Katalog CVE (hal. 797)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.205 (Critical 36.640 · High 106.361 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 1 Nov 2026, 12:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 39.801–39.850 dari 266.205 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-70377 imagecli's pipeline operation (Scale::apply in src/image_ops.rs) computes output width/height as (dimension as f32 * ratio) as u32 with no upper-bound validation on the C...	7.5 High	—	0,39%	5 Agt 2026
CVE-2026-70376 Pluck CMS's admin panel relies solely on a Referer-header comparison (requestedByTheSameDomain in data/inc/functions.admin.php, gating every admin.php action) for CSRF pr...	9.6 Critical	—	0,20%	5 Agt 2026
CVE-2026-6972 The SKT Skill Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `chart_size` attribute of the `skillwrapper` shortcode in all versions up to,...	6.4 Medium	—	0,35%	5 Agt 2026
CVE-2026-6639 The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6. This is due...	7.5 High	—	2,0%	5 Agt 2026
CVE-2026-6627 The WPFormify – Stripe Payments with Form and Checkout plugin for WordPress is vulnerable to unauthorized modification and deletion of Stripe payment credentials in all v...	8.2 High	—	0,66%	5 Agt 2026
CVE-2026-6147 The LightSync Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the rest_replace_media() function in all versions up...	8.8 High	—	0,95%	5 Agt 2026
CVE-2026-6079 The Material Dashboard plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the amd_ajax_target_task_man...	7.3 High	—	0,41%	5 Agt 2026
CVE-2026-6020 The ShopLentor plugin for WordPress is vulnerable to arbitrary function execution via the woolentoropt/v1/custom-action REST API endpoint in all versions up to, and inclu...	7.2 High	—	0,78%	5 Agt 2026
CVE-2026-64581 In the Linux kernel, the following vulnerability has been resolved: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() xfrm_user_policy() clears the socket dst ca...	7.8 High	—	0,12%	5 Agt 2026
CVE-2026-64580 In the Linux kernel, the following vulnerability has been resolved: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() On the error path where...	7.8 High	—	0,13%	5 Agt 2026
CVE-2026-64578 In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate compound request size before reading StructureSize2 When ksmbd validates a compound...	8.2 High	—	0,34%	5 Agt 2026
CVE-2026-64577 In the Linux kernel, the following vulnerability has been resolved: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() gtp1u_send_echo_resp() ignores skb_pull_...	7.5 High	—	0,58%	5 Agt 2026
CVE-2026-64576 In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nh_res_bucket_migrate() nh_res_bucket_migrate() passes an uninitialize...	7.1 High	—	0,12%	5 Agt 2026
CVE-2026-64575 In the Linux kernel, the following vulnerability has been resolved: bpf: tcp: fix double sock release on batch realloc bpf_iter_tcp_batch() releases the current batch v...	7.8 High	—	0,16%	5 Agt 2026
CVE-2026-64574 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: tear down new links on vif update error path When ieee80211_vif_update_links() adds...	7.8 High	—	0,16%	5 Agt 2026
CVE-2026-64570 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix fils_discovery double free on alloc failure ieee80211_set_fils_discovery() calls...	7.8 High	—	0,18%	5 Agt 2026
CVE-2026-64568 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure ieee80211_set_unsol_bcast_pr...	7.8 High	—	0,12%	5 Agt 2026
CVE-2026-64567 In the Linux kernel, the following vulnerability has been resolved: btrfs: reject free space cache with more entries than pages When loading a v1 free space cache, __lo...	7.8 High	—	0,13%	5 Agt 2026
CVE-2026-64566 In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_frags() When iptfs_skb_add_frags() copies...	9.8 Critical	—	0,35%	5 Agt 2026
CVE-2026-61486 apache lucy UNSUPPORTED WHEN ASSIGNED Stack-based Buffer Overflow vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired,...	9.8 Critical	—	0,81%	5 Agt 2026
CVE-2026-61484 apache lucy UNSUPPORTED WHEN ASSIGNED Deserialization of Untrusted Data vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is ret...	9.8 Critical	—	0,81%	5 Agt 2026
CVE-2026-61483 apache lucy UNSUPPORTED WHEN ASSIGNED Uncontrolled Recursion vulnerability in Apache Lucy. This issue affects Apache Lucy: all versions. As this project is retired, we do...	7.5 High	—	1,0%	5 Agt 2026
CVE-2026-5651 The Askeet plugin for WordPress is vulnerable to SQL Injection via the 'sql_query' parameter in multiple AJAX actions (askeet_execute_sql_query, askeet_export_all_results...	4.9 Medium	—	0,51%	5 Agt 2026
CVE-2026-5581 The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to unauthorized arbitrary media deletion in all versions up to, and including, 1.1.8. This is due...	9.1 Critical	—	0,66%	5 Agt 2026
CVE-2026-59675 When API audit logging is enabled, the middleware reads the entire HTTP request body into memory without enforcing a size limit on login endpoints. Because the audit midd...	7.5 High	—	0,56%	5 Agt 2026
CVE-2026-55998 The endpoint /v3/import/{token}_{clusterId}.yaml retrieves the cluster object before validating the token. When a valid cluster ID references a cluster that has private r...	5.3 Medium	—	0,34%	5 Agt 2026
CVE-2026-55997 Rancher issues long-lived registration tokens to authenticate nodes and agents joining a downstream cluster. These tokens were stored and exposed in plaintext with no exp...	8.8 High	—	0,11%	5 Agt 2026
CVE-2026-55996 A denial-of-service vulnerability was identified in multiple TLS listeners in Rancher. Both the cattle-cluster-agent component running in downstream clusters and the Ranc...	4.3 Medium	—	0,25%	5 Agt 2026
CVE-2026-55747 The pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow implements a helper as a thin os.path.join(workdir, p) wrapper with no canonicalization or containme...	6.8 Medium	—	0,35%	5 Agt 2026
CVE-2026-5116 The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.0.5. This is due to...	4.4 Medium	—	0,31%	5 Agt 2026
CVE-2026-5108 The Super Progressive Web Apps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `superpwa_settings[offline_message_txt]` setting in all versions...	4.4 Medium	—	0,31%	5 Agt 2026
CVE-2026-55739 Crater isolates data per company_id, and its Invoice/Estimate/Payment/Expense policies enforce both a Bouncer ability check and ->hasCompany(->company_id). CustomerPolicy...	8.3 High	—	0,37%	5 Agt 2026
CVE-2026-54418 Leantime through 3.6.2 exposes the JSON-RPC methods leantime.rpc.TwoFA.TwoFA.getSetupData, saveSecret, verifyAndEnable, and disable2FA, which act on a caller-supplied use...	8.1 High	—	0,35%	5 Agt 2026
CVE-2026-54416 Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin file-management feature using a fixed blacklist in data/inc/files.php ('.php','php3','php4','php5',...	7.2 High	—	0,50%	5 Agt 2026
CVE-2026-4431 The Easy Post Submission plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `create_post()` function in all...	9.1 Critical	—	0,62%	5 Agt 2026
CVE-2026-18881 The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to blind SQL Injection via the `filter_data[comment_count]` parameter of the public `tab...	7.5 High	—	0,51%	5 Agt 2026
CVE-2026-17532 The Seraphinite Accelerator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'seraph_accel_prep' parameter in versions up to, and including, 2...	6.1 Medium	—	0,79%	5 Agt 2026
CVE-2026-17505 The Translate Multilingual sites – TranslatePress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in versions up to, and includ...	6.1 Medium	—	0,85%	5 Agt 2026
CVE-2026-15281 The User Access Manager plugin for WordPress is vulnerable to Second-Order SQL Injection via the 'id' parameter of the wp_ajax_save-attachment-compat AJAX action in versi...	6.5 Medium	—	0,45%	5 Agt 2026
CVE-2026-12000 The Page and Post Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 1.4.0 via the WordPress core REST endpo...	7.5 High	—	0,69%	5 Agt 2026
CVE-2026-11977 The WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars plugin for WordPress is vulnerable to generic SQL Injection via the 'wpma_metabox_author...	6.5 Medium	—	0,41%	5 Agt 2026
CVE-2026-11969 The WP TripAdvisor Review Slider plugin for WordPress is vulnerable to generic SQL Injection via 'curselrevs[]' Parameter in all versions up to, and including, 14.3 due t...	4.9 Medium	—	0,51%	5 Agt 2026
CVE-2026-11920 The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based SQL Injection via the 'order' parameter in all version...	4.9 Medium	—	0,48%	5 Agt 2026
CVE-2026-11454 The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4...	6.5 Medium	—	0,54%	5 Agt 2026
CVE-2026-71201 In OpenStack Ironic through 38.0.0, a project reader that makes a crafted request to Ironic can return Portgroups assigned to Nodes owned or leased by another project.	5.0 Medium	—	0,28%	5 Agt 2026
CVE-2026-70375 HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the Git deployer component. GitDeployer.pullRepo in src/Server/Entity/Deployer/GitD...	8.8 High	—	1,9%	5 Agt 2026
CVE-2026-70374 HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerability (CWE-78) in the media upload thumbnail generation routine. Media.generateThumbnail in src/Serve...	8.8 High	—	1,9%	5 Agt 2026
CVE-2026-68080 apache qpid broker-j It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated attacker to cause excessive resource usage and potenti...	6.5 Medium	—	0,65%	5 Agt 2026
CVE-2026-68078 apache qpid broker-j It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potent...	6.5 Medium	—	0,65%	5 Agt 2026
CVE-2026-68077 apache qpid broker-j An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service...	6.5 Medium	—	0,65%	5 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.