
CVE-2026-73938
oracle helidon
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploit...
|
7.5 High | — | 0,41% | 18 Agt 2026 |
|
CVE-2026-73937
oracle helidon
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploit...
|
8.2 High | — | 0,40% | 18 Agt 2026 |
|
CVE-2026-73936
oracle helidon
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploit...
|
7.5 High | — | 0,44% | 18 Agt 2026 |
|
CVE-2026-73935
oracle helidon
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploit...
|
7.5 High | — | 0,44% | 18 Agt 2026 |
|
CVE-2026-73934
oracle helidon
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploi...
|
7.5 High | — | 0,44% | 18 Agt 2026 |
|
CVE-2026-73933
oracle helidon
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploit...
|
7.3 High | — | 0,31% | 18 Agt 2026 |
|
CVE-2026-73932
oracle helidon
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploit...
|
5.3 Medium | — | 0,39% | 18 Agt 2026 |
|
CVE-2026-73931
oracle helidon
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploit...
|
8.3 High | — | 0,31% | 18 Agt 2026 |
|
CVE-2026-73930
oracle helidon
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.19 and 4.0.0-4.5...
|
9.9 Critical | — | 0,37% | 18 Agt 2026 |
|
CVE-2026-73929
oracle helidon
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploit...
|
8.3 High | — | 0,31% | 18 Agt 2026 |
|
CVE-2026-73928
oracle helidon
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploit...
|
7.2 High | — | 0,27% | 18 Agt 2026 |
|
CVE-2026-73927
oracle helidon
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.19. Easily exploi...
|
7.5 High | — | 0,44% | 18 Agt 2026 |
|
CVE-2026-73925
oracle helidon
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.18. Easily exploi...
|
8.2 High | — | 0,33% | 18 Agt 2026 |
|
CVE-2026-73924
oracle helidon
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.18. Easily exploi...
|
9.1 Critical | — | 0,43% | 18 Agt 2026 |
Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum
menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat
kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah
perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan
dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk
yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.