CWE-284 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-284 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 랜섬웨어 캠페인에 사용됨CVE-2023-27350This vulnerability allows remote attackers to bypass authentication on affected installations of Pap…100.0%심각9.8● 실제 악용이 확인됨CVE-2019-1653A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual G…99.9%높음7.5● 실제 악용이 확인됨CVE-2023-23752An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized…99.8%보통5.3● 실제 악용이 확인됨CVE-2023-29298Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earli…99.8%높음7.5● 실제 악용이 확인됨CVE-2023-38205Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are a…99.8%높음7.5● 실제 악용이 확인됨CVE-2015-3306The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files vi…99.5%심각10.0● 실제 악용이 확인됨CVE-2024-27348RCE-Remote Command Execution vulnerability in Apache HugeGraph-Server.This issue affects Apache Huge…99.2%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2012-4681Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update …98.5%심각9.8
전체 목록
120건
CVE-2024-20767악용 확인ColdFusion versions 2023.6, 2021.12 and earlier are affected by an Improper Access Control vulnerability that …98.5%높음7.4
CVE-2023-24489악용 확인A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if explo…97.3%심각9.8
CVE-2023-26360악용 확인Adobe ColdFusion versions 2018 Update 15 (and earlier) and 2021 Update 5 (and earlier) are affected by an Impr…97.3%높음8.6
CVE-2013-0422랜섬웨어 악용Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by…97.1%심각9.8
CVE-2011-3544악용 확인Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Upda…96.7%심각9.8
CVE-2025-12480악용 확인Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows acce…95.7%심각9.1
CVE-2026-35616악용 확인A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenti…94.0%심각9.8
CVE-2022-23134악용 확인After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, …93.9%보통5.3
CVE-2012-1723랜섬웨어 악용Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and ear…93.6%심각9.8
CVE-2016-3427악용 확인Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 …92.3%심각9.8
CVE-2012-5076악용 확인Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and ear…91.3%심각9.8
CVE-2014-3120악용 확인The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers…88.6%높음8.1
CVE-2026-34908악용 확인A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in U…88.3%심각10.0
CVE-2020-8193악용 확인Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 1…88.3%보통6.5
CVE-2026-48907악용 확인A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthen…85.4%심각10.0
CVE-2013-2423악용 확인Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and ea…85.2%낮음3.7
CVE-2025-33073악용 확인Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.82.7%높음8.8
CVE-2025-31125악용 확인Vite is a frontend tooling framework for javascript. Vite exposes content of non-allowed files using ?inline&i…74.9%높음7.5
CVE-2026-21962악용 확인Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middlew…73.2%심각10.0
CVE-2021-22941랜섬웨어 악용Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticat…53.6%심각9.8
CVE-2020-8196악용 확인Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 1…26.3%보통4.3
CVE-2024-40766랜섬웨어 악용An improper access control vulnerability has been identified in the SonicWall SonicOS management access, poten…18.4%심각9.8
CVE-2015-4902악용 확인Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity …13.6%보통5.3
CVE-2019-11634랜섬웨어 악용Citrix Workspace App before 1904 for Windows has Incorrect Access Control.8.1%심각9.8
CVE-2025-59230악용 확인Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate p…2.7%높음7.8
CVE-2020-2506악용 확인The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access con…2.0%심각9.8
CVE-2025-24989악용 확인An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges …1.6%심각9.8
CVE-2026-81963악용 확인Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized at…0.4%높음7.8
CVE-2026-54629Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes file-backed SQ…1.0%높음7.5
CVE-2026-120192A security vulnerability has been detected in Presenton up to 0.9.11-beta. This affects an unknown part of the…0.9%보통5.5
CVE-2026-112946Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3, import an…0.9%보통6.3
CVE-2026-12265Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA fai…0.9%높음8.8
CVE-2026-70217Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information o…0.9%보통4.9
CVE-2026-83944Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a netwo…0.8%심각10.0
CVE-2026-81941IBM Langflow OSS 1.0.0 through 1.11.5 allows an authenticated non-administrative user could execute arbitrary …0.8%높음8.8
CVE-2026-50006Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server forwards unauthenticat…0.8%심각9.1
CVE-2026-102860Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges ove…0.7%높음8.8
CVE-2026-69268Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne…0.7%높음8.8
CVE-2026-95704A vulnerability in the web-based management interface of wireless network management systems could allow an au…0.7%높음7.2
CVE-2026-106513MISP exposes critical infrastructure settings—specifically the Redis host addresses used by the core applicati…0.6%보통6.9
CVE-2026-75998ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system re…0.6%높음7.5
CVE-2026-55494Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.4, Tugtainer…0.6%심각9.8
CVE-2026-86242Bifrost HTTP transport before 2.0.0 accepts an enabled custom plugin whose path is an HTTP URL through unauthe…0.6%높음8.1
CVE-2026-55181Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.3, Tugtainer…0.6%심각9.4
CVE-2026-76709A vulnerability exists in the internal administrative component of Analytics and Location Engine (ALE). Succes…0.6%심각9.8
CVE-2026-104335IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to execute arbitrary code du…0.6%높음8.8
CVE-2026-94036A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted…0.6%높음7.4
CVE-2026-63695Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Session Fixation vulnerability. An unau…0.5%심각9.8
CVE-2026-77487Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.0.5%높음8.8
CVE-2026-73028Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.0.5%높음8.8
CVE-2026-77371Redash is a package for data visualization and sharing. From 26.0.0 until 26.9.0, the DuckDB query runner's _c…0.5%심각9.3
CVE-2026-69282Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne…0.5%높음8.8
CVE-2026-69273Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne…0.5%높음8.8
CVE-2026-94148A vulnerability was determined in ScadaBR up to 1.1. Impacted is the function EmportDwr.createExportJSON of th…0.5%보통5.5
CVE-2026-93971A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1. Impacted is an unknown function of the file back…0.5%보통6.9
CVE-2026-107015Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read not…0.5%심각9.1
CVE-2026-92927A vulnerability was found in SourceCodester Drug Recommendation System 1.0. This issue affects some unknown pr…0.5%보통5.5
CVE-2026-90565A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ec…0.5%보통5.5
CVE-2026-86239A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAct…0.5%보통5.5
CVE-2026-85517A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown funct…0.5%보통5.5
CVE-2026-83001Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engi…0.5%심각9.1
CVE-2026-86666A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.15. Impacted is the function upload_jso…0.5%보통5.5
CVE-2026-104974Plane is an open-source project management tool. Prior to 1.4.0, a user whose account has been deactivated by …0.5%높음8.1
CVE-2026-76441As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gatewa…0.5%심각9.8
CVE-2026-83602Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in s…0.5%보통6.5
CVE-2026-20121A vulnerability in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Fire…0.5%보통5.3
CVE-2026-73959Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Suppor…0.5%높음8.8
CVE-2026-83032Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). …0.5%높음8.8
CVE-2026-82999Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabl…0.5%심각9.9
CVE-2026-83039Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Suppor…0.5%심각9.9
CVE-2026-83033Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). …0.5%높음8.8
CVE-2026-83031Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites). …0.5%심각9.9
CVE-2026-83008Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Clien…0.5%높음8.8
CVE-2026-82998Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabl…0.5%심각9.9
CVE-2026-82997Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabl…0.5%심각9.9
CVE-2026-90603A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is…0.5%보통6.9
CVE-2026-108578A vulnerability was identified in Neterbit NW-431F 20250715. Impacted is an unknown function of the file /sms.…0.5%보통6.9
CVE-2026-112147A vulnerability was found in ai-genius-automations octoally up to 1.0.87. The impacted element is an unknown f…0.5%보통5.5
CVE-2026-112149A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0…0.5%보통5.5
CVE-2026-112025A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c…0.5%보통5.5
CVE-2026-119620A vulnerability was determined in 37954679 cak-filemanagement-system up to 5e6433246475e66462e1fea980688de96a0…0.5%보통5.5
CVE-2026-83006Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Clien…0.5%심각9.1
CVE-2026-63045Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Serve…0.5%높음7.5
CVE-2026-116122A security flaw has been discovered in NocoDB up to 2026.07.0. Impacted is the function AuthService.validateUs…0.4%보통6.3
CVE-2026-83097Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services, C/S, Charmod…0.5%보통6.5
CVE-2026-95500A vulnerability has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. Impacted is the fun…0.5%보통5.5
CVE-2026-95499A flaw has been found in JosephChuks php-file-manager-with-code-editor up to 3.0. This issue affects the funct…0.5%보통6.9
CVE-2026-77169A vulnerability in the team folders (formerly group folders) app when used in combination with the workspace a…0.5%보통6.5
CVE-2026-83017Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distrib…0.4%높음8.8
CVE-2026-73949Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services)…0.4%높음8.8
CVE-2026-73948Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Suppor…0.4%심각9.9
CVE-2026-71047Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core). Supported …0.4%높음8.8
CVE-2026-83009Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Clien…0.4%높음8.8
CVE-2026-83005Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Clien…0.4%높음8.8
CVE-2026-83013Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Clien…0.4%높음8.8
CVE-2026-73942Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI). S…0.4%높음8.8
CVE-2026-101055A security flaw has been discovered in Thinkware U3000 up to 1.02.04. Affected by this vulnerability is the fu…0.5%보통5.5
CVE-2026-107037Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 72600 allows unauthor…0.4%높음7.5
CVE-2026-78313Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.0.5%보통6.5
CVE-2013-10077A weakness has been identified in OctoPrint 1.0.0. This impacts the function getSettings of the file src/octop…0.4%보통5.5
CVE-2026-100883A flaw has been found in Krayin laravel-crm up to 2.2.5. The affected element is an unknown function of the fi…0.5%낮음2.1
CVE-2026-93895IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote a…0.4%심각9.1
CVE-2026-111057Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 unt…0.4%심각10.0
CVE-2026-103093ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. T…0.4%심각9.4
CVE-2026-83019Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supporte…0.4%높음8.1
CVE-2026-20192As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services E…0.4%심각10.0
CVE-2026-105635Plane is an open-source project management tool. Prior to 1.4.0, ProjectJoinEndpoint at GET /api/workspaces/{s…0.4%높음7.4
CVE-2026-105482A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.re…0.4%높음7.4
CVE-2026-95624The Tauri updater plugin's 'check' IPC command accepts an allowDowngrades boolean parameter directly from fron…0.4%보통6.8
CVE-2026-83043Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer). Suppor…0.4%심각9.6
CVE-2026-83040Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services)…0.4%심각9.6
CVE-2026-100115CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Securit…0.4%높음7.5
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.