CWE-113 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-113 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
CVE-2026-105324An HTTP header injection vulnerability in start-page-loader.cgi of ADM allows an unauthenticated rem…0.7%심각9.2CVE-2026-77360oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards.…0.6%보통6.3CVE-2026-90819A weakness has been identified in a2aproject a2a-java 1.2.0. The affected element is the function Ba…0.4%보통6.9CVE-2026-103930cpp-httplib is a C++ header-only HTTP/HTTPS library. From 0.29.0 until 0.51.0, Client::open_stream i…0.4%낮음3.7CVE-2026-93711Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headers_…0.4%보통6.5CVE-2026-106512The CakeResponse::download() method in lib/Cake/Network/CakeResponse.php constructs a Content-Dispos…0.3%높음8.4CVE-2026-85077Sanic is an opensource python web server/framework. Prior to version 24.12.1, and in version 25.12.0…0.3%높음8.2CVE-2026-55486The Goobi viewer is a web application that allows digitised material to be displayed in a web browse…0.3%심각9.3
전체 목록
15건
CVE-2024-58384Tornado before 6.4.1 contains a CRLF injection vulnerability in CurlAsyncHTTPClient that fails to reject carri…0.2%보통6.3
CVE-2026-91991Tornado before 6.5.8 contains an incomplete fix for cookie attribute injection that allows attackers to inject…0.2%보통6.3
CVE-2026-69211Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, ResponseCookie.render writes at…0.2%보통4.8
CVE-2026-112880Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in…0.2%낮음2.1
CVE-2026-85976Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently sani…0.1%보통5.4
CVE-2026-120639CGI versions before 5.00 for Perl allow HTTP header injection via entity decoding after the newline check in h…미평가
CVE-2018-3911An exploitable HTTP header injection vulnerability exists in the remote servers of Samsung SmartThings Hub STH…높음8.6
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.