Katalog CVE (hal. 818)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.209 (Critical 36.641 · High 106.361 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 1 Nov 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 40.851–40.900 dari 266.209 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-14483 The Realtyna Organic IDX plugin + WPL Real Estate plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 5.2.0 via the upload f...	9.8 Critical	—	4,0%	31 Jul 2026
CVE-2026-14333 The Demi WordPress plugin before 0.0.7 stores its full-site backup archives in a publicly accessible location under a predictable filename and without access protection,...	7.5 High	—	0,41%	31 Jul 2026
CVE-2026-14319 The GiveWP WordPress plugin before 4.16.3 does not properly restrict access to a REST API endpoint that returns recurring-donation records, allowing unauthenticated user...	7.5 High	—	0,43%	31 Jul 2026
CVE-2026-14317 The GiveWP WordPress plugin before 4.16.3 does not restrict the set of available payment gateways to those enabled by the administrator, deriving it in part from request...	5.3 Medium	—	0,30%	31 Jul 2026
CVE-2026-13609 The Frontend Admin by DynamiApps WordPress plugin before 3.29.9 decodes HTML entities in a submitted form field value after sanitizing it, which restores HTML tags that t...	8.8 High	—	0,45%	31 Jul 2026
CVE-2026-13393 The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not sanitize or escape certain megamenu menu-item settings before storing them and outputting them...	3.5 Low	—	0,24%	31 Jul 2026
CVE-2026-13392 The ElementsKit Elementor Addons WordPress plugin before 3.10.01 does not prevent a custom-widget definition saved by a user with administrative capabilities from being...	7.2 High	—	0,67%	31 Jul 2026
CVE-2026-12721 The Kirki WordPress plugin before 6.0.13 does not properly sanitise and escape a value taken from the request before using it in a SQL statement, allowing unauthenticate...	8.6 High	—	0,45%	31 Jul 2026
CVE-2026-12720 The Kirki WordPress plugin before 6.0.13 does not restrict which classes may be instantiated when it deserialises data that unauthenticated users can store, leading to P...	7.5 High	—	0,53%	31 Jul 2026
CVE-2026-12697 The wpForo Forum WordPress plugin before 3.1.2 does not verify that an AI chat conversation belongs to the requesting user before deleting its messages, allowing users wi...	5.4 Medium	—	0,29%	31 Jul 2026
CVE-2026-12695 The miniOrange 2FA WordPress plugin before 6.2.6 does not validate the submitted one-time password against the targeted user's stored secret, instead verifying it agains...	8.1 High	—	0,50%	31 Jul 2026
CVE-2026-12376 The Academy LMS WordPress plugin through 3.8.2 does not restrict access to quiz attempt records to their owner, allowing any authenticated user with subscriber-level acce...	4.3 Medium	—	0,27%	31 Jul 2026
CVE-2026-12251 The Ultimate Member WordPress plugin before 2.12.1 does not filter administrator-level capabilities from the roles it makes selectable on its registration forms, and its...	8.1 High	—	0,38%	31 Jul 2026
CVE-2026-63223 CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, the is_image and mime_in upload validation rules do not independently enforce a safe client filename extens...	9.8 Critical	—	0,80%	31 Jul 2026
CVE-2026-63222 CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, calling UploadedFile::move() without a second argument uses the client-provided filename without sanitizati...	7.5 High	—	0,64%	31 Jul 2026
CVE-2026-63221 CodeIgniter is a PHP full-stack web framework. From 4.3.0 through 4.7.3, Query Builder deleteBatch() substitutes bound values from where() conditions into generated SQL w...	9.4 Critical	—	0,61%	31 Jul 2026
CVE-2026-56673 ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface. Prior to 0.28.0, folder_paths.get_annotated_filepath and exists_annotated_file...	7.5 High	—	0,63%	31 Jul 2026
CVE-2026-56672 ComfyUI is a node-based diffusion model GUI, API, and backend. Prior to 0.28.0, GET /userdata/{file} served user-controlled HTML and SVG files with extension-derived cont...	8.2 High	—	0,40%	31 Jul 2026
CVE-2026-56671 ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, get_model_preview in app/model_manager.py joins an unrestricted f...	7.5 High	—	0,97%	31 Jul 2026
CVE-2026-56670 ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, the /view endpoint served uploaded SVG files inline because image...	8.2 High	—	0,40%	31 Jul 2026
CVE-2026-63220 CodeIgniter is a PHP full-stack web framework. In versions prior to 4.7.4, IncomingRequest::isSecure() trusted the X-Forwarded-Proto and Front-End-Https headers from any...	4.8 Medium	—	0,17%	31 Jul 2026
CVE-2026-62323 Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, ViewerSessionValidation uses only the session-id prefix of a WOPI access token and does no...	6.3 Medium	—	0,31%	31 Jul 2026
CVE-2026-55502 Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, POST /api/v4/admin/policy/oauth/signin requires only Admin.Read even though GetOauthRedire...	7.1 High	—	0,34%	31 Jul 2026
CVE-2026-55499 Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s paren...	4.3 Medium	—	0,33%	31 Jul 2026
CVE-2026-55497 Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, the built-in thumbnail and avatar image decoders limit compressed file size but do not lim...	6.5 Medium	—	0,53%	31 Jul 2026
CVE-2026-55496 Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, GET /api/v4/user/search calls SearchActive without adding a StatusActive predicate and ser...	4.3 Medium	—	0,36%	31 Jul 2026
CVE-2026-55495 Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, the WOPI PUT_RELATIVE handler passes X-WOPI-SuggestedTarget to URI.JoinRaw as a path rathe...	4.3 Medium	—	0,38%	31 Jul 2026
CVE-2026-43833 A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution.	5.3 Medium	—	0,49%	31 Jul 2026
CVE-2026-43832 A stack-based buffer overflow vulnerability in the Cookie parsing methods could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement featu...	7.5 High	—	0,64%	31 Jul 2026
CVE-2026-43831 A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code execution.	7.5 High	—	0,64%	31 Jul 2026
CVE-2026-43830 A command injection vulnerability in the firmware upgrade file verification process could allow an attacker to execute arbitrary commands.	9.8 Critical	—	2,5%	31 Jul 2026
CVE-2026-43829 A stack-based buffer overflow vulnerability in the password functionality could allow an unauthenticated attacker to achieve code execution when the SafeEnhancement featu...	7.5 High	—	0,64%	31 Jul 2026
CVE-2026-18157 A flaw was found in yggdrasil-worker-package-manager. A local attacker with existing access to the system could exploit an argument injection vulnerability in the APT bac...	7.8 High	—	0,36%	31 Jul 2026
CVE-2026-14541 Advisory google mcp toolbox for databases An authentication bypass and audience confusion vulnerability exists in the Google OAuth provider component of Google mcp-toolbox version 1.4.0. When a Google authService...	7.5 High	—	0,25%	31 Jul 2026
CVE-2026-14540 google mcp toolbox for databases A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP source and tool components of Google mcp-toolbox versions 0.3.0 through 1.4.0. While the too...	6.1 Medium	—	0,13%	31 Jul 2026
CVE-2026-14539 google mcp toolbox for databases An allocation of resources without limits vulnerability in the HTTP handler component of Google mcp-toolbox versions up to and including 1.4.0 allows an unauthenticated a...	7.5 High	—	0,24%	31 Jul 2026
CVE-2026-14538 google mcp toolbox for databases An improper authorization and security-boundary bypass vulnerability in the bigquery-execute-sql tool component of Google mcp-toolbox versions 0.16.1 through 1.4.0 allows...	7.7 High	—	0,20%	31 Jul 2026
CVE-2026-14537 google mcp toolbox for databases Incorrect Authorization in the direct HTTP API tool invocation endpoint in Google mcp-toolbox versions v1.3.0 and v1.4.0 allows an unauthenticated attacker to invoke tool...	9.8 Critical	—	0,25%	31 Jul 2026
CVE-2026-58039 A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites) files outside --allow-fs-write paths. This can lead to confidentiality impac...	3.3 Low	—	0,16%	31 Jul 2026
CVE-2026-66720 The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE (EtherType 0x88B8) Layer-2 multicast messages. A speciall...	6.5 Medium	—	0,29%	30 Jul 2026
CVE-2026-66421 tugcantopaloglu openclaw agent dashboard OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to execute arbitrary JavaScript in the administrator'...	9.3 Critical	—	0,63%	30 Jul 2026
CVE-2026-66420 MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administ...	8.8 High	—	0,22%	30 Jul 2026
CVE-2026-66369 The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specif...	6.5 Medium	—	0,29%	30 Jul 2026
CVE-2026-66364 The GOOSE payload parser contains a boundary handling flaw that can be triggered by a single unauthenticated Layer 2 multicast frame on the process bus. When processing...	6.5 Medium	—	0,29%	30 Jul 2026
CVE-2026-66360 The ISO Presentation layer contains a flaw in the handling of specific parameters during normal mode negotiation. A missing length check in the processing of the encode...	7.5 High	—	0,49%	30 Jul 2026
CVE-2026-66349 The MMS server connection handler contains a flaw in its processing of BER-encoded request data. When an MMS confirmed request PDU containing an extended BER tag is rec...	6.5 Medium	—	0,30%	30 Jul 2026
CVE-2026-65423 An integer overflow in the UA_Variant arrayDimensions product computation in open62541 may allow a remote attacker to trigger an out-of-bounds write.	8.8 High	—	0,80%	30 Jul 2026
CVE-2026-65421 The MMS BER decoder contains a flaw in decoding fixed-width BER fields (boolean/integer): an attacker-supplied length value is not validated, causing a read past the en...	6.5 Medium	—	0,29%	30 Jul 2026
CVE-2026-63550 The MMS BER decoder contains a boundary-handling flaw in the processing of certain fields within confirmed-request messages. When a crafted BER-encoded element is recei...	6.5 Medium	—	0,44%	30 Jul 2026
CVE-2026-63362 An unsigned integer underflow in the PubSub signature verification path in open62541 may allow a remote attacker to cause a denial of service via a crafted UDP packet.	5.9 Medium	—	1,8%	30 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.