Katalog CVE
Kerentanan perangkat lunak dan perangkat keras yang perlu diperhatikan administrator sistem di Perangkat Daerah, diperbarui otomatis dari NVD, KEV CISA, dan EPSS.
TLP:CLEAR · 27 kali dilihat
$ cat README.txt
Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.
| CVE | Severity | KEV | EPSS | Terbit |
|---|---|---|---|---|
|
CVE-2026-32464
Unauthenticated Local File Inclusion in Theme Test Drive <= 2.9.1 versions.
|
8.1 High | — | 0,47% | 18 Agt 2026 |
|
CVE-2026-32463
Contributor Arbitrary File Upload in Sync Post With Other Site <= 1.9.3 versions.
|
9.9 Critical | — | 0,48% | 18 Agt 2026 |
|
CVE-2026-32444
Contributor Remote Code Execution (RCE) in Cwicly <= 1.4.4 versions.
|
9.9 Critical | — | 0,79% | 18 Agt 2026 |
|
CVE-2026-32333
Unauthenticated Cross Site Scripting (XSS) in Mayosis Core <= 5.4.7 versions.
|
7.1 High | — | 0,25% | 18 Agt 2026 |
|
CVE-2026-28571
Unauthenticated Broken Access Control in FormyChat <= 2.15.7 versions.
|
7.5 High | — | 0,39% | 18 Agt 2026 |
|
CVE-2026-28570
Unauthenticated Local File Inclusion in Vavo Core <= 2.3.0 versions.
|
8.1 High | — | 0,47% | 18 Agt 2026 |
|
CVE-2026-28569
Unauthenticated Cross Site Scripting (XSS) in SSL Zen <= 4.7.43 versions.
|
7.1 High | — | 0,25% | 18 Agt 2026 |
|
CVE-2026-28568
Unauthenticated Cross Site Scripting (XSS) in Quill Forms <= 5.7.1 versions.
|
7.1 High | — | 0,25% | 18 Agt 2026 |
|
CVE-2026-28567
Unauthenticated Broken Access Control in WP Sort Order <= 1.3.5 versions.
|
7.5 High | — | 0,39% | 18 Agt 2026 |
|
CVE-2026-28192
Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro <= 7.1.67 versions.
|
9.6 Critical | — | 0,43% | 18 Agt 2026 |
|
CVE-2026-28191
Incorrect Privilege Assignment vulnerability in ThemeOne The Grid allows Privilege Escalation.
This issue affects The Grid: from n/a through 2.8.0.
|
8.8 High | — | 0,42% | 18 Agt 2026 |
|
CVE-2026-24301
microsoft copilot
Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a ne...
|
7.5 High | — | 1,1% | 18 Agt 2026 |
|
CVE-2026-17084
The "stringprep" module didn't process characters from RFC 3454 tables
B.2 or B.3 correctly: the latest Unicode codepoint attributes were used
instead of the specified...
|
6.0 Medium | — | 0,73% | 18 Agt 2026 |
|
CVE-2026-75874
mozilla firefox, mozilla thunderbird
Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154, Thunderbird 154, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR...
|
10.0 Critical | — | 0,46% | 18 Agt 2026 |
|
CVE-2026-75783
A security vulnerability has been detected in TRENDnet TEW-WLC100P 12.07b01. Affected by this vulnerability is an unknown functionality of the file /sbin/netifd of the co...
|
9.6 Critical | — | 0,60% | 18 Agt 2026 |
|
CVE-2026-75778
A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::select_with_multiple_condition of the file /index.php of...
|
7.3 High | — | 0,43% | 18 Agt 2026 |
|
CVE-2026-74990
mozilla firefox, mozilla thunderbird
Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or ano...
|
9.8 Critical | — | 0,72% | 18 Agt 2026 |
|
CVE-2026-74989
mozilla firefox, mozilla thunderbird
Internally found bugs present in Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough...
|
9.8 Critical | — | 0,57% | 18 Agt 2026 |
|
CVE-2026-74988
mozilla firefox, mozilla thunderbird
Internally found bugs present in Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we pre...
|
9.8 Critical | — | 0,61% | 18 Agt 2026 |
|
CVE-2026-74987
mozilla firefox, mozilla thunderbird
Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. Some of these bugs showed evidence of memory corruption or another security-releva...
|
9.8 Critical | — | 0,72% | 18 Agt 2026 |
|
CVE-2026-74986
mozilla firefox, mozilla thunderbird
Site isolation issue in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
|
9.1 Critical | — | 0,56% | 18 Agt 2026 |
|
CVE-2026-74985
mozilla firefox, mozilla thunderbird
Privilege escalation in the Enterprise Policies component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
|
9.8 Critical | — | 0,53% | 18 Agt 2026 |
|
CVE-2026-74984
mozilla firefox, mozilla thunderbird
Race condition in the JavaScript Engine component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
|
6.8 Medium | — | 0,28% | 18 Agt 2026 |
|
CVE-2026-74983
mozilla firefox, mozilla thunderbird
Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird...
|
8.1 High | — | 0,43% | 18 Agt 2026 |
|
CVE-2026-74982
mozilla firefox, mozilla thunderbird
Denial-of-service in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
|
7.5 High | — | 0,53% | 18 Agt 2026 |
|
CVE-2026-74981
mozilla firefox, mozilla thunderbird
Site isolation issue in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
|
8.1 High | — | 0,21% | 18 Agt 2026 |
|
CVE-2026-74980
mozilla firefox mobile
Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
|
6.5 Medium | — | 0,28% | 18 Agt 2026 |
|
CVE-2026-74979
mozilla firefox, mozilla thunderbird
Mitigation bypass in the Add-ons Manager component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
|
9.8 Critical | — | 0,53% | 18 Agt 2026 |
|
CVE-2026-74978
mozilla firefox, mozilla thunderbird
Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
|
8.1 High | — | 0,38% | 18 Agt 2026 |
|
CVE-2026-74977
mozilla firefox, mozilla thunderbird
Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
|
7.5 High | — | 0,60% | 18 Agt 2026 |
|
CVE-2026-74976
mozilla firefox, mozilla thunderbird
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbi...
|
6.5 Medium | — | 0,42% | 18 Agt 2026 |
|
CVE-2026-74975
mozilla firefox mobile
Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.
|
5.4 Medium | — | 0,25% | 18 Agt 2026 |
|
CVE-2026-74974
mozilla firefox, mozilla thunderbird
Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thu...
|
5.4 Medium | — | 0,17% | 18 Agt 2026 |
|
CVE-2026-74973
mozilla firefox, mozilla thunderbird
Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderb...
|
4.2 Medium | — | 0,22% | 18 Agt 2026 |
|
CVE-2026-74972
mozilla firefox, mozilla thunderbird
Information disclosure in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thun...
|
4.3 Medium | — | 0,35% | 18 Agt 2026 |
|
CVE-2026-74971
mozilla firefox, mozilla thunderbird
Information disclosure in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 1...
|
4.3 Medium | — | 0,35% | 18 Agt 2026 |
|
CVE-2026-74970
mozilla firefox, mozilla thunderbird
Site isolation issue in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
|
5.4 Medium | — | 0,16% | 18 Agt 2026 |
|
CVE-2026-74969
mozilla firefox, mozilla thunderbird
Race condition, use-after-free in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 1...
|
8.8 High | — | 0,48% | 18 Agt 2026 |
|
CVE-2026-74968
mozilla firefox, mozilla thunderbird
Site isolation issue in the Graphics: WebRender component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
|
5.4 Medium | — | 0,16% | 18 Agt 2026 |
|
CVE-2026-74967
mozilla firefox, mozilla thunderbird
Same-origin policy bypass in the Audio/Video: Playback component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thu...
|
5.4 Medium | — | 0,17% | 18 Agt 2026 |
|
CVE-2026-74966
mozilla firefox, mozilla thunderbird
Information disclosure in the Form Autofill component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
|
7.5 High | — | 0,44% | 18 Agt 2026 |
|
CVE-2026-74965
mozilla firefox, mozilla thunderbird
Privilege escalation in the Shell Integration component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird...
|
8.8 High | — | 0,44% | 18 Agt 2026 |
|
CVE-2026-74964
mozilla firefox, mozilla thunderbird
Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and T...
|
9.8 Critical | — | 0,68% | 18 Agt 2026 |
|
CVE-2026-74963
mozilla firefox, mozilla thunderbird
Same-origin policy bypass in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thund...
|
5.4 Medium | — | 0,17% | 18 Agt 2026 |
|
CVE-2026-74962
mozilla firefox, mozilla thunderbird
Site isolation issue in the Networking: Cookies component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbir...
|
8.1 High | — | 0,22% | 18 Agt 2026 |
|
CVE-2026-74961
mozilla firefox, mozilla thunderbird
Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
|
9.1 Critical | — | 0,44% | 18 Agt 2026 |
|
CVE-2026-74960
mozilla firefox, mozilla thunderbird
Site isolation issue in the WebExtensions component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140....
|
8.1 High | — | 0,22% | 18 Agt 2026 |
|
CVE-2026-74959
mozilla firefox, mozilla thunderbird
Mitigation bypass in the Storage: Cache API component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 14...
|
9.1 Critical | — | 0,48% | 18 Agt 2026 |
|
CVE-2026-74958
mozilla firefox, mozilla thunderbird
Information disclosure in the WebRTC component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.
|
7.5 High | — | 0,45% | 18 Agt 2026 |
|
CVE-2026-74957
mozilla firefox, mozilla thunderbird
Mitigation bypass in the Safe Browsing component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14,...
|
8.1 High | — | 0,43% | 18 Agt 2026 |
Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum
menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat
kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah
perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan
dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk
yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.