Katalog CVE (hal. 907)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 266.988 (Critical 36.707 · High 106.683 · KEV 1.766 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 00:25 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 45.301–45.350 dari 266.988 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-60178 oracle mysql server, oracle mysql cluster Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL Server: 8.4.0-...	6.6 Medium	—	0,38%	21 Jul 2026
CVE-2026-60177 oracle mysql server, oracle mysql cluster Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Clone Plugin). Supported versions that are affected are MySQL Server: 8.4.0-...	4.4 Medium	—	0,36%	21 Jul 2026
CVE-2026-60176 oracle payments Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily e...	7.1 High	—	0,42%	21 Jul 2026
CVE-2026-60175 oracle database server Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable v...	8.8 High	—	0,43%	21 Jul 2026
CVE-2026-60174 oracle mysql server, oracle mysql cluster Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7...	6.5 Medium	—	0,42%	21 Jul 2026
CVE-2026-60173 oracle bi publisher Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform Security). Supported versions that are affected are 8.2.0.0.0 and 12.2.1.4....	9.8 Critical	—	0,51%	21 Jul 2026
CVE-2026-60172 oracle autonomous health framework Vulnerability in Oracle Autonomous Health Framework (component: Developer triaging platform). Supported versions that are affected are 26.0.0, 26.1.0 and 26.2.0. Diffic...	6.3 Medium	—	0,14%	21 Jul 2026
CVE-2026-60171 oracle mysql cluster Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.47. Easily exploitable vuln...	4.9 Medium	—	0,45%	21 Jul 2026
CVE-2026-60170 oracle hospitality simphony Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5,...	7.5 High	—	0,41%	21 Jul 2026
CVE-2026-60169 oracle hospitality simphony Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5,...	8.1 High	—	0,39%	21 Jul 2026
CVE-2026-60168 oracle hospitality simphony Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5,...	9.1 Critical	—	0,45%	21 Jul 2026
CVE-2026-60167 oracle hospitality simphony Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS). Supported versions that are affected are 19.8-19.8.5,...	7.5 High	—	0,44%	21 Jul 2026
CVE-2026-60166 oracle jdk, oracle jre Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthen...	3.1 Low	—	0,27%	21 Jul 2026
CVE-2026-60165 oracle cost management Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Enterprise Command Center). The supported version that is affected is V16. Ea...	6.5 Medium	—	0,41%	21 Jul 2026
CVE-2026-60164 oracle jdk, oracle jre Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthen...	3.1 Low	—	0,27%	21 Jul 2026
CVE-2026-60163 oracle mysql server, oracle mysql cluster Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are MySQL Se...	8.4 High	—	0,19%	21 Jul 2026
CVE-2026-60162 oracle vm virtualbox Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Difficult to exploit vul...	6.1 Medium	—	0,14%	21 Jul 2026
CVE-2026-60161 oracle vm virtualbox Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulne...	6.1 Medium	—	0,13%	21 Jul 2026
CVE-2026-60160 oracle vm virtualbox Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulne...	3.2 Low	—	0,17%	21 Jul 2026
CVE-2026-60159 oracle vm virtualbox Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Difficult to exploit vul...	7.5 High	—	0,15%	21 Jul 2026
CVE-2026-60158 oracle vm virtualbox Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Difficult to exploit vul...	6.4 Medium	—	0,12%	21 Jul 2026
CVE-2026-60157 oracle goldengate Vulnerability in Oracle GoldenGate (component: Service Manager). Supported versions that are affected are 19.1.0.0.0-19.29.0.0, 21.3-21.21 and 23.4-23.26.1.0.0. Easily...	8.8 High	—	0,43%	21 Jul 2026
CVE-2026-60156 oracle apex Vulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1, 24.2 and 26.1. Easily exploitable vulnerability allows unauthenticated...	5.3 Medium	—	0,34%	21 Jul 2026
CVE-2026-60155 oracle vm virtualbox Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Difficult to exploit vul...	7.5 High	—	0,15%	21 Jul 2026
CVE-2026-60154 oracle application object library Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.15. Eas...	5.4 Medium	—	0,23%	21 Jul 2026
CVE-2026-60153 oracle weblogic server Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14...	7.2 High	—	0,49%	21 Jul 2026
CVE-2026-60152 oracle peoplesoft enterprise peopletools Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Supported versions that are affected are 8.61 and 8.62...	5.4 Medium	—	0,25%	21 Jul 2026
CVE-2026-60150 oracle vm virtualbox Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulne...	7.8 High	—	0,16%	21 Jul 2026
CVE-2026-60149 oracle workflow Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.1...	5.2 Medium	—	0,13%	21 Jul 2026
CVE-2026-60147 oracle jre, oracle jdk +2 lainnya Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that a...	6.5 Medium	—	0,29%	21 Jul 2026
CVE-2026-60146 oracle access manager Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). Supported versions that are affected are 12.2.1.4.0 an...	6.1 Medium	—	0,25%	21 Jul 2026
CVE-2026-60145 oracle mysql server, oracle mysql cluster Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4...	4.9 Medium	—	0,42%	21 Jul 2026
CVE-2026-60144 oracle workflow Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.1...	3.6 Low	—	0,11%	21 Jul 2026
CVE-2026-60143 oracle workflow Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.1...	7.3 High	—	0,31%	21 Jul 2026
CVE-2026-56816 netty Netty is a network application framework for development of protocol servers and clients. Prior to 4.2.16.Final, Netty's `Http3FrameCodec` buffers incoming data for HTTP/...	7.5 High	—	0,64%	21 Jul 2026
CVE-2026-56746 netty Netty is a network application framework for development of protocol servers and clients. Versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final,...	6.5 Medium	—	0,41%	21 Jul 2026
CVE-2026-56745 netty Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Fin...	7.5 High	—	0,63%	21 Jul 2026
CVE-2026-55851 netty Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final up to (but not including) 4.2.16.Final, and 4.1.0.Final...	7.5 High	—	0,63%	21 Jul 2026
CVE-2026-47731 The AMMOS Instrument Toolkit (Formerly the Bespoke Links to Instruments for Surface and Space (BLISS)) is a Python-based software suite developed to handle Ground Data Sy...	9.1 Critical	—	0,89%	21 Jul 2026
CVE-2026-47709 struktur libheif libheif is a HEIF and AVIF file format decoder and encoder. Versions prior to 1.22.0 crashes in the public C API `heif_image_handle_get_image_tiling()` when a malformed u...	5.5 Medium	—	0,18%	21 Jul 2026
CVE-2026-47254 struktur libheif libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, `Track::init_sample_timing_table()` in `libheif/sequences/track.cc` stores an out-of-...	6.1 Medium	—	0,16%	21 Jul 2026
CVE-2026-47251 struktur libheif libheif is a HEIF and AVIF file format decoder and encoder. The fix for CVE-2026-3949 (commit `b97c8b5`, PR #1712) introduced an integer overflow in the very security che...	6.1 Medium	—	0,16%	21 Jul 2026
CVE-2026-47247 struktur libheif libheif is a HEIF and AVIF file format decoder and encoder. Prior to version 1.22.0, two bugs in libheif chain to leak process heap memory as visible pixel values in deco...	7.5 High	—	0,48%	21 Jul 2026
CVE-2026-47178 struktur libheif libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.19.0 through 1.21.2, a crafted HEIF file (uncompressed `unci` codec, tiled, component-interleave...	7.8 High	—	0,18%	21 Jul 2026
CVE-2026-47064 oracle mysql server, oracle mysql cluster Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4...	6.5 Medium	—	0,27%	21 Jul 2026
CVE-2026-47063 oracle jre, oracle jdk +2 lainnya Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that...	7.5 High	—	0,26%	21 Jul 2026
CVE-2026-47062 oracle vm virtualbox Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.12. Easily exploitable vulne...	5.5 Medium	—	0,14%	21 Jul 2026
CVE-2026-47061 oracle database server Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Difficult to exploit...	5.6 Medium	—	0,24%	21 Jul 2026
CVE-2026-47060 oracle database server Vulnerability in the JDBC component of Oracle Database Server. Supported versions that are affected are 19.3-19.31, 21.3-21.22 and 23.4.0-23.26.2. Easily exploitable vu...	6.5 Medium	—	0,32%	21 Jul 2026
CVE-2026-47059 oracle jdk, oracle graalvm +2 lainnya Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are aff...	3.7 Low	—	0,31%	21 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.