CWE-201 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-201 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
CVE-2026-54649punchin-email is a Cloudflare Email Worker that provides two-way role aliases while relaying mail to…0.8%낮음2.1CVE-2026-66822Insertion of sensitive information into sent data in .NET allows an unauthorized attacker to disclos…0.7%보통5.9CVE-2026-100258In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read proj…0.7%보통4.3CVE-2026-65812Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorize…0.5%보통6.8CVE-2026-106501Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.…0.5%심각9.6CVE-2026-88811Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials t…0.4%심각9.1CVE-2026-78336Insertion of sensitive information into sent data vulnerability in Apache Syncope. Any authenticated…0.4%높음7.5CVE-2026-82837GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.1.8, 19.…0.4%보통5.3
전체 목록
91건
CVE-2026-53920odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. From version 17.01.0 to before …0.4%높음8.7
CVE-2026-104399Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Motors allows Retrieve Embed…0.4%보통6.9
CVE-2026-105071Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning <= 1.5.17 vers…0.4%높음7.5
CVE-2026-103957Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authe…0.4%높음8.2
CVE-2026-92555Insertion of sensitive information into sent data vulnerability in AKIN Software Computer Import-Export Indust…0.4%심각9.8
CVE-2026-113459In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so th…0.4%높음7.1
CVE-2026-115591Insertion of Sensitive Information Into Sent Data vulnerability in Supsystic Contact Form by Supsystic contact…0.3%높음7.5
CVE-2026-45049Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `Cross-Domain Single Si…0.3%높음8.3
CVE-2026-115594Insertion of Sensitive Information Into Sent Data vulnerability in David Lingren Media LIbrary Assistant media…0.3%보통6.5
CVE-2026-78374Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder extension < 2.3…0.3%보통6.9
CVE-2026-114190Insertion of Sensitive Information Into Sent Data vulnerability in Hai Zheng / Lite Speed Cache LiteSpeed Cach…0.3%보통5.9
CVE-2026-118083Unauthenticated Sensitive Data Exposure in WP Crowdfunding <= 2.2.2 versions.0.3%높음7.5
CVE-2026-41561Unauthenticated Sensitive Data Exposure in Museder RestoreOne <= 2.7.276 versions.0.3%높음7.5
CVE-2026-41559Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore <= 2.1.2 version…0.3%높음7.5
CVE-2026-42413Unauthenticated Sensitive Data Exposure in Snapshotify – All-in-One Backup & Restore & Migrate <…0.3%높음7.5
CVE-2026-103334Insertion of Sensitive Information Into Sent Data vulnerability in Etoile Web Design Incorporated Five Star Re…0.3%높음7.5
CVE-2026-107268Insertion of Sensitive Information Into Sent Data vulnerability in Drupal Two Factor Authentication - TFA / Pa…0.3%보통4.3
CVE-2026-101322In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request handler a…0.3%높음8.3
CVE-2026-105849Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and…0.3%높음7.7
CVE-2026-119564Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows…0.3%보통6.0
CVE-2026-42630Unauthenticated Sensitive Data Exposure in Web Plura Backup & Restore Manager <= 0.2.25 versions.0.3%높음7.5
CVE-2026-62043Unauthenticated Sensitive Data Exposure in Contact Form 7 – Dynamic Text Extension <= 5.0.7 versions.0.3%높음7.5
CVE-2026-63630BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, deserializeWorkflow() accep…0.3%낮음3.4
CVE-2026-114173The Ortto plugin for WordPress before 1.0.25 did not filter the WooCommerce product data it embedded in public…0.3%보통5.3
CVE-2026-97240Unauthenticated Sensitive Data Exposure in StifLi Backup Tools <= 2.2.7 versions.0.3%높음7.5
CVE-2026-48200Insertion of Sensitive Information Into Sent Data vulnerability in Barn2 Plugins Document Library Lite documen…0.3%보통5.3
CVE-2026-89203A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0). Affected devices do not prope…0.3%보통5.3
CVE-2026-87015Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 until 0.11.1…0.3%보통6.8
CVE-2026-66666Insertion of Sensitive Information Into Sent Data vulnerability in Automattic WordPress allows Retrieve Embedd…0.3%보통6.9
CVE-2026-107761Several Postiz endpoints return the complete database row of the record they operate on instead of only the fi…0.3%보통5.3
CVE-2026-116689follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects. From 1.16.0 …0.3%보통5.9
CVE-2026-86497In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project …0.3%보통6.8
CVE-2026-103335Insertion of Sensitive Information Into Sent Data vulnerability in Deepen Bajracharya Video Conferencing with …0.3%보통5.3
CVE-2026-110361Insertion of Sensitive Information Into Sent Data vulnerability in ClikIT Infinite Uploads infinite-uploads al…0.3%보통6.5
CVE-2023-25996Insertion of Sensitive Information Into Sent Data vulnerability in Pluggabl LLC. Booster Elite for WooCommerce…0.3%보통6.5
CVE-2026-78303Joomla Extension - joomshaper.com - Unvalidated Email Destination & Form Manipulation in Booking Requests in S…0.3%보통6.9
CVE-2026-105777GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 1…0.3%보통4.3
CVE-2026-42419Unauthenticated Sensitive Data Exposure in Swish Migrate and Backup <= 1.4.0 versions.0.3%보통5.9
CVE-2026-81804Unauthenticated Sensitive Data Exposure in ZHBackup – Backup, Restore & Migration <= 2.4.2 versions.0.2%높음7.5
CVE-2026-91198GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads ser…0.2%보통6.9
CVE-2026-105877Insertion of Sensitive Information Into Sent Data vulnerability in QuarkA QA Analytics qa-heatmap-analytics al…0.3%보통6.9
CVE-2026-39791Unauthenticated Sensitive Data Exposure in Mailjet Email Marketing <= 6.2.3 versions.0.3%보통5.3
CVE-2026-109695Insertion of Sensitive Information Into Sent Data vulnerability in WPManageNinja FluentCart fluent-cart allows…0.2%높음7.5
CVE-2026-97307Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost…0.2%높음7.5
CVE-2026-86450Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Compa…0.2%높음7.5
CVE-2026-19601Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to invalida…0.2%보통4.9
CVE-2026-105742Docling simplifies document processing by parsing diverse formats and providing integrations with the generati…0.2%낮음3.7
CVE-2026-101043pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand ${VAR} environment-variable placeholders …0.2%높음8.3
CVE-2026-87109An authenticated Ops Manager organization member can retrieve another member's pending authenticator enrollmen…0.2%보통6.0
CVE-2026-19541Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to require …0.2%보통6.5
CVE-2026-66435Insertion of Sensitive Information Into Sent Data vulnerability in Devin Walker WP Rollback wp-rollback allows…0.2%보통5.9
CVE-2026-108489Insertion of Sensitive Information Into Sent Data vulnerability in PluginUs.Net Active Products Tables for Woo…0.2%보통5.3
CVE-2026-62088Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded …0.2%보통5.3
CVE-2026-103280Ghost from version 0.8.0 before 6.23.0 contains an information disclosure vulnerability in its setup endpoint:…0.2%보통6.9
CVE-2026-85307Insertion of Sensitive Information Into Sent Data vulnerability in Kevin Pirnie KP Agent Ready allows Retrieve…0.2%보통5.3
CVE-2026-105068Insertion of Sensitive Information Into Sent Data vulnerability in Pixelite Events Manager events-manager allo…0.2%보통5.3
CVE-2026-32584Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – …0.2%보통5.3
CVE-2026-103345Insertion of Sensitive Information Into Sent Data vulnerability in Shamim Rajani Pie Register pie-register all…0.2%보통5.3
CVE-2026-62058Insertion of Sensitive Information Into Sent Data vulnerability in WPExperts CF7 Apps contact-form-7-honeypot …0.2%보통5.3
CVE-2026-103336Insertion of Sensitive Information Into Sent Data vulnerability in Smackcoders Inc. WP Ultimate CSV Importer w…0.2%보통5.3
CVE-2026-19603Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize…0.2%보통4.3
CVE-2026-104402Insertion of Sensitive Information Into Sent Data vulnerability in farvisun Mindio Magic MCP mindio-magic-mcp …0.2%보통4.3
CVE-2026-89332Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE befo…0.2%보통6.7
CVE-2026-75559The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive…0.2%보통6.9
CVE-2026-103281Ghost (npm package 'ghost') versions from 3.23.0 up to, but not including, 6.23.0 expose API keys to users wit…0.2%보통5.3
CVE-2026-114485Insufficient protection of sensitive information in the user list endpoint in Devolutions Server 2026.3.10.0 a…0.1%미평가
CVE-2026-107313pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 and 42.7.5 can send the previous contents of the GSS send …0.1%보통4.2
CVE-2026-107315pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its decl…0.1%보통5.3
CVE-2026-86505In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Ma…0.1%낮음3.3
CVE-2026-120716Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions…미평가
CVE-2026-115293Insertion of Sensitive Information Into Sent Data (CWE-201) in Kibana Observability onboarding can lead to dis…보통6.5
CVE-2026-114183Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes AnyWhere Elementor anywhere-element…보통6.5
CVE-2026-121554cordova-plugin-advanced-http 1.5.0 through 3.3.1 contains an information disclosure vulnerability that leaks c…높음8.2
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.