377,174 CVE lengkap 1999–2026

CVE Notifier

Arsip lengkap dari cve.org (CVE Record), skor CVSS dari NVD, dan daftar eksploitasi aktif dari CISA KEV. Ter-update tiap 30 menit.

Lihat feed Sumber data

arsip 377,174 CVE • 12,754 critical • 1,713 KEV

1999–2026
395.000+ CVE
cve.org
NVD CVSS
CISA KEV
Auto-update 30m
SQLite full-text

Feed Kerentanan

Semua Critical (≥9) High (7-9) KEV WordPress

Menampilkan 12 dari 377,174 entri — halaman 294/31432

CVE-2026-12728 CWE-? 8.8

IBM MQ Java messaging is vulnerable to remote code execution

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an authentic…

cve.org IBM:MQ 15 Sep 2026

CVE-2026-12742 CWE-862 5.4

Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026

IBM Business Automation Workflow containers and traditional could allow an authenticated attacker to trigger restricted import actions due to missing authorization controls.

cve.org IBM:Business · Automation · Workflow 15 Sep 2026

CVE-2026-88765 CWE-77 8.5

Improper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab

GitLab has remediated an issue in GitLab EE affecting all versions from 12.3 to 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 under certain conditions could allow an authenticated user to achieve remote code executi…

cve.org GitLab:GitLab 15 Sep 2026

CVE-2026-12749 CWE-79 6.4

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.

IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionalit…

cve.org IBM:Cloud · Pak · for 15 Sep 2026

CVE-2026-12750 CWE-79 6.4

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.

cve.org IBM:Cloud · Pak · for 15 Sep 2026

CVE-2026-12751 CWE-80 5.4

Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.

IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of t…

cve.org IBM:Cloud · Pak · for 15 Sep 2026

CVE-2026-12752 CWE-611 7.1

Multiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive …

cve.org IBM:Business · Automation · Workflow 15 Sep 2026

CVE-2026-53941 CWE-770 N/A

Inspektor Gadget Uprobe gadgets: unprivileged container's ld.so.cache causes high CPU utilization and container startup DoS

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.27.0 until 0.53.1, the uprobe library resolver can allow an unprivilege…

cve.org inspektor-gadget:inspektor-gadget 15 Sep 2026

CVE-2026-44778 CWE-20 N/A

Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELF

Inspektor Gadget is a set of tools and framework for data collection and system inspection on Kubernetes clusters and Linux hosts using eBPF. From 0.28.0 until 0.53.1, the USDT note parser in pkg/uprobetracer/usdt.go can…

cve.org inspektor-gadget:inspektor-gadget 15 Sep 2026

CVE-2026-21588 CWE-? N/A

CVE-2026-21588

This High severity DoS (Denial of Service) vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This DoS (Denial of Service) v…

cve.org Atlassian:Confluence · Data · Center 15 Sep 2026

CVE-2026-21587 CWE-? N/A

CVE-2026-21587

This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Management Data Center. This Improper Authorization vulnerability, with a CVSS Score of 7.1, allows an authenti…

cve.org Atlassian:Jira · Service · Management 15 Sep 2026

CVE-2026-21586 CWE-? N/A

CVE-2026-21586

This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Impr…

cve.org Atlassian:Confluence · Data · Center 15 Sep 2026

Statistik

Arsip lengkap kerentanan dari semua sumber — live dari database.

cache/cve.db • 30 Sep 2026 05:38

377,174 Total CVE terindeks

▲ 1999–2026

60,905 Tahun 2026

12,754 Critical (skor ≥ 9)

1,713 CISA KEV aktif

Distribusi Severity

CVSS v3

12,754 critical

Critical 12,754 (8%)
High 61,345 (41%)
Medium 68,090 (45%)
Low 8,634 (6%)

150,872 dinilai • 226,302 belum

Tren CVE per Tahun

1999–2026

2017

2018

2019

2020

2021

2022

2023

2024

2025

2026

cve.org

Arsip penuh CVE dari CVE Program — id, deskripsi, CWE, referensi.

245,461 CVE Record

NVD

Kerentanan dengan skor CVSS v3.x dari NIST National Vulnerability Database.

150,872 CVSS dinilai

Wordfence

Kerentanan plugin/theme WordPress dari Wordfence Intelligence.

11,134 WordPress

WPScan

Kerentanan ekosistem WordPress dari WPScan (Patchstack).

5,444 WordPress

GitHub

CVE yang menyentuh ekosistem GitHub (judul/deskripsi/produk).

3,208 Ekosistem

MITRE

CNA asli yang menerbitkan dan mengelola CVE Record.

114,963 CNA Publish

Sumber Data

cve.org

Arsip CVE Program — id, deskripsi, CWE, referensi. Update tiap 30 menit via delta release.

NVD

Skor CVSS v3.1 untuk entri yang dinilai NIST NVD.

CISA KEV

Kerentanan yang aktif dieksploitasi — prioritas tinggi.

WPScan

Kerentanan ekosistem WordPress.

Wordfence

Kerentanan plugin/theme WordPress.

GitHub

Security Advisories ekosistem open source.