Katalog CVE (hal. 689)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 265.211 (Critical 36.541 · High 105.926 · KEV 1.762 · sejak 2020) · Pembaruan terakhir: 30 Okt 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 34.401–34.450 dari 265.211 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-74792 Scriban before 7.0.0 (affected versions <= 6.6.0) contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse th...	7.5 High	—	0,53%	16 Agt 2026
CVE-2026-74791 Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cached templates to persist across reused contexts. At...	8.6 High	—	0,43%	16 Agt 2026
CVE-2026-74790 Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused TemplateContext instances to expose members that sh...	9.1 Critical	—	0,47%	16 Agt 2026
CVE-2026-74789 Scriban before 7.0.0 (affected <= 6.6.0) applies its LoopLimit constraint only to script loop statements and not to expensive iteration performed inside built-in operator...	7.5 High	—	0,60%	16 Agt 2026
CVE-2026-74788 Scriban before 7.0.0 (affected versions <= 6.6.0) contains an uncontrolled memory allocation vulnerability in the string.pad_left and string.pad_right template functions,...	7.5 High	—	0,49%	16 Agt 2026
CVE-2026-74787 Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.to_json builtin function that lacks depth limits and circular reference detection. Att...	7.5 High	—	0,49%	16 Agt 2026
CVE-2026-74786 Scriban before 7.0.0 (affected versions <= 6.6.0) contains a denial-of-service vulnerability in which the LimitToString safety limit (default 1MB) can be bypassed because...	6.5 Medium	—	0,48%	16 Agt 2026
CVE-2026-74785 Scriban before 7.0.0 contains three distinct denial-of-service vulnerabilities in expression evaluation that bypass existing safety controls through unbounded string mult...	6.5 Medium	—	0,48%	16 Agt 2026
CVE-2026-74784 Scriban before 7.2.0 contains a denial of service vulnerability in the array.insert_at function that allocates unbounded null entries without respecting LoopLimit or Limi...	8.7 High	—	0,45%	16 Agt 2026
CVE-2026-74783 Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing ExpressionDepthLimit guard that fails to stop recursive descent parsing of deeply nested expressions. Attacke...	7.5 High	—	0,34%	16 Agt 2026
CVE-2026-73062 Scriban versions 3.0.0 through 7.2.0 contain a denial of service vulnerability in the array multiplication operator that allocates memory without enforcing LoopLimit or o...	7.5 High	—	0,49%	16 Agt 2026
CVE-2026-73061 Scriban before 7.2.2 contains an access-modifier bypass vulnerability in TypedObjectAccessor that allows template code to write CLR object properties without setter-visib...	9.8 Critical	—	0,38%	16 Agt 2026
CVE-2026-73060 Scriban versions from 3.0.0 through 7.2.5 contain a denial of service vulnerability in the ScriptRange.Multiply operator that bypasses LoopLimit when the left operand is...	7.5 High	—	0,45%	16 Agt 2026
CVE-2026-73059 stoatchat before 0.15.0 contains a permission bypass vulnerability in the message_fetch route that checks only ViewChannel permission instead of requiring ReadMessageHist...	6.5 Medium	—	0,38%	16 Agt 2026
CVE-2026-73058 stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF blocklist, allowing unauthenticated attackers to bypass protections via the /...	5.8 Medium	—	0,36%	16 Agt 2026
CVE-2026-73057 stoatchat before 0.15.0 fails to validate SVG viewBox dimensions in the proxy endpoint, allowing attackers to cause denial of service by memory exhaustion. Attackers can...	7.5 High	—	0,34%	16 Agt 2026
CVE-2026-73056 SiYuan kernel versions before 3.7.4 contain an improper restriction of excessive authentication attempts vulnerability in the CheckAuth() middleware. The middleware accep...	9.8 Critical	—	0,79%	16 Agt 2026
CVE-2026-72888 Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smart_require. smart_require stores results in a process...	6.5 Medium	—	0,55%	16 Agt 2026
CVE-2026-72887 Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token. Passing a callback to the...	9.8 Critical	—	0,72%	16 Agt 2026
CVE-2026-19349 Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state par...	9.8 Critical	—	0,82%	16 Agt 2026
CVE-2024-58375 OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals when users have opted into static evaluation of module sources, versions, an...	7.5 High	—	0,43%	16 Agt 2026
CVE-2026-74251 Advisory Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (attribute) and s[] (specification) GET array parame...	9.3 Critical	—	0,42%	16 Agt 2026
CVE-2026-74578 In the Linux kernel, the following vulnerability has been resolved: crypto: algif_skcipher - force synchronous processing on trees without ctx->state The AIO/async path...	7.1 High	—	0,15%	16 Agt 2026
CVE-2024-13784 The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.8.5 via d...	9.8 Critical	—	0,76%	16 Agt 2026
CVE-2026-2497 The Gallery by BestWebSoft plugin for WordPress is vulnerable to SQL Injection via the '_gallery_order_{post_id}' parameter array keys in all versions up to, and includin...	7.2 High	—	0,56%	16 Agt 2026
CVE-2026-2357 The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bt_bb_shortcode' shortcode in all versions up to, and including,...	6.4 Medium	—	0,32%	16 Agt 2026
CVE-2026-18347 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.1.1. Th...	4.3 Medium	—	0,53%	16 Agt 2026
CVE-2026-17608 The WP Compress – Instant Performance & Speed Optimization plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.10.09....	6.5 Medium	—	0,24%	16 Agt 2026
CVE-2026-17604 The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.1.1 via...	4.9 Medium	—	1,2%	16 Agt 2026
CVE-2026-17087 The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.8.4...	7.5 High	—	0,69%	16 Agt 2026
CVE-2026-13424 The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via bookly_speed_up_update_addons AJAX act...	7.2 High	—	0,58%	16 Agt 2026
CVE-2026-12998 The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and...	5.3 Medium	—	0,52%	16 Agt 2026
CVE-2026-10734 The Infility Global plugin for WordPress is vulnerable to Stored Cross-Site Scripting via /cf7_record Log Endpoint in all versions up to, and including, 2.15.21 due to in...	7.2 High	—	0,41%	16 Agt 2026
CVE-2026-9767 The The School Management – Education & Learning ERP plugin for WordPress is vulnerable to generic SQL Injection via 'order[0][dir]' Parameter in all versions up to, and...	6.5 Medium	—	0,55%	16 Agt 2026
CVE-2026-2283 The User Login History plugin for WordPress is vulnerable to SQL Injection via the 'blog_id' parameter in all versions up to, and including, 2.1.7. This is due to insuffi...	4.9 Medium	—	0,48%	16 Agt 2026
CVE-2026-19934 A vulnerability has been found in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /vieworder.php. The manipulation of the argume...	6.3 Medium	—	0,33%	16 Agt 2026
CVE-2026-19728 The Extra Product Options Builder for WooCommerce WordPress plugin before 1.2.176 does not verify that the requester is entitled to a customer-uploaded file before servin...	7.5 High	—	0,45%	16 Agt 2026
CVE-2026-19726 The Visualizer WordPress plugin before 4.0.7 does not properly authorise access to the configuration of its charts, allowing users with the Contributor role and above to...	6.5 Medium	—	0,34%	16 Agt 2026
CVE-2026-19725 The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.131 does not sanitise a value taken from an unauthenticated request before using it to build a log f...	9.1 Critical	—	0,52%	16 Agt 2026
CVE-2026-19717 The CatFolders Document Gallery & PDF Library WordPress plugin before 2.0.7 does not have authorisation checks in some of its REST API endpoints, allowing unauthenticated...	7.5 High	—	0,43%	16 Agt 2026
CVE-2026-19714 The Simple JWT Login WordPress plugin before 3.6.8 does not validate the audience of the Google identity tokens it accepts, allowing unauthenticated users to authenticat...	9.1 Critical	—	0,42%	16 Agt 2026
CVE-2026-19712 The Masteriyo LMS WordPress plugin before 2.3.3 does not sanitise and escape a quiz field before outputting it back in a page, and grants its instructor role the ability...	6.1 Medium	—	0,25%	16 Agt 2026
CVE-2026-19711 The Premium Packages WordPress plugin before 7.0.7 does not validate a withdrawal request against the requesting user's actual earned balance, allowing any authenticated...	6.5 Medium	—	0,30%	16 Agt 2026
CVE-2026-19613 The ECS WordPress plugin before 4.3.10 does not perform ownership or post-status checks when one of its dynamic repeater data sources reads custom field values from a us...	6.5 Medium	—	0,37%	16 Agt 2026
CVE-2026-18653 The WP Directory Kit WordPress plugin before 1.5.7 does not sanitise and escape a parameter before using it in a SQL statement, allowing administrators to perform SQL inj...	7.2 High	—	0,45%	16 Agt 2026
CVE-2026-18402 The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'draweropenverposition' Block/Shortcode Attribu...	6.4 Medium	—	0,33%	16 Agt 2026
CVE-2026-18316 The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the import_zip() function in versio...	9.1 Critical	—	0,60%	16 Agt 2026
CVE-2026-17582 The Slider Hero plugin for WordPress is vulnerable to second-order SQL Injection in versions up to, and including, 9.1.7 via the qcld_sliderhero_duplicate() function. Sli...	4.9 Medium	—	0,48%	16 Agt 2026
CVE-2026-17581 The WCPOS – Point of Sale (POS) plugin for WooCommerce plugin for WordPress is vulnerable to Code Injection via the 'thermal' Template Engine in all versions up to, and i...	7.2 High	—	1,4%	16 Agt 2026
CVE-2026-17533 The All-in-One WP Migration and Backup WordPress plugin before 7.108 does not restrict its migration import functionality to network administrators on multisite installat...	7.2 High	—	0,46%	16 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.