CSIRT-Kabupaten

529

Total Peringatan KEV

140

Tingkat Critical

514

Eksploitasi Aktif

Vektor Ransomware

Menampilkan 71-80 dari total 529 advisory

Unknown In-The-Wild Exploited [ CVE-2023-34192 ]

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability that allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function.

Synacor Zimbra Collaboration Suite (ZCS) Rilis: 01 Oct 2026

Detail Mitigasi

High CVSS 8.7 In-The-Wild Exploited [ CVE-2024-49035 ]

Microsoft Partner Center Improper Access Control Vulnerability

Microsoft Partner Center contains an improper access control vulnerability that allows an attacker to escalate privileges.

Microsoft Partner Center Rilis: 01 Oct 2026

Detail Mitigasi

High CVSS 8.8 In-The-Wild Exploited [ CVE-2024-20953 ]

Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

Oracle Agile Product Lifecycle Management (PLM) contains a deserialization vulnerability that allows a low-privileged attacker with network access via HTTP to compromise the system.

Oracle Agile Product Lifecycle Management (PLM) Rilis: 01 Oct 2026

Detail Mitigasi

Unknown In-The-Wild Exploited [ CVE-2017-3066 ]

Adobe ColdFusion Deserialization Vulnerability

Adobe ColdFusion contains a deserialization vulnerability in the Apache BlazeDS library that allows for arbitrary code execution.

Adobe ColdFusion Rilis: 01 Oct 2026

Detail Mitigasi

Unknown In-The-Wild Exploited [ CVE-2018-9276 ]

Paessler PRTG Network Monitor OS Command Injection Vulnerability

Paessler PRTG Network Monitor contains an OS command injection vulnerability that allows an attacker with administrative privileges to execute commands via the PRTG System Administrator web console.

Paessler PRTG Network Monitor Rilis: 01 Oct 2026

Detail Mitigasi

High CVSS 8.2 In-The-Wild Exploited [ CVE-2025-24989 ]

Microsoft Power Pages Improper Access Control Vulnerability

Microsoft Power Pages contains an improper access control vulnerability that allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control.

Microsoft Power Pages Rilis: 01 Oct 2026

Detail Mitigasi

Unknown In-The-Wild Exploited [ CVE-2025-0111 ]

Palo Alto Networks PAN-OS File Read Vulnerability

Palo Alto Networks PAN-OS contains an external control of file name or path vulnerability. Successful exploitation enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user.

Palo Alto Networks PAN-OS Rilis: 01 Oct 2026

Detail Mitigasi

Medium CVSS 6.5 In-The-Wild Exploited [ CVE-2023-20118 ]

Cisco Small Business RV Series Routers Command Injection Vulnerability

Multiple Cisco Small Business RV Series Routers contains a command injection vulnerability in the web-based management interface. Successful exploitation could allow an authenticated, remote attacker to gain root-level privileges and access unauthorized data.

Cisco Small Business RV Series Routers Rilis: 01 Oct 2026

Detail Mitigasi

High CVSS 8.6 In-The-Wild Exploited [ CVE-2022-43939 ]

Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability

Hitachi Vantara Pentaho BA Server contains a use of non-canonical URL paths for authorization decisions vulnerability that enables an attacker to bypass authorization.

Hitachi Vantara Pentaho Business Analytics (BA) Server Rilis: 01 Oct 2026

Detail Mitigasi

High CVSS 8.8 In-The-Wild Exploited [ CVE-2022-43769 ]

Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability

Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an attacker to inject Spring templates into properties files, allowing for arbitrary command execution.

Hitachi Vantara Pentaho Business Analytics (BA) Server Rilis: 01 Oct 2026

Detail Mitigasi

Security Advisories