CWE-209 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-209 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2024-29059.NET Framework Information Disclosure Vulnerability98.6%높음7.5● 실제 악용이 확인됨CVE-2025-47813loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the appli…62.5%보통4.3● 실제 악용이 확인됨CVE-2013-7331The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to…50.2%보통6.5CVE-2026-67383Generation of error message containing sensitive information in SQL Server allows an authorized atta…1.0%보통6.5CVE-2026-69552Generation of error message containing sensitive information in Windows Print Spooler Components all…0.9%보통5.7CVE-2026-66306Generation of error message containing sensitive information in Skype for Business allows an unautho…0.5%보통6.5CVE-2026-45723Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and 1.7.3, ma…0.5%낮음2.7CVE-2026-68886Use after free in Windows Network Connection Broker allows an authorized attacker to disclose inform…0.5%보통5.5
전체 목록
61건
CVE-2026-69684Generation of error message containing sensitive information in Windows Error Reporting allows an authorized a…0.5%보통5.5
CVE-2026-116478A vulnerability was detected in a2aproject a2a-go up to 2.4.0. This affects the function CreateExecutor of the…0.4%보통6.9
CVE-2026-112947Vite is a frontend tooling framework for JavaScript. From 8.2.0 until 8.2.4 and 8.3.3, the first 4 bytes of fi…0.4%보통6.3
CVE-2026-92936vm2 versions 3.11.0 through 3.11.6 leak absolute host filesystem paths to sandboxed code through error stack f…0.4%보통6.9
CVE-2026-91882Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information …0.4%높음8.6
CVE-2026-115496Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 m…0.4%보통6.9
CVE-2026-85246Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina component. Thi…0.4%보통5.3
CVE-2026-85315Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel gRPC component. Thi…0.4%보통5.3
CVE-2026-85257Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component. This…0.4%보통5.3
CVE-2026-84180Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. …0.4%보통5.3
CVE-2026-85709LightRAG provides simple and fast retrieval-augmented generation. Prior to 1.5.5, the LightRAG API server retu…0.4%보통5.3
CVE-2026-84499A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Survey questions of type pas…0.4%높음7.7
CVE-2026-62979jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peer. Prior to 0.1.0, `middle…0.4%높음8.4
CVE-2026-83786Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to …0.4%보통4.7
CVE-2026-69294Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized…0.3%보통5.5
CVE-2026-101259Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CoAP component. Thi…0.3%보통5.3
CVE-2026-67080HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or ex…0.3%보통6.5
CVE-2026-110889Generation of Error Message Containing Sensitive Information vulnerability in Gantry Gantry 5 Framework gantry…0.3%높음7.5
CVE-2026-113705A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown processing of…0.3%보통6.9
CVE-2026-3628IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.0.3%보통5.3
CVE-2026-116479A flaw has been found in a2aproject a2a-java up to 1.2.0.Final. This impacts the function getMessage of the co…0.3%보통5.3
CVE-2026-116477A security vulnerability has been detected in a2aproject a2a-dotnet up to 1.0.0-preview2. The impacted element…0.3%보통5.3
CVE-2026-105828Parse Server 8.2.2 before 8.6.92 and 9.0.0 before 9.10.1-alpha.12 contains an information disclosure vulnerabi…0.3%보통6.3
CVE-2026-105707A security vulnerability has been detected in uptrace up to 2.1.0-beta.8. Affected by this vulnerability is th…0.3%보통5.5
CVE-2026-114348webpack-dev-server is a development server that provides live reloading for webpack projects. In versions from…0.3%보통5.3
CVE-2026-105283Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_typescript allow…0.3%보통6.3
CVE-2026-54561MCP Memory Keeper is an MCP server for persistent context management in AI coding assistants. Prior to 0.13.0,…0.3%보통6.2
CVE-2026-75597pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, the `/web/<path:…0.3%보통5.3
CVE-2026-14909IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information disclosure …0.3%보통6.5
CVE-2026-71463Notification template Jinja AST whitelist only inspects static Getattr nodes. Dynamic subscripts (job['job'+'_…0.3%낮음2.7
CVE-2026-118643n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 stores credential secrets in execution error …0.3%보통5.3
CVE-2026-4638PRTG Network Monitor before version 26.2.120.1449 ships a demo EXE/Script sensor that multiplies two integer p…0.3%높음7.1
CVE-2026-55375canto-saas-api is a PHP library for interacting with the Canto SaaS API. Prior to version 3.0.0, OAuth2Request…0.3%보통5.3
CVE-2026-100677stoatchat before 0.15.5 contains an account enumeration vulnerability in the login endpoint that exposes sourc…0.3%보통6.9
CVE-2026-118272A vulnerability was detected in a2ui-project a2ui up to 0.10.6. Affected is the function DataContext.dispatchE…0.2%낮음2.1
CVE-2026-67171HCL BigFix Service Management is affected by an Information Disclosure vulnerability because an exposed API en…0.2%보통5.3
CVE-2026-67106HCL BigFix Service Management is affected by an Information Disclosure vulnerability because two exposed API e…0.2%보통5.3
CVE-2026-3626IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to obtain sensitive information when a detailed …0.2%보통5.3
CVE-2025-1350IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow a remote attacker to obtai…0.2%보통5.3
CVE-2026-86607Internal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator. This issue affect…0.2%보통4.3
CVE-2026-1030IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 generates …0.2%보통4.3
CVE-2026-71461HostList.list() catches bare Exception and returns str(e) verbatim. Via host_filter, any authenticated user tr…0.2%보통4.3
CVE-2026-67172HCL BigFix Service Management is affected by an Information Disclosure vulnerability the application returns s…0.2%낮음3.7
CVE-2026-102904JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Noteb…0.2%보통5.4
CVE-2026-4921IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a de…0.2%낮음2.7
CVE-2026-78021Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error…0.2%낮음3.7
CVE-2026-101029Gitea's repository migration and pull mirror egress checks could be bypassed with a hostname that returns mult…0.2%보통4.3
CVE-2026-66248iControl is affected by an Improper Error Handling vulnerability, which could allow an unauthenticated attacke…0.2%낮음3.1
CVE-2026-85115A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.6…0.2%보통6.8
CVE-2026-55102hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, every API met…0.1%보통5.8
CVE-2026-105770Octo STS (github.com/octo-sts/app) before 0.11.2 returns trust policy configuration to callers whose OIDC toke…보통5.3
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.