CWE-204 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-204 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
CVE-2026-110310A remote user who can read encrypted objects in the S3 bucket can force a padding downgrade by alter…0.5%보통6.0CVE-2026-119700WPGraphQL before 2.24.2 contains an information disclosure vulnerability that allows unauthenticated…0.4%보통6.9CVE-2026-111235An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridia…0.4%심각9.1CVE-2026-105664The endpoint exposes an observable response discrepancy when processing ID values. A request submitt…0.3%보통6.9CVE-2026-104439YesWiki before 4.6.7 contains a user enumeration vulnerability in LostPasswordAction.php that allows…0.3%높음7.1CVE-2026-84717A flaw was found in the Ansible Automation Platform automation-controller. The unauthenticated Bitbu…0.3%보통5.3CVE-2026-100164Observable response discrepancy vulnerability in Rolantis Information Technologies Tourism Industry …0.3%높음7.5CVE-2026-19080Observable response discrepancy vulnerability in Menulux Software Inc. Menulux Portal allows Account…0.3%높음7.5
전체 목록
27건
CVE-2026-71458URLModificationMiddleware resolves named-URL lookups against unfiltered Model.objects before RBAC. The 403→404…0.3%보통5.0
CVE-2026-111056FOSSBilling is an open source billing and client-management platform. From 0.1.0 until 0.8.7, the unauthentica…0.3%보통6.9
CVE-2026-89173Smart Video Intercom System developed by Kingdom Communication Associated has a Sensitive Data Exposure vulner…0.3%보통6.9
CVE-2026-111887phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an account enumeration vulnerability that all…0.3%보통6.9
CVE-2026-107843Contao is an Open Source CMS. From version 4.1.0 until 5.3.50 and 5.7.12, ModuleRegistration::compile() enters…0.3%보통5.3
CVE-2026-19205Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Panel allows Account Footprinting…0.2%높음7.5
CVE-2026-71462StringListPathField.to_internal_value() calls os.path.exists() on unbounded user-supplied paths. 200 vs 400 re…0.3%보통4.1
CVE-2026-109206LogicalDOC Community Edition through 9.3 contains a username enumeration vulnerability that allows unauthentic…0.2%보통6.9
CVE-2026-14177Observable response discrepancy vulnerability in IKAS Technology Inc. Ikas E-Commerce Infrastructure allows Ac…0.2%높음7.5
CVE-2026-49442Cacti is an open source performance and fault management framework. Prior to version 1.2.31, a User Enumeratio…0.2%보통5.3
CVE-2026-82043UTMStack before 11.2.16 contains an account enumeration vulnerability that allows unauthenticated attackers to…0.2%보통6.9
CVE-2024-7478When a WSO2 product is configured to use an external user store, the system fails to adequately obscure the ex…0.2%보통5.8
CVE-2026-86778Observable response discrepancy vulnerability in Maksisoft Technology, IT, and Software Industry and Trade Inc…0.2%보통5.3
CVE-2026-102587A flaw was found in Moodle. User list filters do not properly enforce visibility restrictions on user profile …0.2%낮음2.7
CVE-2026-86758Snipe-IT before 8.7.0 fails to properly enforce the viewKeys authorization gate in CSV export and API index en…0.2%높음7.1
CVE-2026-111386Nezha from 1.7.0 before 2.3.15 contains an information disclosure vulnerability that allows authenticated memb…0.2%보통5.3
CVE-2026-9161Observable response discrepancy vulnerability in DernekPlus Website Template allows Account Footprinting. This…0.2%보통5.3
CVE-2026-103526In Thelia v2.6.0, both the administrative login and forgotten password endpoints return different responses fo…0.2%낮음3.7
CVE-2026-59785Host search in Frontend allows filtering by fields that are not displayed, including stored IPMI and PSK crede…0.2%보통5.1
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.