Katalog CVE (hal. 905)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.775 (Critical 36.699 · High 106.606 · KEV 1.765 · sejak 2020) · Pembaruan terakhir: 3 Nov 2026, 18:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 45.201–45.250 dari 266.775 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-46991 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are...	4.4 Medium	—	0,14%	21 Jul 2026
CVE-2026-46990 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management). Supported versions that are...	7.3 High	—	0,31%	21 Jul 2026
CVE-2026-46989 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). Supported versions that are affected are 13....	9.1 Critical	—	0,32%	21 Jul 2026
CVE-2026-46988 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework). Supported versions that are affected...	7.2 High	—	0,49%	21 Jul 2026
CVE-2026-46987 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt). Supported versions that ar...	7.7 High	—	0,35%	21 Jul 2026
CVE-2026-46986 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 1...	5.3 Medium	—	0,32%	21 Jul 2026
CVE-2026-46985 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 1...	5.3 Medium	—	0,32%	21 Jul 2026
CVE-2026-46984 oracle enterprise manager base platform Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Agent Next Gen). Supported versions that are affected are 1...	5.3 Medium	—	0,32%	21 Jul 2026
CVE-2026-46983 oracle retail integration bus Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: RIB Kernal). The supported version that is affected is 16.0.3. Easi...	9.8 Critical	—	0,51%	21 Jul 2026
CVE-2026-46982 oracle retail integration bus Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications (component: RIB Kernal). The supported version that is affected is 14.1.3.2. Ea...	9.8 Critical	—	0,51%	21 Jul 2026
CVE-2026-46981 oracle utilities network management system Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Mobile). Supported versions that are affected are 2....	7.2 High	—	0,27%	21 Jul 2026
CVE-2026-46980 oracle utilities network management system Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Mobile). Supported versions that are affected are 2....	4.3 Medium	—	0,27%	21 Jul 2026
CVE-2026-46975 oracle database server Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable v...	5.8 Medium	—	0,30%	21 Jul 2026
CVE-2026-46968 oracle jre, oracle jdk +2 lainnya Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1;...	5.9 Medium	—	0,29%	21 Jul 2026
CVE-2026-46954 oracle human resources Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Data Removal Tool). Supported versions that are affected are 12.2.3-12.2.15. E...	7.2 High	—	0,49%	21 Jul 2026
CVE-2026-46948 oracle utilities network management system Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Security). Supported versions that are affected are...	4.6 Medium	—	0,21%	21 Jul 2026
CVE-2026-46943 oracle retail eftlink Vulnerability in the Oracle Retail EFTLink product of Oracle Retail Applications (component: Core/Plugin). Supported versions that are affected are 21.0.0-25.0.0. Diffic...	7.4 High	—	0,34%	21 Jul 2026
CVE-2026-46941 oracle cost management Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Maintenance). Supported versions that are affected are 12.2.3-12.2.15. Di...	7.5 High	—	0,33%	21 Jul 2026
CVE-2026-46936 oracle mysql server, oracle mysql cluster Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9...	4.4 Medium	—	0,33%	21 Jul 2026
CVE-2026-46924 oracle application testing suite Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker...	9.8 Critical	—	0,51%	21 Jul 2026
CVE-2026-46923 oracle public sector financials Vulnerability in the Oracle Public Sector Financials (International) product of Oracle E-Business Suite (component: Authorization). Supported versions that are affected...	8.0 High	—	0,38%	21 Jul 2026
CVE-2026-46917 oracle graalvm, oracle graalvm for jdk +2 lainnya Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are a...	5.3 Medium	—	0,29%	21 Jul 2026
CVE-2026-46876 oracle application testing suite Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker...	9.8 Critical	—	0,51%	21 Jul 2026
CVE-2026-43947 FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Version 1.3.0 has an unauthenticated Remote Code Execution vulnerability when `secureEnabled` is...	8.9 High	—	0,91%	21 Jul 2026
CVE-2026-43946 FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Version 1.3.0 has an authorization bypass in the /api/getTagValue endpoint allows unauthenticate...	7.7 High	—	0,57%	21 Jul 2026
CVE-2026-43945 FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Versions 1.2.11 until 1.3.1 allow an unauthenticated remote attacker to achieve Full Remote Code...	8.9 High	—	0,84%	21 Jul 2026
CVE-2026-35290 oracle application testing suite Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker...	9.8 Critical	—	0,51%	21 Jul 2026
CVE-2026-35287 oracle application testing suite Vulnerability in Oracle Application Testing Suite. The supported version that is affected is 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker...	7.5 High	—	0,41%	21 Jul 2026
CVE-2026-34316 oracle commerce service center Vulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component: Commerce Service Center). The supported version that is affected is 11.4.0. E...	6.1 Medium	—	0,25%	21 Jul 2026
CVE-2026-21954 oracle retail xstore point of service Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications (component: Xstore Mobile). The supported version that is affected is 2...	4.3 Medium	—	0,27%	21 Jul 2026
CVE-2026-21953 oracle retail xstore point of service Vulnerability in the Oracle Retail Xstore Point of Service product of Oracle Retail Applications (component: Xstore Mobile). The supported version that is affected is 2...	3.3 Low	—	0,14%	21 Jul 2026
CVE-2026-16484 A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit_subjecta.php....	7.3 High	—	0,43%	21 Jul 2026
CVE-2026-10680 zephyrproject zephyr The Classic (BR/EDR) L2CAP signaling handlers l2cap_br_conf_req() and l2cap_br_conf_rsp() in subsys/bluetooth/host/classic/l2cap_br.c validated the minimum command size a...	7.6 High	—	0,16%	21 Jul 2026
CVE-2026-10679 zephyrproject zephyr The DesignWare SPI driver (drivers/spi/spi_dw.c) computed the SPI BAUDR clock divider as info->clock_frequency / config->frequency without validating config->frequency....	5.5 Medium	—	0,14%	21 Jul 2026
CVE-2026-10678 zephyrproject zephyr The MCTP-over-I2C+GPIO target binding in Zephyr (subsys/pmci/mctp/mctp_i2c_gpio_target.c) processes pseudo-register writes from an I2C bus master byte-by-byte in mctp_i2c...	8.1 High	—	0,39%	21 Jul 2026
CVE-2026-10677 zephyrproject zephyr The CONFIG_USERSPACE syscall verifier z_vrfy_k_poll() in kernel/poll.c allocates a kernel-side copy of the user-supplied k_poll_event[] via z_thread_malloc() and then val...	6.5 Medium	—	0,14%	21 Jul 2026
CVE-2026-10675 zephyrproject zephyr In Zephyr's Bluetooth Mesh PB-ADV provisioning bearer (subsys/bluetooth/mesh/pb_adv.c), prov_msg_recv() rescheduled the provisioning protocol watchdog timer unconditional...	6.5 Medium	—	0,39%	21 Jul 2026
CVE-2026-10674 zephyrproject zephyr The NXP LPUART serial driver (drivers/serial/uart_mcux_lpuart.c), when CONFIG_UART_USE_RUNTIME_CONFIGURE is enabled, called LPUART_Deinit() at the start of mcux_lpuart_co...	5.5 Medium	—	0,14%	21 Jul 2026
CVE-2026-8983 autel maxicharger single charger firmware Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that bypasses authorization checks for multiple management endpoints. An at...	9.8 Critical	—	0,69%	21 Jul 2026
CVE-2026-8982 autel maxicharger single charger firmware Two undocumented privileged accounts exist in Autel Maxi Charger Single firmware through V1.03.51. The accounts use vendor-defined password derivation mechanisms based on...	8.1 High	—	0,48%	21 Jul 2026
CVE-2026-65058 Trezor Safe 3, Safe 5, and Safe 7 firmware contains a confirmation-binding flaw in the Ethereum sign_tx / sign_tx_eip1559 flow. For contract interactions, the device conf...	5.3 Medium	—	0,40%	21 Jul 2026
CVE-2026-65057 Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the backend issue arbitrary HTTP requests by supp...	9.3 Critical	—	0,31%	21 Jul 2026
CVE-2026-65056 mcp-webresearch 0.1.7 contains a server-side request forgery vulnerability that allows attackers to access internal network services by supplying loopback, link-local, or...	8.2 High	—	0,29%	21 Jul 2026
CVE-2026-65055 Taiga 6.10.1 contains a missing authorization vulnerability that allows unauthenticated attackers to disclose the full member roster and internal workflow configuration o...	5.3 Medium	—	0,33%	21 Jul 2026
CVE-2026-65054 MediaCMS 8.2.0 contains an information disclosure vulnerability that allows authenticated users to expose private media metadata belonging to other users by adding arbitr...	3.1 Low	—	0,32%	21 Jul 2026
CVE-2026-64881 tenable security center The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow into system command execution. This input validation failure enables comm...	8.8 High	—	2,2%	21 Jul 2026
CVE-2026-64822 djangoSIGE through 1.10 (commit a6fe7e8) contains a user enumeration vulnerability in ForgotPasswordView within djangosige/apps/login/views.py that allows unauthenticated...	5.3 Medium	—	0,42%	21 Jul 2026
CVE-2026-64821 djangoSIGE through 1.10 (commit a6fe7e8) contains a cross-site request forgery vulnerability that allows unauthenticated attackers to cancel sales or purchase orders on b...	4.3 Medium	—	0,22%	21 Jul 2026
CVE-2026-63764 internlm lmdeploy LMDeploy through 0.14.0, fixed in commit 03c3130, contains a server-side request forgery (SSRF) vulnerability in the _load_http_url function within the connection.py medi...	8.6 High	—	0,51%	21 Jul 2026
CVE-2026-63358 filegator FileGator accepts arbitrary Unix permission values via the '/chmoditems' API endpoint and passes the value directly to PHP's native 'chmod()' function through 'octdec()'...	7.3 High	—	0,51%	21 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.