CWE-203 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-203 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2024-39891In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an una…1.7%보통5.3CVE-2026-97788Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attack…0.7%높음7.5CVE-2026-97782Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampe…0.5%보통6.8CVE-2026-63567Observable discrepancy in IesEngine.DecryptBlock in Legion of the Bouncy Castle Inc. bc-csharp befor…0.5%높음8.2CVE-2026-95270A flaw has been found in dgtlmoon changedetection.io up to 0.60.7. The affected element is the funct…0.4%낮음2.9CVE-2026-105675Ghost is a Node.js content management system. From 4.39.0 until 6.64.0, staff users with permission …0.4%높음7.5CVE-2026-87478Observable discrepancy in Autofill in Google Chrome prior to 153.0.8010.36 allowed a remote attacker…0.4%보통6.5CVE-2026-103272Ghost versions from 2.10.0 before 6.63.0 contain a staff enumeration vulnerability in the content AP…0.4%높음8.7
전체 목록
52건
CVE-2026-53933Maravel, a PHP framework oriented towards dependency injection, prior to version 10.73.1 has a side-channel in…0.3%보통6.9
CVE-2026-76406In Splunk SOAR versions below 8.7.0, an unauthenticated user with access to encrypted credential data from an …0.3%보통5.9
CVE-2026-59341A security vulnerability exists in the Sealed Secrets controller's unauthenticated POST endpoints. By submitti…0.3%보통4.2
CVE-2026-84461Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, the two-factor login step …0.3%보통6.9
CVE-2026-104416Ghost from 4.39.0 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows …0.3%높음7.7
CVE-2026-63573Observable discrepancy in the CMS RSA PKCS#1 v1.5 key-transport unwrap (KeyTransRecipientInformation.UnwrapKey…0.3%높음8.2
CVE-2026-110926A flaw was found in OpenSSH. When compression is negotiated, channels on the same connection share one LZ77 di…0.3%보통5.3
CVE-2026-56098A flaw was found in rubygem-katello. The RegistryProxiesController in Katello contains an authorization bypass…0.3%보통4.3
CVE-2026-114064Snipe-IT before 8.7.0 contains a server-side request forgery vulnerability in the webhook testing feature that…0.3%보통5.1
CVE-2026-87518Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote atta…0.3%보통5.3
CVE-2025-5802The self-registration flow accepts user-supplied input for usernames without adequately preventing the disclos…0.3%보통5.3
CVE-2026-87459Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain s…0.2%보통6.5
CVE-2026-105652Ghost is a Node.js content management system. From 0.7.2 until 6.64.0, any staff-level user was able to determ…0.3%낮음3.1
CVE-2026-91725Observable discrepancy in CSS in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to leak sensit…0.2%보통5.3
CVE-2026-91714Observable discrepancy in Fonts in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging s…0.2%보통5.3
CVE-2026-87623Observable discrepancy in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging soc…0.2%보통6.5
CVE-2026-87620Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sens…0.2%보통6.5
CVE-2026-87516Observable discrepancy in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak…0.2%보통4.3
CVE-2026-109337SurrealDB before 3.3.0 contains an authorization bypass vulnerability that allows record users to infer field …0.2%보통5.3
CVE-2026-87566Observable discrepancy in Layout in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sen…0.2%보통5.3
CVE-2026-111933Coder before 2.29.17, 2.30.0 before 2.32.7, 2.33.0 before 2.33.8, and 2.34.0 before 2.34.2 contains a user enu…0.2%보통6.3
CVE-2025-13591The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response when a usern…0.2%보통5.3
CVE-2025-13166The SMS OTP flow fails to adequately handle error messages, allowing an attacker to infer the existence of reg…0.2%낮음3.7
CVE-2026-87539Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain …0.2%낮음3.1
CVE-2026-106303Observable discrepancy in Autofill AI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who ha…0.2%보통5.3
CVE-2026-88834A flaw was found in BusyBox's httpd web server. When configured with system password authentication, a user ex…0.2%낮음3.7
CVE-2026-106506Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolde…0.2%보통5.3
CVE-2026-106180Observable discrepancy in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to poten…0.2%낮음3.1
CVE-2026-106210Observable discrepancy in Scroll in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain c…0.2%낮음3.1
CVE-2026-103275Ghost 5.42.2 before 6.58.0 contains an information disclosure vulnerability in the Admin API bulk post and pag…0.2%보통5.3
CVE-2026-106351Observable discrepancy in Safebrowsing in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote atta…0.2%보통5.3
CVE-2026-104415Ghost from 0.7.2 before 6.64.0 contains an information disclosure vulnerability in the Admin API that allows s…0.2%낮음2.3
CVE-2026-106336Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cros…0.2%보통4.3
CVE-2026-11795Observable discrepancy vulnerability in Softtr Informatics Trading Limited Company E-Commerce Pack allows Acco…0.2%보통5.3
CVE-2026-87619Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak c…0.2%보통4.3
CVE-2026-110141Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cros…0.2%낮음3.1
CVE-2026-18560Mattermost versions 11.10.x <= 11.10.0, 11.7.x <= 11.7.9, 11.9.x <= 11.9.1, 11.8.x <= 11.8.5 fail to validate …0.2%보통4.3
CVE-2026-114199`GET /api/v1/users/{username}/heatmap` computed the contribution heatmap with the repository access of the tok…0.2%미평가
CVE-2026-65626The pure-Erlang RSAES-PKCS1-v1_5 decryption in the jose_jwa_pkcs1 module is a Bleichenbacher padding oracle. e…0.1%보통5.9
CVE-2026-56888In multiple locations, there is a possible permission bypass due to side channel information disclosure. This …0.1%보통6.2
CVE-2026-121223Observable discrepancy in Media in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to leak cros…미평가
CVE-2026-121187Observable discrepancy in Paint in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain se…미평가
CVE-2026-121138Observable discrepancy in CORS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain cro…미평가
CVE-2026-121130Observable discrepancy in Forms in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain se…미평가
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.