CSIRT-Kabupaten

529

Total Peringatan KEV

140

Tingkat Critical

514

Eksploitasi Aktif

Vektor Ransomware

Menampilkan 281-290 dari total 529 advisory

High CVSS 7.8 In-The-Wild Exploited Ransomware Known [ CVE-2021-43226 ]

Microsoft Windows Privilege Escalation Vulnerability

Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms.

Microsoft Windows Rilis: 01 Oct 2026

Detail Mitigasi

Unknown In-The-Wild Exploited [ CVE-2010-3765 ]

Mozilla Multiple Products Remote Code Execution Vulnerability

Mozilla Firefox, SeaMonkey, and Thunderbird contain an unspecified vulnerability when JavaScript is enabled. This allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption.

Mozilla Multiple Products Rilis: 01 Oct 2026

Detail Mitigasi

Unknown In-The-Wild Exploited [ CVE-2011-3402 ]

Microsoft Windows Remote Code Execution Vulnerability

Microsoft Windows Kernel contains an unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers that allows remote attackers to execute arbitrary code via crafted font data in a Word document or web page.

Microsoft Windows Rilis: 01 Oct 2026

Detail Mitigasi

Unknown In-The-Wild Exploited [ CVE-2014-6278 ]

GNU Bash OS Command Injection Vulnerability

GNU Bash contains an OS command injection vulnerability which allows remote attackers to execute arbitrary commands via a crafted environment.

GNU GNU Bash Rilis: 01 Oct 2026

Detail Mitigasi

Critical CVSS 9.8 In-The-Wild Exploited Ransomware Known [ CVE-2025-61882 ]

Oracle E-Business Suite Unspecified Vulnerability

Oracle E-Business Suite contains an unspecified vulnerability in the BI Publisher Integration component. The vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks can result in takeover of Oracle Concurrent Processing.

Oracle E-Business Suite Rilis: 01 Oct 2026

Detail Mitigasi

Unknown In-The-Wild Exploited [ CVE-2017-1000353 ]

Jenkins Remote Code Execution Vulnerability

Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java SignedObject object to the remoting-based Jenkins CLI, that would be deserialized using a new ObjectInputStream, bypassing the existing blocklist-based protection mechanism.

Jenkins Jenkins Rilis: 01 Oct 2026

Detail Mitigasi

Unknown In-The-Wild Exploited [ CVE-2015-7755 ]

Juniper ScreenOS Improper Authentication Vulnerability

Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorized remote administrative access to the device.

Juniper ScreenOS Rilis: 01 Oct 2026

Detail Mitigasi

High CVSS 7.8 In-The-Wild Exploited [ CVE-2026-21385 ]

Qualcomm Multiple Chipsets Memory Corruption Vulnerability

Multiple Qualcomm chipsets contain a memory corruption vulnerability while using alignments for memory allocation.

Qualcomm Multiple Chipsets Rilis: 01 Oct 2026

Detail Mitigasi

High CVSS 7.8 In-The-Wild Exploited [ CVE-2022-20775 ]

Cisco SD-WAN Path Traversal Vulnerability

Cisco SD-WAN CLI contains a path traversal vulnerability that could allow an authenticated local attacker to gain elevated privileges via improper access controls on commands within the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user.

Cisco SD-WAN Rilis: 01 Oct 2026

Detail Mitigasi

Critical CVSS 10 In-The-Wild Exploited [ CVE-2026-20127 ]

Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, contain an authentication bypass vulnerability could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system. This vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to an affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric.

Cisco Catalyst SD-WAN Controller and Manager Rilis: 01 Oct 2026

Detail Mitigasi

Security Advisories