CWE-117 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-117 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
CVE-2026-84439When audit logging is enabled (zookeeper.audit.enable=true), an unauthenticated attacker can inject …0.8%보통5.3CVE-2026-84501An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational …0.8%보통5.3CVE-2026-86522Improper Output Neutralization for Logs vulnerability in team-alembic AshAuthentication allows an un…0.5%보통6.3CVE-2026-87859morgan is an HTTP request logger middleware for Node.js. In versions before 1.12.1, its escapeLogFie…0.4%보통5.3CVE-2026-93421Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.4, th…0.4%보통5.3CVE-2026-119423OPNsense core before 26.7.8 contains a log injection vulnerability that allows unauthenticated attac…0.4%보통6.9CVE-2026-41504OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 unt…0.4%보통5.8CVE-2026-14350IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an unauthorized user to i…0.3%보통5.3
전체 목록
20건
CVE-2026-109786In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter (config/filter.d/sshd.conf) accepts an "on <t…0.3%보통5.3
CVE-2026-15661IBM Concert 1.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to imprope…0.3%보통5.3
CVE-2026-16188IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into …0.3%보통5.3
CVE-2026-63442OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the unauthenticated WebGU…0.3%높음8.1
CVE-2026-85290InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1…0.2%보통5.3
CVE-2026-16189IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into …0.2%보통4.8
CVE-2026-118994CallBackery versions before 0.62.0 for Perl allow log injection via newlines in the login name. login() writes…0.2%미평가
CVE-2026-9736IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorized user to inject data into log…0.2%보통5.3
CVE-2026-6327IBM Concert 1.0.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to impro…0.2%보통4.3
CVE-2026-76267In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a user that holds a role with the read_o11y_c…0.2%보통4.3
CVE-2026-11538IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA…0.2%낮음3.7
CVE-2026-111211An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19. `django.contrib.…보통6.9
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.