CSIRT-Kabupaten

529

Total Peringatan KEV

140

Tingkat Critical

514

Eksploitasi Aktif

Vektor Ransomware

Menampilkan 231-240 dari total 529 advisory

High CVSS 8 In-The-Wild Exploited [ CVE-2025-6204 ]

Dassault Systèmes DELMIA Apriso Code Injection Vulnerability

Dassault Systèmes DELMIA Apriso contains a code injection vulnerability that could allow an attacker to execute arbitrary code.

Dassault Systèmes DELMIA Apriso Rilis: 01 Oct 2026

Detail Mitigasi

Critical CVSS 9.8 In-The-Wild Exploited [ CVE-2025-24893 ]

XWiki Platform Eval Injection Vulnerability

XWiki Platform contains an eval injection vulnerability that could allow any guest to perform arbitrary remote code execution through a request to SolrSearch.

XWiki Platform Rilis: 01 Oct 2026

Detail Mitigasi

Unknown In-The-Wild Exploited [ CVE-2025-11371 ]

Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

Gladinet CentreStack and Triofox contains a files or directories accessible to external parties vulnerability that allows unintended disclosure of system files.

Gladinet CentreStack and Triofox Rilis: 01 Oct 2026

Detail Mitigasi

High CVSS 7.8 In-The-Wild Exploited [ CVE-2025-41244 ]

Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate privileges to root on the same VM.

Broadcom VMware Aria Operations and VMware Tools Rilis: 01 Oct 2026

Detail Mitigasi

Unknown In-The-Wild Exploited [ CVE-2025-13223 ]

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 contains a type confusion vulnerability that allows for heap corruption.

Google Chromium V8 Rilis: 01 Oct 2026

Detail Mitigasi

Unknown In-The-Wild Exploited [ CVE-2025-48572 ]

Android Framework Privilege Escalation Vulnerability

Android Framework contains an unspecified vulnerability that allows for privilege escalation.

Android Framework Rilis: 01 Oct 2026

Detail Mitigasi

Critical CVSS 9.8 In-The-Wild Exploited [ CVE-2025-61757 ]

Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

Oracle Fusion Middleware contains a missing authentication for critical function vulnerability, allowing unauthenticated remote attackers to take over Identity Manager.

Oracle Fusion Middleware Rilis: 01 Oct 2026

Detail Mitigasi

Unknown In-The-Wild Exploited [ CVE-2021-26829 ]

OpenPLC ScadaBR Cross-site Scripting Vulnerability

OpenPLC ScadaBR contains a cross-site scripting vulnerability via system_settings.shtm.

OpenPLC ScadaBR Rilis: 01 Oct 2026

Detail Mitigasi

Medium CVSS 6.7 In-The-Wild Exploited [ CVE-2025-58034 ]

Fortinet FortiWeb OS Command Injection Vulnerability

Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.

Fortinet FortiWeb Rilis: 01 Oct 2026

Detail Mitigasi

Critical CVSS 9.1 In-The-Wild Exploited [ CVE-2025-12480 ]

Gladinet Triofox Improper Access Control Vulnerability

Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete.

Gladinet Triofox Rilis: 01 Oct 2026

Detail Mitigasi

Security Advisories