Katalog CVE (hal. 812)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.209 (Critical 36.641 · High 106.361 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 1 Nov 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 40.551–40.600 dari 266.209 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-14864 The JetEngine WordPress plugin before 3.8.12 does not escape a post meta value before outputting it through one of its shortcodes, allowing users with the Contributor rol...	5.4 Medium	—	0,23%	2 Agt 2026
CVE-2026-14841 The King Addons for Elementor WordPress plugin before 51.1.76 does not escape a user-supplied grid setting before reflecting it into an HTML attribute in an unauthentica...	6.1 Medium	—	0,25%	2 Agt 2026
CVE-2026-14817 The Element Pack Addons for Elementor WordPress plugin before 8.7.13 does not sanitize option values passed through certain data attributes before a bundled front-end li...	6.8 Medium	—	0,43%	2 Agt 2026
CVE-2026-13389 The webtoffee-cookie-consent WordPress plugin before 3.5.3 does not perform authorization checks on several of its REST API routes, allowing unauthenticated attackers to...	6.5 Medium	—	0,30%	2 Agt 2026
CVE-2026-12586 The Lenxel WP WordPress theme through 1.0.31 does not perform any authorization or ownership check on its password-reset action, validating only a CSRF nonce, allowing un...	8.1 High	—	0,20%	2 Agt 2026
CVE-2026-11872 The Clever Mega Menu for Visual Composer WordPress plugin through 1.0.1 does not perform a nonce or capability check in an AJAX action that updates navigation menu item m...	4.3 Medium	—	0,25%	2 Agt 2026
CVE-2025-15675 The Charitable WordPress plugin before 1.8.5.3 does not sanitise and escape one of its campaign image text fields before outputting it in an HTML attribute, allowing use...	4.8 Medium	—	0,24%	2 Agt 2026
CVE-2026-9335 A vulnerability in keras-team/keras versions <= 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The `KerasFileE...	6.5 Medium	—	0,77%	2 Agt 2026
CVE-2026-8457 The WooCommerce - Social Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to and including 2.8.7. This is due to the plugin's Apple lo...	9.8 Critical	—	0,70%	2 Agt 2026
CVE-2026-18352 The User Access Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.15 via the 'uamgetfile' parameter parameter. T...	7.5 High	—	1,0%	2 Agt 2026
CVE-2026-13339 The CubeWP Framework plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.30 via the 'cubewp_get_svg_content' function. Thi...	7.5 High	—	0,94%	2 Agt 2026
CVE-2026-18556 n-able n-central Authentication bypass using an alternate path or channel vulnerability in N-able N-central allows Authentication Bypass. This issue affects N-central: through 2026.1.	7.4 High	KEV	7,9%	1 Agt 2026
CVE-2026-55735 ueberauth guardian Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim's session with a forged token. Guardian.revo...	7.5 High	—	0,46%	1 Agt 2026
CVE-2026-55734 ueberauth guardian Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guardian.Permissions module) allows a denial of service via BEAM atom-table exha...	7.5 High	—	0,48%	1 Agt 2026
CVE-2026-55733 ueberauth guardian Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-controlled binary input. Gu...	7.5 High	—	0,48%	1 Agt 2026
CVE-2026-54894 ueberauth guardian Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of service via unbounded atom creation from attacker-influenced binary input. Gu...	7.5 High	—	0,48%	1 Agt 2026
CVE-2026-67355 guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the request host in the Domain field instead of marking cookies as host-only. At...	5.9 Medium	—	0,37%	1 Agt 2026
CVE-2026-67354 guzzlehttp/guzzle versions before 7.15.1 contain an information disclosure vulnerability in RedirectMiddleware. When the optional allow_redirects.referer setting is enabl...	5.9 Medium	—	0,37%	1 Agt 2026
CVE-2026-67353 guzzlehttp/guzzle versions before 7.15.1 contain a denial of service vulnerability in the CookieJar that accepts unlimited Set-Cookie header fields with no size restricti...	5.3 Medium	—	0,42%	1 Agt 2026
CVE-2026-67352 luci-app-https-dns-proxy contains a stored cross-site scripting vulnerability in the resolver_url parameter that allows authenticated users to inject active HTML. When an...	7.6 High	—	0,41%	1 Agt 2026
CVE-2026-67344 ArcadeDB before 26.7.2 fails to enforce the UPDATE_SCHEMA database permission on the ALTER TYPE ... CUSTOM and ALTER TYPE ... BUCKETSELECTIONSTRATEGY SQL operations, whic...	4.3 Medium	—	0,24%	1 Agt 2026
CVE-2026-67343 ArcadeDB versions before 26.7.2 fail to properly redact the cluster token in the GET /api/v1/server endpoint, allowing authenticated users to retrieve the arcadedb.ha.clu...	8.8 High	—	0,51%	1 Agt 2026
CVE-2026-67342 ArcadeDB versions before 26.7.2 contain an authorization bypass vulnerability in HTTP handlers for time series, batch, Prometheus, and Grafana endpoints that fail to vali...	9.8 Critical	—	0,54%	1 Agt 2026
CVE-2026-67341 ArcadeDB versions before 26.7.2 fail to enforce scripting authorization checks on the SQL DEFINE FUNCTION statement with LANGUAGE js. Attackers with database access can e...	9.8 Critical	—	0,54%	1 Agt 2026
CVE-2026-67340 ArcadeDB before 26.7.2 (arcadedb-engine) allows trigger scripts to look up host classes in java.lang.* (via Java.type) because ScriptTriggerExecutor adds java.lang.* to t...	7.2 High	—	0,92%	1 Agt 2026
CVE-2026-67339 guzzlehttp/guzzle versions before 7.14.2 fail to properly isolate Proxy-Authorization headers from origin servers in cURL handlers. Attackers can capture proxy credential...	5.3 Medium	—	0,37%	1 Agt 2026
CVE-2026-67338 JupyterLab before 4.5.9 contains a stored cross-site scripting vulnerability in the Extension Manager that fails to validate URI protocols in package metadata URLs. Attac...	6.1 Medium	—	0,31%	1 Agt 2026
CVE-2026-67337 better-auth versions before 1.4.9 contain a two-factor authentication bypass vulnerability when session.cookieCache is enabled. Attackers with valid primary credentials c...	6.5 Medium	—	0,46%	1 Agt 2026
CVE-2026-67336 better-auth versions before 1.6.11 contain insecure cryptographic defaults in the oidcProvider and mcp plugins that advertise the none algorithm and accept plain PKCE by...	8.7 High	—	0,24%	1 Agt 2026
CVE-2026-67335 better-auth versions before 1.6.2 fail to validate the OAuth state parameter against the stored nonce when using cookie-backed state storage without PKCE. Attackers can f...	5.3 Medium	—	0,28%	1 Agt 2026
CVE-2026-67334 better-auth versions before 1.6.11 fail to delete cached sessions when removing users via admin, anonymous, or SCIM endpoints when secondaryStorage is configured and stor...	3.8 Low	—	0,32%	1 Agt 2026
CVE-2026-67333 better-auth before 1.6.13 (and pre-release builds 1.7.0-beta.0 through 1.7.0-beta.3) fail to validate the scheme of redirect_uris registered via the deprecated oidc-provi...	7.2 High	—	0,26%	1 Agt 2026
CVE-2026-67332 @better-auth/oauth-provider before 1.7.0-beta.4 fails to bind access-token audience to the authorization grant, allowing clients to request tokens for unrelated resources...	6.4 Medium	—	0,26%	1 Agt 2026
CVE-2026-67331 better-auth SCIM versions from 1.5.0 before 1.7.0-beta.4 fail to bind non-organization SCIM providers to their creator by default, allowing authenticated users to manage...	8.3 High	—	0,39%	1 Agt 2026
CVE-2026-67330 @better-auth/scim (a better-auth plugin) versions >= 1.4.0-beta.27 through <= 1.6.21 and >= 1.7.0-beta.0 through <= 1.7.0-beta.9 contain an authorization bypass. SCIM tok...	9.9 Critical	—	0,60%	1 Agt 2026
CVE-2026-67329 @better-auth/stripe versions >= 1.4.11 and < 1.6.21, and >= 1.7.0-beta.0 and < 1.7.0-beta.10, contain an authorization bypass in organization subscription actions. The mi...	7.1 High	—	0,31%	1 Agt 2026
CVE-2026-67328 @better-auth/sso versions before 1.6.21 contain multiple authentication bypass vulnerabilities in SSO provider handling that allow attackers to sign in as arbitrary users...	8.1 High	—	0,49%	1 Agt 2026
CVE-2026-67327 better-auth versions >= 1.1.3 and < 1.6.22 (and pre-release versions >= 1.7.0-beta.0 and < 1.7.0-beta.10) are vulnerable to account takeover via pre-account hijacking on...	8.3 High	—	0,43%	1 Agt 2026
CVE-2026-67326 gitpython project gitpython GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allowing attackers to inject arbitrary section headers into .git...	7.8 High	—	0,25%	1 Agt 2026
CVE-2026-67325 gitpython project gitpython GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option prefix abbreviation feature. Attackers can bypass t...	8.8 High	—	2,2%	1 Agt 2026
CVE-2026-67324 gitpython project gitpython GitPython 3.1.50 fails to recognize joined short-option forms such as -u<value> (the short form of --upload-pack=<value>) when enforcing its default unsafe-option gate. W...	9.8 Critical	—	0,45%	1 Agt 2026
CVE-2026-67323 gitpython project gitpython GitPython before 3.1.51 fails to guard against dangerous Git options passed as keyword arguments in Repo.archive() and git.ls_remote(), allowing command injection via opt...	8.4 High	—	1,3%	1 Agt 2026
CVE-2026-67322 gitpython project gitpython GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clone_from(). The caller-supplied remote URL is passed through Git.polish_url(), which...	7.5 High	—	0,33%	1 Agt 2026
CVE-2026-67321 axios axios versions 0.31.1 before 0.33.0 and 1.15.1 before 1.18.0 contain an incomplete depth-limit bypass in toFormData.js when serializing objects with top-level keys ending...	7.5 High	—	0,53%	1 Agt 2026
CVE-2026-67320 axios axios in a Node.js deployment using the HTTP adapter can route requests through an attacker-controlled proxy. axios hardens merged request configuration by creating a nul...	7.5 High	—	0,52%	1 Agt 2026
CVE-2026-67319 axios axios before 0.33.0 (and 1.x before 1.18.0) can consume inherited properties from nested request option objects when the JavaScript process's Object.prototype has already...	3.7 Low	—	0,32%	1 Agt 2026
CVE-2026-67318 axios axios versions >=1.13.0 (Node.js HTTP adapter) fail to enforce the configured maxBodyLength limit on streamed request bodies when requests are sent with httpVersion: 2. B...	5.3 Medium	—	0,62%	1 Agt 2026
CVE-2026-67317 axios axios versions 1.7.0 before 1.18.0 fail to enforce maxBodyLength for WHATWG ReadableStream request bodies in the fetch adapter when Content-Length cannot be determined. A...	7.5 High	—	0,60%	1 Agt 2026
CVE-2026-67316 axios axios is vulnerable to read-side prototype-pollution gadgets that can alter request construction when Object.prototype has already been polluted by a separate vulnerabili...	7.4 High	—	0,42%	1 Agt 2026
CVE-2026-67315 axios axios versions 0.31.0 before 0.33.0 and 1.15.0 before 1.18.0 fail to recognize 0.0.0.0 as a loopback address in shouldBypassProxy.js, allowing requests to 0.0.0.0 to bypa...	7.5 High	—	0,46%	1 Agt 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.