CVE 원장
수집된 취약점입니다. CVSS 점수 순으로 정렬하지 않습니다 — 점수는 "얼마나 나쁠 수 있는가" 이고, 우리가 먼저 묻는 것은 "실제로 쓰이고 있는가" 입니다.
지금 주목할 취약점
악용 확인 → 악용 확률 순입니다.
● 랜섬웨어 캠페인에 사용됨CVE-2024-3400A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect featur…100.0%심각10.0● 랜섬웨어 캠페인에 사용됨CVE-2021-44228Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI …100.0%심각10.0● 랜섬웨어 캠페인에 사용됨CVE-2020-5902In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11…100.0%심각9.8● 실제 악용이 확인됨CVE-2026-109619PHP has various global state that temporarily points into request memory. In some scenarios, global …100.0%심각9.2● 랜섬웨어 캠페인에 사용됨CVE-2024-21893A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.…100.0%높음8.2● 랜섬웨어 캠페인에 사용됨CVE-2024-21887A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti …100.0%심각9.1● 랜섬웨어 캠페인에 사용됨CVE-2019-0708A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal S…100.0%심각9.8● 실제 악용이 확인됨CVE-2026-109618PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of …100.0%심각9.2
전체 목록
120건
CVE-2023-44487악용 확인The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can …100.0%높음7.5
CVE-2023-35078랜섬웨어 악용An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functiona…100.0%심각9.8
CVE-2019-19781랜섬웨어 악용An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, an…100.0%심각9.8
CVE-2023-4966랜섬웨어 악용Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virt…100.0%높음7.5
CVE-2021-22005랜섬웨어 악용The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor…100.0%심각9.8
CVE-2021-40438랜섬웨어 악용A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remot…100.0%심각9.0
CVE-2015-1635악용 확인HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 20…100.0%심각9.8
CVE-2023-22518랜섬웨어 악용All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Imprope…100.0%심각9.8
CVE-2023-0669랜섬웨어 악용Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerabilit…100.0%높음7.2
CVE-2014-0160악용 확인The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Exten…100.0%높음7.5
CVE-2024-23897랜섬웨어 악용Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that r…100.0%심각9.8
CVE-2023-35082랜섬웨어 악용An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access res…100.0%심각9.8
CVE-2021-35464랜섬웨어 악용ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on m…100.0%심각9.8
CVE-2019-11510랜섬웨어 악용In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an…100.0%심각10.0
CVE-2023-27350랜섬웨어 악용This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 2…100.0%심각9.8
CVE-2018-13379랜섬웨어 악용An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to…100.0%심각9.8
CVE-2017-9841악용 확인Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbit…100.0%심각9.8
CVE-2017-5638랜섬웨어 악용The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect ex…100.0%심각9.8
CVE-2022-26134랜섬웨어 악용In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would a…100.0%심각9.8
CVE-2021-26084랜섬웨어 악용In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would a…100.0%심각9.8
CVE-2021-26086악용 확인Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via…100.0%보통5.3
CVE-2014-6271악용 확인GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variab…100.0%심각9.8
CVE-2023-32315악용 확인Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a…100.0%높음7.5
CVE-2023-1389악용 확인TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulne…100.0%높음8.8
CVE-2022-29464랜섬웨어 악용Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must u…100.0%심각9.8
CVE-2021-21985랜섬웨어 악용The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in t…100.0%심각9.8
CVE-2025-53770랜섬웨어 악용Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker t…100.0%심각9.8
CVE-2024-7593악용 확인Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 all…100.0%심각9.8
CVE-2023-1671악용 확인A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than vers…100.0%심각9.8
CVE-2021-1498악용 확인Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenti…100.0%심각9.8
CVE-2017-7921악용 확인An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.…100.0%심각9.8
CVE-2013-2251악용 확인Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a paramet…100.0%심각9.8
CVE-2012-1823악용 확인sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi)…100.0%심각9.8
CVE-2022-22954랜섬웨어 악용VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability due to server-s…100.0%심각9.8
CVE-2020-14882악용 확인Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supporte…100.0%심각9.8
CVE-2019-16920악용 확인Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR-652, and DHP-1…100.0%심각9.8
CVE-2018-11776악용 확인Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysS…100.0%높음8.1
CVE-2025-49704랜섬웨어 악용Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized …100.0%높음8.8
CVE-2024-3273악용 확인** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DNS-320…100.0%심각9.8
CVE-2022-44877악용 확인login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers…100.0%심각9.8
CVE-2025-3248랜섬웨어 악용Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A re…100.0%심각9.8
CVE-2024-34102악용 확인Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restrictio…100.0%심각9.8
CVE-2020-8515악용 확인DrayTek Vigor2960 1.3.1_Beta, Vigor3900 1.4.4_Beta, and Vigor300B 1.3.3_Beta, 1.4.2.1_Beta, and 1.4.4_Beta dev…100.0%심각9.8
CVE-2017-10271랜섬웨어 악용Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security)…100.0%높음7.5
CVE-2024-13159악용 확인Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 S…100.0%높음7.5
CVE-2023-46604랜섬웨어 악용The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a r…100.0%심각9.8
CVE-2021-41773랜섬웨어 악용A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a …100.0%심각9.8
CVE-2020-3452악용 확인A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Fi…100.0%높음7.5
CVE-2024-27199랜섬웨어 악용In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible100.0%높음7.3
CVE-2023-29300랜섬웨어 악용Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are af…100.0%심각9.8
CVE-2018-7600랜섬웨어 악용Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to ex…100.0%심각9.8
CVE-2024-4577랜섬웨어 악용In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on…100.0%심각9.8
CVE-2021-33044악용 확인The identity authentication bypass vulnerability found in some Dahua products during the login process. Attack…100.0%심각9.8
CVE-2020-9054악용 확인Multiple ZyXEL network-attached storage (NAS) devices running firmware version 5.21 contain a pre-authenticati…100.0%심각9.8
CVE-2023-42793랜섬웨어 악용In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible100.0%심각9.8
CVE-2022-40684랜섬웨어 악용An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 throug…100.0%심각9.8
CVE-2019-9670악용 확인mailboxd component in Synacor Zimbra Collaboration Suite 8.7.x before 8.7.11p10 has an XML External Entity inj…100.0%심각9.8
CVE-2024-45195악용 확인Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.1…100.0%높음7.5
CVE-2023-22527랜섬웨어 악용A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenti…100.0%심각9.8
CVE-2023-46805랜섬웨어 악용An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure a…100.0%높음8.2
CVE-2021-20090악용 확인A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR…100.0%심각9.8
CVE-2025-59287악용 확인Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute …100.0%심각9.8
CVE-2025-22457랜섬웨어 악용A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before ve…100.0%심각9.8
CVE-2025-0282랜섬웨어 악용A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before ve…100.0%심각9.0
CVE-2021-22204악용 확인Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary…100.0%높음7.8
CVE-2024-24919랜섬웨어 악용Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected t…100.0%높음8.6
CVE-2024-1709랜섬웨어 악용ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or…100.0%심각10.0
CVE-2023-4863악용 확인Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote at…100.0%높음8.8
CVE-2021-45046랜섬웨어 악용It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-defau…100.0%심각9.0
CVE-2024-4879악용 확인ServiceNow has addressed an input validation vulnerability that was identified in Vancouver and Washington DC …100.0%심각9.3
CVE-2019-2725랜섬웨어 악용Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services)…100.0%심각9.8
CVE-2012-0158랜섬웨어 악용The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Commo…100.0%높음8.8
CVE-2025-5777랜섬웨어 악용Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN vi…100.0%심각9.3
CVE-2025-24893악용 확인XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any g…100.0%심각9.8
CVE-2014-8361악용 확인The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInt…100.0%심각9.8
CVE-2025-31161랜섬웨어 악용CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin acc…100.0%심각9.8
CVE-2020-25506악용 확인D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which…100.0%심각9.8
CVE-2017-12617악용 확인When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.8…100.0%높음8.1
CVE-2022-47986랜섬웨어 악용IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on t…100.0%심각9.8
CVE-2021-42013랜섬웨어 악용It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could …100.0%심각9.8
CVE-2021-3156악용 확인Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows…100.0%높음7.8
CVE-2024-38475악용 확인Improper escaping of output in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to map …100.0%심각9.1
CVE-2019-10149악용 확인A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in delive…100.0%심각9.8
CVE-2018-2628악용 확인Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Comp…100.0%심각9.8
CVE-2023-38035랜섬웨어 악용A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may…100.0%심각9.8
CVE-2022-1388랜섬웨어 악용On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14…100.0%심각9.8
CVE-2020-0688랜섬웨어 악용A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properl…100.0%높음8.8
CVE-2018-15961악용 확인Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier h…100.0%심각9.8
CVE-2022-30525악용 확인A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 throug…99.9%심각9.8
CVE-2021-3129랜섬웨어 악용Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execu…99.9%심각9.8
CVE-2018-10562랜섬웨어 악용An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in…99.9%심각9.8
CVE-2017-11882랜섬웨어 악용Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack…99.9%높음7.8
CVE-2025-24813악용 확인Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure an…99.9%심각9.8
CVE-2024-29824악용 확인An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthent…99.9%높음8.8
CVE-2020-10189악용 확인Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of u…99.9%심각9.8
CVE-2014-7169악용 확인GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the…99.9%심각9.8
CVE-2024-27198랜섬웨어 악용In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible99.9%심각9.8
CVE-2022-22963악용 확인In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionalit…99.9%심각9.8
CVE-2021-26085랜섬웨어 악용Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre…99.9%보통5.3
CVE-2023-34362랜섬웨어 악용In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5),…99.9%심각9.8
CVE-2021-39226악용 확인Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated …99.9%높음7.3
CVE-2021-38647랜섬웨어 악용Open Management Infrastructure (OMI) Remote Code Execution Vulnerability99.9%심각9.8
CVE-2025-4427악용 확인An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows atta…99.9%높음7.5
CVE-2022-24816악용 확인JAI-EXT is an open-source project which aims to extend the Java Advanced Imaging (JAI) API. Programs allowing …99.9%심각10.0
CVE-2021-1497악용 확인Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenti…99.9%심각9.8
CVE-2026-10520악용 확인An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows…99.9%심각10.0
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.