Katalog CVE (hal. 7) — KUTIM-CSIRT

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 257.565 (Critical 35.800 · High 103.006 · KEV 1.741 · sejak 2020) · Pembaruan terakhir: 14 Okt 2026, 18:26 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 301–350 dari 257.565 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-110084 Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Injection) vulnerability that could result in a Security feature bypass. A low-privileged attack...	7.1 High	—	—	13 Okt 2026
CVE-2026-110083 Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in a Secur...	7.1 High	—	—	13 Okt 2026
CVE-2026-110082 Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL ref...	5.4 Medium	—	—	13 Okt 2026
CVE-2026-110081 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	—	13 Okt 2026
CVE-2026-110080 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	—	13 Okt 2026
CVE-2026-110079 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	—	13 Okt 2026
CVE-2026-110078 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	—	13 Okt 2026
CVE-2026-110077 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	—	13 Okt 2026
CVE-2026-110076 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	—	13 Okt 2026
CVE-2026-110075 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	—	13 Okt 2026
CVE-2026-110074 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	—	13 Okt 2026
CVE-2026-110073 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	—	13 Okt 2026
CVE-2026-110037 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	—	13 Okt 2026
CVE-2026-109415 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	—	13 Okt 2026
CVE-2026-107682 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	—	13 Okt 2026
CVE-2026-107305 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	—	13 Okt 2026
CVE-2026-106634 Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary fil...	7.7 High	—	—	13 Okt 2026
CVE-2026-106633 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	—	13 Okt 2026
CVE-2026-106632 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	—	13 Okt 2026
CVE-2026-106631 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts in...	5.4 Medium	—	—	13 Okt 2026
CVE-2026-106630 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable...	9.3 Critical	—	—	13 Okt 2026
CVE-2026-106629 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable...	9.3 Critical	—	—	13 Okt 2026
CVE-2026-106628 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to...	5.4 Medium	—	—	13 Okt 2026
CVE-2026-106626 Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An at...	9.1 Critical	—	—	13 Okt 2026
CVE-2026-105895 Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user, poten...	9.9 Critical	—	—	13 Okt 2026
CVE-2026-104252 Vitess is a database clustering system for horizontal scaling of MySQL. Prior to 23.0.5 and 24.0.2, twopczHandler in go/vt/vttablet/tabletserver/twopcz.go writes the Acti...	9.8 Critical	—	—	13 Okt 2026
CVE-2026-103855 Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to c...	5.5 Medium	—	—	13 Okt 2026
CVE-2026-103854 Dimension is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of thi...	7.8 High	—	—	13 Okt 2026
CVE-2026-103853 Dimension is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose...	5.5 Medium	—	—	13 Okt 2026
CVE-2026-103852 Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnera...	5.5 Medium	—	—	13 Okt 2026
CVE-2026-103851 Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploita...	7.8 High	—	—	13 Okt 2026
CVE-2026-103850 Substance3D - Stager is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability t...	5.5 Medium	—	—	13 Okt 2026
CVE-2026-103848 Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in a...	9.9 Critical	—	—	13 Okt 2026
CVE-2026-103847 Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploi...	8.6 High	—	—	13 Okt 2026
CVE-2026-103846 Dimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerability that could result in arbitrary code execution in the context of the...	8.6 High	—	—	13 Okt 2026
CVE-2026-103845 Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attac...	8.6 High	—	—	13 Okt 2026
CVE-2026-103844 Dimension is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...	7.8 High	—	—	13 Okt 2026
CVE-2026-103843 Substance3D - Stager is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this...	7.8 High	—	—	13 Okt 2026
CVE-2026-103842 Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory stru...	7.8 High	—	—	13 Okt 2026
CVE-2026-103841 Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory stru...	7.8 High	—	—	13 Okt 2026
CVE-2026-103840 Substance3D - Stager is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory stru...	7.8 High	—	—	13 Okt 2026
CVE-2026-103839 Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of...	7.8 High	—	—	13 Okt 2026
CVE-2026-103838 Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of...	7.8 High	—	—	13 Okt 2026
CVE-2026-103837 Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of...	7.8 High	—	—	13 Okt 2026
CVE-2026-103836 Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of...	7.8 High	—	—	13 Okt 2026
CVE-2026-103835 Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of...	7.8 High	—	—	13 Okt 2026
CVE-2026-103834 Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of...	7.8 High	—	—	13 Okt 2026
CVE-2026-103833 Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of...	7.8 High	—	—	13 Okt 2026
CVE-2026-103832 Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of...	7.8 High	—	—	13 Okt 2026
CVE-2026-103830 Substance3D - Stager is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploita...	7.8 High	—	—	13 Okt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.