Katalog CVE (hal. 696)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 265.359 (Critical 36.559 · High 106.016 · KEV 1.764 · sejak 2020) · Pembaruan terakhir: 30 Okt 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 34.751–34.800 dari 265.359 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-74473 In the Linux kernel, the following vulnerability has been resolved: vxlan: use pskb_network_may_pull() in route_shortcircuit() route_shortcircuit() currently calls pskb...	9.8 Critical	—	0,53%	15 Agt 2026
CVE-2026-74471 In the Linux kernel, the following vulnerability has been resolved: tracing: Check return value of __register_event() in trace_module_add_events() trace_module_add_even...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74470 In the Linux kernel, the following vulnerability has been resolved: scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write resp_report_zones() sizes the reply...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74469 In the Linux kernel, the following vulnerability has been resolved: sctp: prevent peer transport count overflow sctp_assoc_add_peer() increments the association's 16-bi...	8.8 High	—	1,5%	15 Agt 2026
CVE-2026-74467 In the Linux kernel, the following vulnerability has been resolved: s390/qeth: Check CAP_NET_ADMIN for private ioctls Gate the SIOCDEVPRIVATE ioctl commands SIOC_QETH_A...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74465 In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix potential UAF on meter attach failure While attaching a newly created meter at...	7.8 High	—	0,15%	15 Agt 2026
CVE-2026-74461 In the Linux kernel, the following vulnerability has been resolved: i2c: imx: Cancel hrtimer before clearing slave pointer In i2c_imx_unreg_slave(), the slave pointer i...	8.4 High	—	0,14%	15 Agt 2026
CVE-2026-74456 In the Linux kernel, the following vulnerability has been resolved: can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error In peak_usb_...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74454 In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size vc4_overflow_mem_work() po...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74453 In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Zero the tile state data array before each BIN job The binner BO is a single 16MB buffer sp...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74452 In the Linux kernel, the following vulnerability has been resolved: drm/panthor: reject firmware sections with oversized data In panthor_fw_load_section_entry(), the da...	7.8 High	—	0,19%	15 Agt 2026
CVE-2026-74451 In the Linux kernel, the following vulnerability has been resolved: drm/panthor: validate firmware interface structure sizes iface_fw_to_cpu_addr() only checks that the...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-74450 In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix pptable use-after-free amdgpu_dpm_get_pp_table() returns a pointer to a driver-owned...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74449 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport If a plane reaches...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74447 In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment eop_ring_buffer_size in struct q...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74446 In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: hold event_mutex while checkpointing CRIU events kfd_criu_checkpoint_events() counts the...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74444 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate DRAW_PRIMITIVES header size before division vmw_cmd_draw() computes maxnum =...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-74443 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: bound DMA command body size against suffix pointer vmw_cmd_dma() locates the DMA suffix...	8.8 High	—	0,13%	15 Agt 2026
CVE-2026-74440 In the Linux kernel, the following vulnerability has been resolved: drm/xe: Wait on external BO kernel fences in exec IOCTL Before arming a user job, xe_exec_ioctl() on...	7.8 High	—	0,13%	15 Agt 2026
CVE-2026-73194 DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves se...	9.1 Critical	—	0,49%	15 Agt 2026
CVE-2026-73193 DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse. preparse res...	9.8 Critical	—	0,65%	15 Agt 2026
CVE-2026-19894 A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewmedicine.php. Performing a manipulati...	6.3 Medium	—	0,33%	15 Agt 2026
CVE-2026-19893 A vulnerability was identified in D-Link DIR-842 2.01.B04. This impacts an unknown function of the file /etc/vsftpd.conf of the component vsftpd. Such manipulation leads...	3.1 Low	—	0,47%	15 Agt 2026
CVE-2026-12248 The WPML Multilingual CMS plugin for WordPress is vulnerable to SQL Injection via the 'sorting' parameter in all versions up to, and including, 4.9.5 due to insufficient...	6.5 Medium	—	0,45%	15 Agt 2026
CVE-2026-73635 apache struts Allocation of resources without limits or throttling vulnerability in Apache Struts. When no fixed locale is configured, the locale used for localized-text lookups is tak...	7.5 High	—	0,45%	15 Agt 2026
CVE-2026-73634 apache struts Uncontrolled resource consumption vulnerability in Apache Struts. An application that exposes an endpoint collecting Content Security Policy violation reports reads the s...	7.5 High	—	0,43%	15 Agt 2026
CVE-2026-73632 apache struts Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-response serialization state could be shared across concurrent requests,...	4.3 Medium	—	0,38%	15 Agt 2026
CVE-2026-73631 apache struts Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-request parsing state could be shared across concurrent requests, allowin...	4.3 Medium	—	0,38%	15 Agt 2026
CVE-2026-19891 A vulnerability was determined in TRENDnet TEW-WLC100 2.05b02. This affects an unknown function of the file /etc/racoon.conf of the component IKE Phase 1 Aggressive Mode....	3.7 Low	—	0,18%	15 Agt 2026
CVE-2026-18438 The Templately – Elementor & Gutenberg Template Library: 6500+ Free & Pro Ready Templates And Cloud! plugin for WordPress is vulnerable to Remote Code Execution in all ve...	8.8 High	—	1,3%	15 Agt 2026
CVE-2026-16142 The TrueBooker plugin for WordPress is vulnerable to Account Takeover in all versions up to, and including, 1.2.6. This is due to the add_front_user_update() AJAX handler...	9.8 Critical	—	0,66%	15 Agt 2026
CVE-2026-15142 The Real Estate Manager Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 12.8.6. This is due to improper capability ha...	7.5 High	—	0,36%	15 Agt 2026
CVE-2026-15826 The User Profile Builder plugin for WordPress is vulnerable to Authentication Bypass via Type Confusion in versions up to, and including, 3.16.4. This is due to the wppb_...	9.8 Critical	—	3,9%	15 Agt 2026
CVE-2026-14279 The Wholesale Market plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.2.2 via the ced_wholesale_request_send AJAX action. Th...	8.8 High	—	0,52%	15 Agt 2026
CVE-2026-74439 In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry device_pasid_table_tea...	9.3 Critical	—	0,20%	15 Agt 2026
CVE-2026-74438 In the Linux kernel, the following vulnerability has been resolved: crypto: sun4i-ss - Remove insecure and unused rng_alg Remove sun4i_ss_rng, as it is insecure and unu...	7.8 High	—	0,19%	15 Agt 2026
CVE-2026-74436 In the Linux kernel, the following vulnerability has been resolved: rxrpc: serialize kernel accept preallocation with socket teardown rxrpc_kernel_charge_accept() reads...	9.8 Critical	—	0,40%	15 Agt 2026
CVE-2026-74435 In the Linux kernel, the following vulnerability has been resolved: rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc rxrpc_recvmsg_data() calls rxrpc_verify_data() w...	7.5 High	—	0,63%	15 Agt 2026
CVE-2026-74434 In the Linux kernel, the following vulnerability has been resolved: rxrpc: Don't move a peeked OOB message onto the pending queue rxrpc_recvmsg_oob() takes a received o...	9.8 Critical	—	0,63%	15 Agt 2026
CVE-2026-74433 In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix UAF in rxgk_issue_challenge() Fix rxgk_issue_challenge() to free the page containing the...	9.8 Critical	—	0,65%	15 Agt 2026
CVE-2026-74431 In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix potential infinite loop in rxrpc_recvmsg() Fix the wait in rxrpc_recvmsg() also take chec...	7.5 High	—	0,61%	15 Agt 2026
CVE-2026-74430 In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix ACKALL packet handling rxrpc_input_ackall() accepts ACKALL packets without checking wheth...	7.5 High	—	0,61%	15 Agt 2026
CVE-2026-74429 In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix the reception of a reply packet before data transmission Fix rxrpc_receiving_reply() to h...	7.5 High	—	0,61%	15 Agt 2026
CVE-2026-74428 In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix double unlock in rxrpc_recvmsg() Fix a double unlock in rxrpc_recvmsg() when dealing with...	9.8 Critical	—	0,65%	15 Agt 2026
CVE-2026-74427 In the Linux kernel, the following vulnerability has been resolved: afs: Fix netns teardown to cancel the preallocation charger Fix the teardown of an afs network names...	9.8 Critical	—	0,76%	15 Agt 2026
CVE-2026-74425 In the Linux kernel, the following vulnerability has been resolved: afs: handle CB.InitCallBackState3 requests without a server record The cache manager callback path n...	7.5 High	—	0,35%	15 Agt 2026
CVE-2026-74419 In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Adjust size for copy_to_user() The amount of data returned to user space should be li...	7.3 High	—	0,16%	15 Agt 2026
CVE-2026-74417 In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix integer overflow in radeon_align_pitch() radeon_align_pitch() has the same kind of o...	7.8 High	—	0,18%	15 Agt 2026
CVE-2026-74413 In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: fix wrong pci_get_drvdata type in AER handlers rtw89 stores an ieee80211_hw pointer via...	8.8 High	—	0,38%	15 Agt 2026
CVE-2026-74412 In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: fix wrong pci_get_drvdata type in AER handlers rtw88 stores an ieee80211_hw pointer via...	8.8 High	—	0,38%	15 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.