CWE-120 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-120 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2017-7269Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information S…99.8%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2019-11043In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurati…99.8%심각9.8● 실제 악용이 확인됨CVE-2016-6366Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA…87.6%높음8.8● 실제 악용이 확인됨CVE-2007-5659Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to ex…87.4%높음7.8● 실제 악용이 확인됨CVE-2016-10174The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoki…83.3%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2018-6789An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sendi…82.1%심각9.8● 실제 악용이 확인됨CVE-2013-1331Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to exec…79.8%높음7.8● 실제 악용이 확인됨CVE-2025-20333A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Sof…72.0%심각9.9
전체 목록
120건
CVE-2020-15999악용 확인Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentia…63.9%심각9.6
CVE-2010-2572악용 확인Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary cod…58.6%높음7.8
CVE-2022-37055악용 확인D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via…55.5%심각9.8
CVE-2023-41064악용 확인A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPa…53.4%높음7.8
CVE-2006-2492악용 확인Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Wo…48.1%높음8.8
CVE-2017-6862악용 확인NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0…45.7%심각9.8
CVE-2016-0099랜섬웨어 악용The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,…37.0%높음7.8
CVE-2013-0641악용 확인Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allo…32.3%높음7.8
CVE-2023-33010악용 확인A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 throu…29.0%심각9.8
CVE-2023-33009악용 확인A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 throug…28.1%심각9.8
CVE-2020-5135랜섬웨어 악용A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and poten…26.9%심각9.8
CVE-2020-15069악용 확인Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S B…10.7%심각9.8
CVE-2004-0210악용 확인The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via …7.2%높음7.8
CVE-2021-30983악용 확인A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadO…2.9%높음7.8
CVE-2025-31277악용 확인The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS…1.7%높음8.8
CVE-2025-43520악용 확인A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and i…0.4%보통5.5
CVE-2026-93740A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt o…0.9%심각9.3
CVE-2026-93739A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of th…0.9%높음8.6
CVE-2026-93738A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This affects the function formSchedule of the…0.9%높음8.6
CVE-2026-94101A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246. The affected element is the …0.8%높음8.6
CVE-2026-94100A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wan_config_set_…0.8%높음8.6
CVE-2026-90608A flaw has been found in Totolink A3002MU Hh-B20211125.1046. The affected element is the function formPortFw o…0.8%높음8.6
CVE-2026-108822A vulnerability was detected in Kamailio up to 6.0.7/6.1.3. The affected element is the function isup_get_call…0.8%보통6.9
CVE-2026-120241A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P …0.6%높음7.7
CVE-2026-93741A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is t…0.7%심각9.3
CVE-2026-86165A vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function formURL of the file…0.6%높음8.9
CVE-2026-90780SIPp through 3.7.7 contains a buffer overflow vulnerability in the get_header() function in src/sip_parser.cpp…0.6%높음8.7
CVE-2026-90778SIPp through 3.7.7 contains a buffer overflow vulnerability in get_peer_tag() function when processing SIP To …0.6%높음8.7
CVE-2026-57191Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, …0.6%높음8.2
CVE-2026-85109A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file …0.6%높음8.9
CVE-2026-106804A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn module. The w_rx_aar_reg…0.6%높음7.5
CVE-2026-15340lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow.0.6%심각9.3
CVE-2026-85031A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of the file /cg…0.6%높음8.6
CVE-2026-108914A flaw has been found in Edimax BR-6208AC 1.32. Affected by this issue is some unknown functionality of the fi…0.6%높음8.6
CVE-2026-76705A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Succ…0.5%보통5.5
CVE-2026-114268A flaw has been found in Tenda BE3L Pro 16.03.60.62. Affected by this vulnerability is the function formWifiBa…0.5%높음8.6
CVE-2016-15060A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component P…0.5%보통5.5
CVE-2026-103227A weakness has been identified in GPAC up to 26.07.0. Affected by this issue is the function gf_dash_resolve_u…0.5%보통5.3
CVE-2026-76744Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow …0.5%심각9.8
CVE-2026-90606A security vulnerability has been detected in Totolink A3002MU Hh-B20211125.1046. This issue affects the funct…0.5%높음8.6
CVE-2026-93857A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attack…0.5%심각9.2
CVE-2026-119146ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the mod_rewrite int:utf8trans …0.5%보통6.3
CVE-2026-86166A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the…0.5%높음7.4
CVE-2026-85110A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /bo…0.5%높음7.4
CVE-2026-90607A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule o…0.5%높음8.6
CVE-2026-90605A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. This vulnerability affects the function …0.5%높음8.6
CVE-2026-82772Buffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted r…0.5%높음8.7
CVE-2026-82770Buffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafte…0.5%높음8.7
CVE-2026-88409FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a buffer overflow in the _Decode_GrB_Matr…0.5%높음8.8
CVE-2026-87931A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20…0.4%높음8.6
CVE-2026-97631EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, a…0.4%심각9.5
CVE-2026-76747Buffer overflow vulnerabilities exist in the affected interface of AOS-S. Successful exploitation could allow …0.4%심각9.1
CVE-2026-108915A vulnerability has been found in Edimax BR-6208AC 1.32. This affects an unknown part of the file /goform/form…0.4%높음8.6
CVE-2026-91953FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in nego_send_negotiation_request()…0.4%높음7.1
CVE-2026-112108A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadStri…0.4%낮음2.1
CVE-2026-112107A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::Cr…0.4%낮음2.1
CVE-2026-55209resdata is software for reading and writing result files from the Eclipse reservoir simulator. Prior to 6.2.9,…0.4%심각9.8
CVE-2026-48490ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform. A vulnera…0.4%보통6.9
CVE-2026-0993SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthen…0.4%높음8.7
CVE-2026-76695Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN …0.4%보통6.5
CVE-2026-88775Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: be…0.4%높음8.8
CVE-2026-43837A buffer overflow vulnerability in the password verification functionality could allow an attacker with guest …0.4%높음7.5
CVE-2026-84198IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due …0.4%높음8.1
CVE-2026-84246IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due …0.4%높음8.1
CVE-2026-82895IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due …0.4%높음8.1
CVE-2026-102296ZoneMinder before 1.38.4 contains static buffer overflow vulnerabilities in RemoteCameraHttp::GetResponse() th…0.4%높음8.3
CVE-2026-110695A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.get_tensor of…0.4%낮음2.1
CVE-2026-92006Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera…0.3%높음8.8
CVE-2026-28934A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, ma…0.3%보통6.5
CVE-2026-44756A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specifi…0.3%심각10.0
CVE-2026-76723Buffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS that could al…0.3%심각9.6
CVE-2026-102176A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in the SDK service proc…0.3%높음8.7
CVE-2026-6730IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking. A loca…0.3%심각9.8
CVE-2026-19570The LE Audio Broadcast Sink in subsys/bluetooth/audio/bap_broadcast_sink.c copies subgroup metadata from a rec…0.3%높음8.8
CVE-2026-58710In DecodeFilmGrainParams of film_grain_dec.cc, there is a possible out-of-bounds write due to a missing bounds…0.3%높음8.8
CVE-2026-55331In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This cou…0.3%높음8.8
CVE-2026-92011Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera…0.3%높음8.8
CVE-2026-92009Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera…0.3%높음8.8
CVE-2026-92020Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerabi…0.3%높음8.8
CVE-2026-92012Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera…0.3%높음8.8
CVE-2026-92007Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera…0.3%높음8.8
CVE-2026-92013Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera…0.3%높음8.8
CVE-2026-92010Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera…0.3%높음8.8
CVE-2026-92008Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera…0.3%높음8.8
CVE-2025-29897A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central. If a rem…0.3%낮음2.3
CVE-2026-108954A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransduce…0.3%낮음2.1
CVE-2026-92043Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was…0.3%높음8.8
CVE-2026-92014Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fi…0.3%높음8.8
CVE-2026-76955A buffer overflow vulnerability in the zdp_wtp binary in Zyxel NWA110AX firmware versions through 7.12(ABTG.0)…0.3%높음8.8
CVE-2026-11828IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted cha…0.3%보통5.9
CVE-2026-120057psqlODBC copies the reply to a large-object read (loread) into the application's buffer using the length sent …0.2%높음7.5
CVE-2026-53420Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct…0.3%높음8.0
CVE-2026-11829IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset…0.2%보통6.5
CVE-2026-102693RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embe…0.2%심각9.6
CVE-2026-55343In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check…0.2%높음8.0
CVE-2026-82944SOEM version 2.0.0 and earlier contains a vulnerability in multi-segment data transfers where a malicious devi…0.2%높음8.8
CVE-2026-81433A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) a…0.2%높음8.7
CVE-2026-76746An unauthenticated buffer overflow vulnerability exists in AOS-S. Successful exploitation could allow an unaut…0.2%심각9.3
CVE-2026-42808An issue was discovered in Bosch Sensortec COINES_SDK versions 2.0 through 2.11. The host streaming API functi…0.2%보통6.8
CVE-2026-84581A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, ma…0.2%높음8.4
CVE-2026-84489A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 1…0.2%보통5.5
CVE-2026-82945SOEM version 2.0.0 and earlier contains a vulnerability during device configuration where a malicious device c…0.2%보통6.5
CVE-2026-71613Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute a…0.1%높음7.8
CVE-2026-94587A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration downloa…0.1%보통6.9
CVE-2026-90801A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file b…0.1%낮음1.9
CVE-2021-43614Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhau…0.1%보통6.7
CVE-2026-90803A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the functio…0.1%낮음1.9
CVE-2026-84632The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27…0.1%높음7.3
CVE-2023-24284Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the is_mark…0.1%낮음2.9
CVE-2023-24285Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is trigge…0.1%낮음2.9
CVE-2023-24291Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record …0.1%낮음2.9
CVE-2023-24287Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the "M" com…0.1%낮음2.9
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.