CVE Ledger

CWE-130 관련 취약점

같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.

원장 35,126건이 중 악용 확인 1,767건분류: CWE-130

CWE-130 — 주요 취약점

악용이 확인된 것을 먼저 보여줍니다.

32건

CVE-2026-94633Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability…0.4%높음8.7

CVE-2026-94635Allocation of resources without limits or throttling, Improper handling of length parameter inconsistency vuln…0.4%높음8.7

CVE-2026-87022Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message sm…0.4%높음7.5

CVE-2026-119600tcpflow through 1.6.1 contains an out-of-bounds read vulnerability that allows unauthenticated attackers to re…0.4%보통6.3

CVE-2026-101962An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of J…0.4%높음8.7

CVE-2026-119279MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0…0.4%보통5.9

CVE-2026-119277MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0…0.4%보통5.9

CVE-2026-119276MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0…0.4%보통5.9

CVE-2026-18397This vulnerability enables unauthenticated remote code execution (RCE) on a victim's machine by exploiting a c…0.3%심각9.4

CVE-2026-71337Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate pr…0.3%높음7.8

CVE-2026-114597In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length values in a network me…0.3%높음8.7

CVE-2026-90921IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to impro…0.3%높음7.5

CVE-2026-92159F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software…0.3%보통6.5

CVE-2026-116531HTTP::Body versions before 1.23_01 for Perl lose track of chunk boundaries in chunked request bodies when a re…0.3%미평가

CVE-2026-116013OpenResty lua-resty-dns before 0.24 contains an improper input validation vulnerability in parse_section() and…0.3%보통6.3

CVE-2023-5778Improper handling of length parameter inconsistency vulnerability in ABB Freelance Controller DCP, ABB Freelan…0.3%심각9.2

CVE-2026-101994An Improper Handling of Length Parameter Inconsistency vulnerability in the l2ald daemon of Juniper Networks J…0.3%높음7.1

CVE-2026-114646A data-validation flaw exists in the BSON handling and binary serialization path of the MongoDB C# Driver. Whe…0.3%보통6.9

CVE-2026-102054An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and…0.2%보통5.3

CVE-2026-101991An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon (rpd) of J…0.2%보통5.3

CVE-2026-115794P-Net before 1.0.3 passes the application alarm callback a data length derived from the variable part length f…0.2%낮음2.3

CVE-2026-110912In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet…0.2%높음7.1

CVE-2026-15418In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious …0.2%낮음2.4

CVE-2026-105960PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy. The driver u…0.1%보통6.8

이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.