Katalog CVE (hal. 836)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.261 (Critical 36.656 · High 106.368 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 2 Nov 2026, 06:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 41.751–41.800 dari 266.261 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-66489 balbooa gridbox Joomla Extension - balbooa.com - Various unauthenticated file system disclosure in Gridbox < 2.20.2	5.3 Medium	—	0,35%	29 Jul 2026
CVE-2026-66488 balbooa gridbox Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2	5.3 Medium	—	0,35%	29 Jul 2026
CVE-2026-66400 Grav Login Plugin versions before 3.8.13 contain an insufficient session expiration vulnerability in TokenStorage.php where the findTriplet() method fails to properly val...	4.8 Medium	—	0,24%	29 Jul 2026
CVE-2026-65890 balbooa gridbox Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multiple SQLi vectors allow unauthenticated actors to inject SQL in queries.	9.8 Critical	—	0,50%	29 Jul 2026
CVE-2026-65889 balbooa gridbox Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion < 2.20.2 - The generateNewApp method allows actors to recursively delete directories.	7.5 High	—	0,44%	29 Jul 2026
CVE-2026-55995 A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697...	8.7 High	—	0,25%	29 Jul 2026
CVE-2026-18174 fastify/forwarded @fastify/forwarded resolves client addresses from the X-Forwarded-For header. In versions before 3.0.2, when the header contains two or more comma separated entries, the...	5.3 Medium	—	0,32%	29 Jul 2026
CVE-2026-16751 Authorization Bypass in the emergency recovery approval component in Ente Technologies Ente Museum Server allows an authenticated attacker configured as a victim's emerge...	6.5 Medium	—	0,42%	29 Jul 2026
CVE-2026-65946 rolandd ro csvi Joomla Extension - rolandd.com - XSS vectors in AJAX endpoint handlers RO CSVI < 9.11.0	6.1 Medium	—	0,25%	29 Jul 2026
CVE-2026-65944 rolandd ro csvi Joomla Extension - rolandd.com - CSRF vectors in AJAX endpoint handlers RO CSVI < 9.11.0	8.8 High	—	0,20%	29 Jul 2026
CVE-2026-65943 rolandd ro csvi Joomla Extension - rolandd.com - Unauthenticated directory creation RO CSVI < 9.11.0	7.5 High	—	0,39%	29 Jul 2026
CVE-2026-65891 widgetfactorylimited jce Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor (JCE) < 2.20.2 - Improper...	6.5 Medium	—	0,34%	29 Jul 2026
CVE-2026-65885 balbooa gridbox Joomla Extension - balbooa.com - Authenticated arbitrary file upload in Gridbox < 2.20.2 - File upload methods allows authenticated attackers to upload arbitrary files. T...	8.8 High	—	0,52%	29 Jul 2026
CVE-2026-65884 balbooa gridbox Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows users provided usergroup IDs, allowing unauthenticated actors t...	9.8 Critical	—	0,52%	29 Jul 2026
CVE-2026-50641 Streamsoft Business Intelligence (BI) stores users' passwords in plaintext form in the database This issue was fixed in version 6.8.0.0, users were also requested to cha...	7.1 High	—	0,24%	29 Jul 2026
CVE-2026-44944 An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket. This issue affects open-iscsi: from ? t...	8.5 High	—	0,09%	29 Jul 2026
CVE-2026-44943 An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers to create root-owned files out...	6.9 Medium	—	0,39%	29 Jul 2026
CVE-2026-33385 A Blind SQL injection vulnerability has been identified in Quick.CMS. Improper neutralization of input provided by a high-privileged user into multiple fields in administ...	5.1 Medium	—	0,41%	29 Jul 2026
CVE-2026-14354 CWE-522 Insufficiently Protected Credentials vulnerability exists that could cause authentication bypass and unauthorized credential modification, potentially leading to...	8.7 High	—	0,16%	29 Jul 2026
CVE-2026-12927 CWE-787 Out-of-bounds write vulnerability exists that could cause loss of data or potentially risk arbitrary code execution when a malicious CGF file is imported to IGSS...	8.4 High	—	0,18%	29 Jul 2026
CVE-2026-0667 CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability that could cause arbitrary code execution, denial of service and loss of confidentiality & int...	9.3 Critical	—	0,53%	29 Jul 2026
CVE-2026-14270 The Extra Checkout Options (addon for Extra Product Options & Add-Ons for WooCommerce) plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to,...	8.8 High	—	0,79%	29 Jul 2026
CVE-2026-8791 The Booking System Trafft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `bookingWebsiteUrl` setting in all versions up to, and including, 1.0....	6.4 Medium	—	0,42%	29 Jul 2026
CVE-2026-7436 The WPC Badge Management for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the `wpcbm_best_seller` shortcode i...	6.4 Medium	—	0,33%	29 Jul 2026
CVE-2026-65883 aimy-extensions aimy captcha-less form guard Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 - 20.0 - A forged clfgd field allows PHP objection injection an...	9.8 Critical	—	0,81%	29 Jul 2026
CVE-2026-6089 The WP CTA plugin for WordPress is vulnerable to Server-Side Request Forgery via the 'sticky_s_media' parameter in imported JSON files in all versions up to, and includin...	4.9 Medium	—	0,48%	29 Jul 2026
CVE-2026-5060 The MasterStudy LMS WordPress Plugin – for Online Courses and Education plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and...	6.5 Medium	—	0,39%	29 Jul 2026
CVE-2026-56390 gnu bison GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without restrict...	6.3 Medium	—	0,18%	29 Jul 2026
CVE-2026-56389 gnu bison GNU Bison allows for an execution of an arbitrary program during HTML report generation due to improper handling of grammar-defined configuration variables. A grammar fil...	8.6 High	—	0,22%	29 Jul 2026
CVE-2026-50642 diff‑so‑fancy does not properly sanitize non‑SGR terminal control sequences before outputting diff data. The application only strips ANSI SGR sequences while allowing oth...	4.8 Medium	—	0,23%	29 Jul 2026
CVE-2026-4604 The Klubraum Membership Request plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `kr_mr_store_settings()`...	5.3 Medium	—	0,40%	29 Jul 2026
CVE-2026-18220 An out-of-bounds write vulnerability was found in the BFD library's DLX ELF backend (bfd/elf32-dlx.c) in GNU binutils. The dlx_rtype_to_howto() function maps ELF relocati...	7.8 High	—	0,19%	29 Jul 2026
CVE-2026-16655 The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Name Fiel...	7.2 High	—	0,53%	29 Jul 2026
CVE-2026-16597 The GTM4WP – A Google Tag Manager (GTM) plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via WooCommerce Billing Fields in all versi...	7.2 High	—	0,42%	29 Jul 2026
CVE-2026-14900 The Cost Calculator Builder PRO plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.0.3 via the js_to_php function. This i...	9.8 Critical	—	1,3%	29 Jul 2026
CVE-2026-14488 The Meta Box AIO plugin for WordPress is vulnerable to Missing Authorization via the template_redirect dispatcher in the MB Frontend Submission extension in versions up t...	9.1 Critical	—	0,52%	29 Jul 2026
CVE-2026-12895 SQL injection in Frappe's ERPNext, versions ERPNext 15.107.0 and Frappe 15.107.2. The application constructs SQL queries through direct string interpolation using `str.fo...	7.1 High	—	0,37%	29 Jul 2026
CVE-2026-65100 apache traffic server Apache Traffic Server updates the HTTP/2 HPACK dynamic table before confirming the header block encoded successfully, so an encode failure leaves the encoder out of sync...	4.8 Medium	—	0,58%	29 Jul 2026
CVE-2026-59243 apache-airflow-providers-fab The FAB auth manager's Azure AD OAuth login defaulted `verify_signature=False` when decoding the ID token, so an attacker able to present a forged or unsigned (`alg:none`...	9.8 Critical	—	0,64%	29 Jul 2026
CVE-2026-58189 apache traffic server Apache Traffic Server allows redirect-limit bypass when plugins reset the retry counter, enabling SSRF amplification. This issue affects Apache Traffic Server: from 8....	7.5 High	—	0,63%	29 Jul 2026
CVE-2026-58188 apache traffic server Several Apache Traffic Server experimental plugins have memory-safety and limit-bypass errors. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, fro...	8.2 High	—	0,77%	29 Jul 2026
CVE-2026-58187 apache traffic server The Apache Traffic Server multiplexer plugin overruns its chunk-decode buffer on upstream input, enabling denial of service. This issue affects Apache Traffic Server:...	7.5 High	—	0,58%	29 Jul 2026
CVE-2026-58186 apache traffic server The Apache Traffic Server webp_transform plugin can decode unsafely and serve mislabeled, cacheable responses. This issue affects Apache Traffic Server: from 8.0.0 thr...	7.5 High	—	0,70%	29 Jul 2026
CVE-2026-58185 apache traffic server The Apache Traffic Server intercept plugin has a use-after-free. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 1...	9.8 Critical	—	0,58%	29 Jul 2026
CVE-2026-58184 apache traffic server The Apache Traffic Server header_rewrite plugin can crash or corrupt memory during cookie operations and CIDR condition matching. This issue affects Apache Traffic Ser...	7.5 High	—	0,59%	29 Jul 2026
CVE-2026-58183 apache traffic server The Apache Traffic Server prefetch plugin can crash when processing attacker-influenced input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, fro...	7.5 High	—	0,66%	29 Jul 2026
CVE-2026-58182 apache traffic server The Apache Traffic Server ts_lua plugin mishandles initialization, transform context, and per-instance state. This issue affects Apache Traffic Server: from 8.0.0 thro...	8.6 High	—	0,73%	29 Jul 2026
CVE-2026-58181 apache traffic server The Apache Traffic Server uri_signing and url_sig plugins can exhaust the stack or crash on attacker input. This issue affects Apache Traffic Server: from 8.0.0 throug...	7.5 High	—	0,66%	29 Jul 2026
CVE-2026-58180 apache traffic server The Apache Traffic Server txn_box plugin overflows the stack from attacker-controlled input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from...	7.5 High	—	0,66%	29 Jul 2026
CVE-2026-58179 apache traffic server The Apache Traffic Server regex_remap plugin overflows the stack and integers from substitution input. This issue affects Apache Traffic Server: from 8.0.0 through 8.1...	9.8 Critical	—	0,60%	29 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.