Katalog CVE (hal. 941)

csirt@kutim:~/threat-intel/cve

$ cat README.txt

Isi katalog: semua CVE yang terbit di NVD sejak 2020 dan sudah memiliki skor CVSS, ditambah semua CVE dari tahun berapa pun yang masuk katalog KEV (Known Exploited Vulnerabilities) CISA. Saring dengan Severity "Critical" atau "High" untuk yang paling mendesak. Untuk analisis dan langkah penanganan yang ditulis KUTIM-CSIRT, lihat Advisory & Kerentanan.

> CVE di katalog: 267.555 (Critical 36.782 · High 106.936 · KEV 1.767 · sejak 2020) · Pembaruan terakhir: 4 Nov 2026, 12:27 WITA
> Sumber data: NVD (NIST) · KEV (CISA) · EPSS (FIRST), diperbarui tiap 6 jam

> Menampilkan 47.001–47.050 dari 267.555 CVE.

CVE	Severity	KEV	EPSS	Terbit
CVE-2026-53377 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/msm: always recover the gpu Previously, in case there was no more work to do, recover worker wou...	5.5 Medium	—	0,13%	19 Jul 2026
CVE-2026-53376 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Add upper bound check for num_of_nodes drm/amdkfd: Add upper bound check for num_of_node...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-53375 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that only one of lo/hi is valid, the pat...	8.8 High	—	0,18%	19 Jul 2026
CVE-2026-53374 linux kernel In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: zero-initialize GART table on allocation GART TLB is flushed after unmapping but not aft...	8.8 High	—	0,13%	19 Jul 2026
CVE-2026-53373 linux kernel In the Linux kernel, the following vulnerability has been resolved: mm/vma: do not try to unmap a VMA if mmap_prepare() invoked from mmap() The mmap_prepare hook functi...	7.8 High	—	0,17%	19 Jul 2026
CVE-2026-16229 A flaw has been found in itsourcecode Courier Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. Executing a...	4.3 Medium	—	0,47%	19 Jul 2026
CVE-2026-16228 A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /edit_schoolyr.php. Performing a manipul...	7.3 High	—	0,43%	19 Jul 2026
CVE-2026-16227 A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /edit_subject.php. Such m...	7.3 High	—	0,43%	19 Jul 2026
CVE-2026-53372 linux kernel In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Block PASID attachment to nested domain with dirty tracking Kernel lacks dirty tracking...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-53371 linux kernel In the Linux kernel, the following vulnerability has been resolved: RDMA/ionic: bound node_desc sysfs read with %.64s node_desc[64] in struct ib_device is not guarantee...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-53370 linux kernel In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: Improve validation and configuration of ACR masks Currently there are several issues...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-53369 linux kernel In the Linux kernel, the following vulnerability has been resolved: udf: reject descriptors with oversized CRC length udf_read_tagged() skips CRC verification when desc...	8.4 High	—	0,19%	19 Jul 2026
CVE-2026-53368 linux kernel In the Linux kernel, the following vulnerability has been resolved: f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage f2fs_need_dentry_mark() reads...	7.1 High	—	0,17%	19 Jul 2026
CVE-2026-53367 linux kernel In the Linux kernel, the following vulnerability has been resolved: selinux: fix avdcache auditing The per-task avdcache was incorrectly saving and reusing the audited...	5.5 Medium	—	0,16%	19 Jul 2026
CVE-2026-16226 A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save_settings of the file /admin/admin_class_novo.php. This manip...	4.7 Medium	—	0,38%	19 Jul 2026
CVE-2026-16225 A security flaw has been discovered in davenardella snap7 up to 1.4.3. The impacted element is the function TSnap7Peer::NegotiatePDULength of the file src/core/s7_peer.cp...	6.3 Medium	—	0,40%	19 Jul 2026
CVE-2026-16224 A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unknown function of the file /jxxghp/MoviePilot of the component Application...	4.3 Medium	—	0,39%	19 Jul 2026
CVE-2026-16223 A vulnerability was determined in 1Panel-dev CordysCRM up to 1.4.1. Impacted is the function getSqlBotSrc of the file backend/crm/src/main/java/cn/cordys/crm/system/servi...	6.3 Medium	—	0,37%	19 Jul 2026
CVE-2026-16222 A vulnerability was found in 1Panel-dev CordysCRM up to 1.4.1. This issue affects some unknown processing of the file backend/crm/src/main/java/cn/cordys/crm/integration/...	6.3 Medium	—	0,37%	19 Jul 2026
CVE-2026-16220 A vulnerability has been found in code-projects Online Examination System 1.0. This vulnerability affects unknown code of the file /account.php?q=quiz. Such manipulation...	4.3 Medium	—	0,47%	19 Jul 2026
CVE-2026-16219 A flaw has been found in Croogo CMS up to 4.0.7. This affects the function FileManager::isEditable of the file FileManager/src/Utility/FileManager.php of the component Ad...	6.3 Medium	—	0,43%	19 Jul 2026
CVE-2026-16218 A vulnerability was detected in hunvreus devpush up to 0.4.6. Affected by this issue is the function reset_storage of the file app/workers/tasks/storage.py of the compone...	2.6 Low	—	0,34%	19 Jul 2026
CVE-2026-16217 A security vulnerability has been detected in guohongze adminset up to 0.61. Affected by this vulnerability is an unknown functionality of the file delivery/deli.py of th...	6.3 Medium	—	0,38%	19 Jul 2026
CVE-2026-16216 A weakness has been identified in geex-arts django-jet up to 1.0.8. Affected is an unknown function of the component OAuth Handler. Executing a manipulation can lead to c...	4.3 Medium	—	0,23%	19 Jul 2026
CVE-2026-16215 A security flaw has been discovered in geex-arts django-jet up to 1.0.8. This impacts an unknown function of the component OAuth Credential Revoke Handler. Performing a m...	6.5 Medium	—	0,55%	19 Jul 2026
CVE-2026-16214 A vulnerability was identified in geex-arts django-jet up to 1.0.8. This affects an unknown function of the file jet/dashboard/views.py of the component Dashboard Module....	6.3 Medium	—	0,38%	19 Jul 2026
CVE-2026-16213 A security flaw has been discovered in Fantomas42 django-blog-zinnia up to 0.20. Affected by this vulnerability is an unknown functionality of the file zinnia/views/mixin...	3.3 Low	—	0,11%	19 Jul 2026
CVE-2026-16212 A vulnerability was identified in awesto django-shop up to 1.2.4. Affected is an unknown function of the file shop/models/inventory.py of the component Purchase Stock Han...	4.2 Medium	—	0,29%	19 Jul 2026
CVE-2026-16211 A vulnerability was determined in allegro up to bcf65b994ef29fb3fc2e10b660e6288723d5209e. This impacts the function AssetLastHostname.increment_hostname of the file src/r...	2.6 Low	—	0,22%	19 Jul 2026
CVE-2026-16210 A vulnerability was found in newpanjing simpleui 2026.01.13. This affects the function self.get_action of the file simpleui/admin.py of the component AjaxAdmin AJAX Endpo...	7.3 High	—	0,69%	19 Jul 2026
CVE-2026-16209 A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload...	7.3 High	—	0,71%	19 Jul 2026
CVE-2026-16208 A flaw has been found in django-tastypie up to 0.15.1. The affected element is the function CacheThrottle/CacheDBThrottle of the file tastypie/throttle.py. This manipulat...	5.0 Medium	—	0,26%	19 Jul 2026
CVE-2026-16207 A vulnerability was detected in django-tastypie up to 0.15.1. Impacted is the function ApiKeyAuthentication of the file tastypie/authentication.py. The manipulation resul...	3.7 Low	—	0,62%	19 Jul 2026
CVE-2026-16206 A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function _load_id_token of the file oauth2_provider/oauth2_v...	6.3 Medium	—	0,37%	19 Jul 2026
CVE-2026-16205 A weakness has been identified in Pluck CMS up to 4.7.21. This vulnerability affects the function htmlspecialchars_decode of the file data/modules/albums/albums.admin.php...	2.4 Low	—	0,35%	19 Jul 2026
CVE-2026-16204 A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This affects the function tool_run_script_execute of the file claw/services/tools/script.c of the compo...	6.3 Medium	—	0,55%	19 Jul 2026
CVE-2026-16203 A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /forCYS.php. Such...	3.5 Low	—	0,35%	19 Jul 2026
CVE-2026-16202 A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /CYS.php. T...	3.5 Low	—	0,35%	19 Jul 2026
CVE-2026-16201 A vulnerability was found in zevorn rt-claw up to 0.2.0. Affected is the function claw_net_get/claw_net_post of the file claw/services/tools/net.c of the component http_r...	5.3 Medium	—	0,53%	19 Jul 2026
CVE-2026-16200 A vulnerability has been found in zevorn rt-claw up to 0.2.0. This impacts the function claw_tool_invoke of the file claw/services/swarm/swarm.c of the component RPC Hand...	7.3 High	—	0,50%	19 Jul 2026
CVE-2026-16199 A flaw has been found in nextlevelbuilder GoClaw up to 3.13.3-beta.3. This affects the function ExecTool.Execute of the file goclaw/internal/tools/credentialed_exec.go. E...	6.3 Medium	—	0,37%	19 Jul 2026
CVE-2026-16198 A vulnerability was detected in Sipeed PicoClaw up to 0.2.9. The impacted element is an unknown function of the file web/backend/middleware/access_control.go of the compo...	5.6 Medium	—	0,63%	19 Jul 2026
CVE-2026-16197 A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. The affected element is the function handleMessageReceive of the file pkg/channels/feishu/feish...	6.3 Medium	—	0,37%	18 Jul 2026
CVE-2026-16196 A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Impacted is the function isPrivateOrRestrictedIP of the file pkg/tools/integration/web.go of the component...	6.3 Medium	—	0,41%	18 Jul 2026
CVE-2026-16195 A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This issue affects the function dispatchIncoming of the file pkg/channels/wecom/wecom.go of the compon...	6.3 Medium	—	0,37%	18 Jul 2026
CVE-2026-10130 QueryWeaver contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid session tokens for existing accounts by submitting a sig...	8.2 High	—	0,56%	18 Jul 2026
CVE-2026-16194 A vulnerability was determined in zhayujie CowAgent up to 2.1.1. This affects the function WebFetch.execute of the file agent/tools/web_fetch/web_fetch.py. Executing a ma...	6.3 Medium	—	0,47%	18 Jul 2026
CVE-2026-16156 A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This affects an unknown part of the file /forexam.php. The manipulation of th...	3.5 Low	—	0,35%	18 Jul 2026
CVE-2026-57857 The Flow Payment plugin for WordPress (flow.cl) version 3.0.8 is vulnerable to reflected cross-site scripting on the WooCommerce checkout page. When the plugin handles an...	4.3 Medium	—	0,34%	18 Jul 2026
CVE-2026-16155 A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /schoolyr.php. Th...	3.5 Low	—	0,35%	18 Jul 2026

Cara membaca. CVSS adalah skor keparahan 0–10 dari NVD; bila NVD belum menganalisis, dipakai skor dari penerbit CVE (CNA). KEV berarti CISA sudah melihat kerentanan itu dieksploitasi, jadi utamakan penambalannya. EPSS (FIRST) adalah perkiraan peluang kerentanan dieksploitasi dalam 30 hari ke depan. Deskripsi ditampilkan dalam bahasa Inggris sesuai sumber aslinya. Kalau sistem di Perangkat Daerah memakai produk yang terdampak dan butuh bantuan, laporkan lewat kanal pelaporan KUTIM-CSIRT.