Katalog CVE (hal. 821)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.229 (Critical 36.653 · High 106.363 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 2 Nov 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 41.001–41.050 dari 266.229 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-11904 ibm verify identity access, ibm verify identity access container IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM S...	5.3 Medium	—	0,40%	30 Jul 2026
CVE-2026-10700 langflow IBM Langflow OSS 1.0.0 through 1.8.4 contains multiple broken access control vulnerabilities in its file handling API that allow unauthorized access to user files.The /ap...	6.5 Medium	—	0,54%	30 Jul 2026
CVE-2026-10695 ibm db2 IBM Db2 12.1.0 through 12.1.4 federated server is vulnerable to a denial of service when running non fenced federated queries.	5.5 Medium	—	0,14%	30 Jul 2026
CVE-2026-10545 ibm planning analytics local IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted...	7.5 High	—	0,38%	30 Jul 2026
CVE-2026-10535 ibm db2 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc.	7.8 High	—	0,16%	30 Jul 2026
CVE-2025-36374 IBM DataPower Gateway is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A privileged user could exploit this vulnerability to expos...	5.5 Medium	—	0,42%	30 Jul 2026
CVE-2025-0152 ibm engineering requirements management doors web access IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 is vulnerable to cross-site scripting. This vuln...	6.1 Medium	—	0,28%	30 Jul 2026
CVE-2024-40683 ibm operations analytics - log analysis IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2, and 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4 d...	6.3 Medium	—	0,26%	30 Jul 2026
CVE-2024-25039 ibm engineering requirements management doors web access IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 do not limit the length of a connection which co...	7.5 High	—	0,46%	30 Jul 2026
CVE-2026-9322 ibm websphere application server IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to a denial of service via a crafted...	7.5 High	—	0,56%	30 Jul 2026
CVE-2026-66414 Leantime 3.6.2 contains an open redirect vulnerability in the Login controller that allows unauthenticated attackers to redirect authenticated users to arbitrary external...	6.1 Medium	—	0,35%	30 Jul 2026
CVE-2026-62663 Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.4, all four media filters (image, audio, video, document) in banks accep...	7.5 High	—	0,40%	30 Jul 2026
CVE-2026-54722 DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.4, is_url_safe in src/helpers.ts strips the @ userinfo d...	8.7 High	—	0,57%	30 Jul 2026
CVE-2026-54522 msgpack messagepack MessagePack for Ruby is an implementation of the MessagePack binary serialization format. Prior to 1.8.2, MessagePack::Buffer#clear in ext/msgpack/buffer.c leaves rmem_la...	5.4 Medium	—	0,23%	30 Jul 2026
CVE-2026-13379 openvpn The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted searc...	9.1 Critical	—	0,34%	30 Jul 2026
CVE-2026-13117 openvpn An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotio...	8.1 High	—	0,40%	30 Jul 2026
CVE-2026-12996 openvpn, debian linux A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to potentially cause a denial of service or leak memory vi...	8.1 High	—	0,46%	30 Jul 2026
CVE-2026-12945 langflow IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs through improper access control on log retrieval and una...	7.1 High	—	0,36%	30 Jul 2026
CVE-2026-12940 langflow IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP (Model Context Protocol) stdi...	9.8 Critical	—	0,94%	30 Jul 2026
CVE-2026-12932 openvpn A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to cause a denial of service...	8.1 High	—	0,42%	30 Jul 2026
CVE-2026-11885 ibm power system s1122 (9824-22a) firmware, ibm power system s1124 (9824-42a) firmware +28 lainnya IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerV...	8.4 High	—	0,15%	30 Jul 2026
CVE-2026-11771 openvpn OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by-one buffer write in the NTLM proxy authentication to potentially cause a...	7.5 High	—	0,38%	30 Jul 2026
CVE-2026-67596 CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unauthenticated attackers to recover all stored secrets in plain...	6.2 Medium	—	0,12%	30 Jul 2026
CVE-2026-58222 A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller (AD DC). When processing LDAP Comp...	8.8 High	—	0,80%	30 Jul 2026
CVE-2026-58216 An out-of-bounds read flaw was found in Samba's Kerberos Key Distribution Center's (KDC) password change (kpasswd) service. When processing malformed ASN.1-encoded Kerber...	5.3 Medium	—	0,46%	30 Jul 2026
CVE-2026-57862 Kanboard 1.2.52 and prior contains a server-side request forgery vulnerability that allows authenticated users to bypass SSRF protections by supplying hexadecimal IP addr...	8.5 High	—	0,41%	30 Jul 2026
CVE-2026-52680 apache kyuubi Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart filename when creating a temporary uploaded resource. A remote attacker who can acce...	9.8 Critical	—	1,1%	30 Jul 2026
CVE-2026-4978 Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vision Traffic Analysis System allows SQL Injection. This issu...	9.8 Critical	—	0,47%	30 Jul 2026
CVE-2026-48910 apache jspwiki A carefully crafted editing request could trigger an XSS vulnerability on Apache JSPWiki when parsing errors on the markdown renderer, which could allow the attacker to...	6.5 Medium	—	0,56%	30 Jul 2026
CVE-2026-44617 apache zeppelin LDAP filter injection vulnerability in Apache Zeppelin. LdapRealm used RFC 4514 distinguished-name escaping when constructing LDAP search filters instead of RFC 4515 filt...	6.5 Medium	—	0,84%	30 Jul 2026
CVE-2026-44616 apache zeppelin LDAP injection vulnerability in Apache Zeppelin. ActiveDirectoryGroupRealm constructed LDAP search filters without escaping user-controlled input, allowing an authenticat...	6.5 Medium	—	0,76%	30 Jul 2026
CVE-2026-44613 apache zeppelin Cross-Site Request Forgery (CSRF) vulnerability in Apache Zeppelin. The default CORS configuration allowed cross-origin state-changing requests and accepted text/plain re...	6.1 Medium	—	0,39%	30 Jul 2026
CVE-2026-28814 apache jspwiki Arbitrary Wiki Markup rendering due to lack of authentication in Apache JSPWiki up to 2.12.3 allows attacker to obtain sensitive data stored in JSPWiki variables. Users a...	7.5 High	—	0,66%	30 Jul 2026
CVE-2026-28813 apache jspwiki Apache JSPWiki, up to 2.12.3, is vulnerable to JSON Hijacking, which leads to csrf vulnerabilities. Users are recommended to upgrade to version 2.12.4, which fixes this i...	8.8 High	—	0,27%	30 Jul 2026
CVE-2026-28812 apache jspwiki UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges. Users are recommended to upgrade to versi...	9.8 Critical	—	0,69%	30 Jul 2026
CVE-2026-28811 apache jspwiki Debug Messages Revealing Unnecessary Information in Apache JSPWiki up to 2.12.3. Users are recommended to upgrade to version 2.12.4, which fixes this issue.	7.5 High	—	0,79%	30 Jul 2026
CVE-2026-28323 solarwinds web help desk SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled.	9.8 Critical	—	1,0%	30 Jul 2026
CVE-2026-23985 apache superset A Regular Expression Denial of Service (ReDoS) vulnerability exists in Apache Superset versions 1.5.0 through 5.0.0. The vulnerability is located in the sql_parse.py comp...	6.5 Medium	—	0,65%	30 Jul 2026
CVE-2026-23981 apache superset An Improper Authorization vulnerability exists in Apache Superset allowing an authenticated user with permissions to update charts to modify dashboards they do not own. W...	4.3 Medium	—	0,56%	30 Jul 2026
CVE-2026-15658 A vulnerability in the foreUP customer REST API allows any authenticated, low-privilege customer to access an endpoint that returns the records of other users without ch...	8.1 High	—	0,35%	30 Jul 2026
CVE-2026-15657 A vulnerability in the foreUP customer REST API allows any authenticated user to read cleartext payment-processor merchant credentials in the response body.	6.5 Medium	—	0,34%	30 Jul 2026
CVE-2026-10842 ibm websphere application server IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 Traditional and Liberty could allow a remote attack...	7.5 High	—	0,53%	30 Jul 2026
CVE-2026-6540 tigera calico Calico's Application Layer Policy (disabled by default), which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests u...	7.5 High	—	0,54%	30 Jul 2026
CVE-2026-67349 OpenCost before 1.121.0 fails to authenticate the GET /helmValues endpoint, exposing base64-decoded HELM_VALUES environment variable containing cloud provider credentials...	7.5 High	—	0,50%	30 Jul 2026
CVE-2026-67348 Julep contains an insecure direct object reference vulnerability in the get_execution_details endpoint that allows authenticated tenants to read another tenant's executio...	8.1 High	—	0,32%	30 Jul 2026
CVE-2026-67347 Vendure through 3.7.1, fixed in commit f67ef5f, contains a cross-channel authorization bypass vulnerability in stock-location.service.ts and asset.service.ts update metho...	6.8 Medium	—	0,51%	30 Jul 2026
CVE-2026-67346 Swarms through 6.8.1, fixed in commit 8b0fc9e, contains a server-side request forgery vulnerability in the _is_safe_url function that fails to validate hostnames through...	8.6 High	—	0,51%	30 Jul 2026
CVE-2026-67345 MaxKey through 4.1.12, fixed in commit ddbb72f, contains an insufficient redirect URI validation vulnerability in DefaultRedirectResolver.hostMatches() that allows remote...	8.1 High	—	0,57%	30 Jul 2026
CVE-2026-65635 Improper Isolation or Compartmentalization vulnerability in malach-it boruta (Elixir.Boruta.Openid module) allows attackers to register OpenID Connect clients with admini...	8.3 High	—	0,38%	30 Jul 2026
CVE-2026-54885 Server-Side Request Forgery vulnerability in malach-it Boruta allows an unauthenticated remote attacker to cause the OAuth/OpenID authorization server to issue outbound H...	6.9 Medium	—	0,47%	30 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.