CWE-285 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-285 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 랜섬웨어 캠페인에 사용됨CVE-2021-28799An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid B…78.3%심각9.8● 실제 악용이 확인됨CVE-2026-58704In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This coul…0.6%높음8.8CVE-2026-100885A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown function of the…1.0%보통5.5CVE-2026-70200Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps a…0.9%심각10.0CVE-2026-105284A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the…0.8%심각9.3CVE-2026-85878Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate pri…0.8%심각9.9CVE-2026-116368A vulnerability was determined in DeepSeek Harness up to 0.2.0-rc.2. This issue affects some unknown…0.6%보통6.9CVE-2026-108899A flaw has been found in tobychui zoraxy up to 3.3.4. This impacts the function handleBasicAuth of t…0.6%보통5.5
전체 목록
120건
CVE-2026-93961A security flaw has been discovered in Dromara UJCMS up to 12.3.1. The affected element is the function userna…0.6%보통6.9
CVE-2026-94379The login() function in MISP's UsersController.php contained insufficient HTTP method validation for several s…0.6%보통6.9
CVE-2026-42922A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A …0.5%심각9.8
CVE-2026-95754In MISP's UsersController login() method, the pre-authentication database query used for the TOTP (two-factor …0.5%보통6.9
CVE-2026-112905Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior …0.5%심각9.0
CVE-2026-77239WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, WACRM flow and automation wr…0.5%높음8.1
CVE-2026-108890A vulnerability has been found in BlackBeltTechnology pi-agent-dashboard up to 0.8.0. Affected by this issue i…0.5%낮음2.1
CVE-2026-61833zot is a container image and artifact registry based on the Open Container Initiative Distribution Specificati…0.5%높음8.1
CVE-2026-109605A security vulnerability has been detected in SourceCodester Simple Cafe Billing System 1.0. This affects the …0.5%보통5.5
CVE-2026-56828Shopper is a Headless e-commerce Admin Panel. From 2.8.0 until 2.8.1, three Shopper Livewire admin components …0.4%높음8.8
CVE-2026-84241IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to imprope…0.5%높음8.1
CVE-2026-90566A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77…0.5%보통5.5
CVE-2026-53628GLPI is a free asset and IT management software package. From 0.84 until 10.0.26 and 11.0.8, an administrator …0.5%보통5.9
CVE-2026-16346IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary c…0.5%심각9.9
CVE-2026-63330Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. Prior to 0.25.6, api_get_recording_str…0.4%높음7.7
CVE-2026-55383InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional in…0.4%높음8.2
CVE-2026-61838Lychee is a free, open-source photo-management tool. Prior to 7.6.3, GET /api/v2/Zip authorizes album and phot…0.4%높음8.2
CVE-2026-85055Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.22.0, field-level read pe…0.4%높음7.1
CVE-2026-113696Improper authorization in the SmartIT change approval feature of BMC IT Service Management Suite versions 25.3…0.4%보통5.3
CVE-2026-86263A vulnerability was detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. This impac…0.4%보통5.5
CVE-2026-86262A security vulnerability has been detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384…0.4%보통5.5
CVE-2026-86261A weakness has been identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The impa…0.4%보통5.5
CVE-2026-114361A vulnerability was detected in HarnessRouter up to 0.31.10. This affects an unknown function of the file gate…0.4%보통6.3
CVE-2026-95805A typo in the MISP ACLComponent access control configuration caused the ACL rule for the previewEventAttribute…0.4%보통5.3
CVE-2026-93955A vulnerability was detected in grimmory-tools grimmory up to 3.3.3/3.4.1. Affected by this vulnerability is t…0.4%낮음2.1
CVE-2026-108924A vulnerability was identified in getkirby Kirby up to 4.9.5/5.5.3. Affected by this issue is the function Opt…0.4%보통5.3
CVE-2026-90521A vulnerability was found in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70…0.4%낮음2.1
CVE-2026-120224A security flaw has been discovered in Oray Pugongying X5 Pro up to 7.6.1. Affected is the function run_apis_b…0.4%높음8.6
CVE-2026-84076IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions …0.4%높음7.6
CVE-2026-86804A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. This vulnerability affects the functi…0.4%보통6.9
CVE-2026-114245A weakness has been identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda…0.4%보통5.5
CVE-2026-93954A security vulnerability has been detected in grimmory-tools grimmory up to 3.3.3/3.4.1. Affected is the funct…0.4%낮음2.1
CVE-2026-113643A vulnerability was found in EspoCRM up to 9.3.10/10.0.10. This affects the function ImageSourceProvider::get …0.4%보통5.3
CVE-2026-76420A vulnerability in the internal configuration of the Apache JServ Protocol (AJP) connector for Cisco Secu…0.4%심각9.0
CVE-2026-85105A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function _sess_nowait…0.4%보통6.9
CVE-2026-92087@fastify/auth is a Fastify plugin that composes multiple authentication and authorization strategies into a si…0.4%높음8.1
CVE-2026-90520A vulnerability has been found in jaychouchannel Tourism-Management-System up to 84d8ec384f669df3985293dab293b…0.4%낮음2.1
CVE-2026-20286A vulnerability in the web-based management interface of Cisco Identify Services Engine (ISE) could allow an a…0.4%보통4.3
CVE-2026-20285A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Pa…0.4%보통4.3
CVE-2026-55775OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao users granted capa…0.4%낮음2.3
CVE-2026-54178backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of Laravel pa…0.4%높음8.1
CVE-2026-52822Kimai is an open-source time tracking application. Prior to 2.58.0, PATCH /api/timesheets/{id}/restart, PATCH …0.4%보통5.3
CVE-2026-115477obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.13.0 until 1.…0.4%높음7.1
CVE-2026-94152A security vulnerability has been detected in Omega Solution FBP Fulfillment by People 2025. This impacts an u…0.4%낮음2.1
CVE-2026-95671In MISP, the CollectionsController add() method enforced the sharing-group usability authorization check and e…0.4%보통5.3
CVE-2026-103233A security vulnerability has been detected in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8f…0.4%낮음2.1
CVE-2026-93547A missing authorization check in the Vaadin Spreadsheet component allows an authenticated user of an applicati…0.4%보통5.3
CVE-2026-86105An improper authorization vulnerability in Fireware OS's Access Portal reverse proxy allows an authenticated, …0.4%보통6.0
CVE-2026-54551WireGuard Portal, or wg-portal, is a web-based configuration portal for WireGuard server management. From 2.2.…0.4%보통4.3
CVE-2026-45052Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the Liberty Web Services SO…0.3%심각9.3
CVE-2026-90517A vulnerability was identified in PHPGurukul Bank Locker Management System 1.0. This affects an unknown functi…0.3%보통5.5
CVE-2026-86183A vulnerability was identified in diem-project diem up to 5.1.3. This vulnerability affects unknown code of th…0.3%보통5.5
CVE-2026-85381A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f6…0.3%보통5.5
CVE-2026-104316IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running bac…0.3%보통6.5
CVE-2026-57121PraisonAI is a multi-agent teams system. From version 0.1.4 to before version 0.1.5 in praisonai-platform, a w…0.3%높음8.1
CVE-2026-67102HCL BigFix Service Management is affected by a high-severity Broken Access Control vulnerability, which could …0.4%높음8.1
CVE-2026-48717Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, AuthorizationCodeGrantTypeH…0.3%심각9.1
CVE-2026-21587This High severity Improper Authorization vulnerability was introduced in version 11.3.0 of Jira Service Manag…0.3%높음7.1
CVE-2026-21586This High severity Improper Authorization vulnerability was introduced in versions 7.4.0, 7.13.0, 8.5.0, 8.9.0…0.3%높음7.1
CVE-2026-53952GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS.…0.3%심각9.8
CVE-2026-54683NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residen…0.3%보통6.5
CVE-2026-62286Dozzle is a realtime log viewer for docker containers. Prior to 10.6.7, streamEvents in internal/web/events.go…0.3%보통4.3
CVE-2026-11934IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled t…0.3%높음7.2
CVE-2026-116199Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoogleCallback, which l…0.3%심각9.2
CVE-2026-84036IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions …0.3%높음7.4
CVE-2026-49463NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residen…0.3%보통6.5
CVE-2026-84314Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, the POST /api/users/:id user-manage…0.3%높음8.7
CVE-2026-16181IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.…0.3%높음7.4
CVE-2026-90858A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a…0.3%보통5.5
CVE-2026-113694Improper authorization in the SmartIT user attachment feature of BMC IT Service Management Suite versions 25.3…0.3%보통5.3
CVE-2026-116340A vulnerability was identified in iFlytek astron-agent up to 1.1.2. This impacts the function FileInfoV2Servic…0.3%낮음2.1
CVE-2026-70407Gitea's organization-list API does not enforce the read:organization token scope. A token limited to another c…0.3%보통4.3
CVE-2026-70218Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to ele…0.3%높음7.8
CVE-2026-86008Mailu is a mail server distributed as a set of Docker images. Prior to 8577c929b4ade04d3cd4210cf036601abd79355…0.3%높음7.2
CVE-2026-118173MISP Guard, a proxy that enforces security policies on MISP feed data, contained an incomplete validation chec…0.3%보통6.1
CVE-2026-86277A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0…0.3%보통5.5
CVE-2026-114249A vulnerability was detected in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84…0.3%보통5.5
CVE-2026-85638A weakness has been identified in jofpin trape 2.0. This affects an unknown part of the file core/user.py. Thi…0.3%보통5.5
CVE-2026-85378A vulnerability was identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c…0.3%보통5.5
CVE-2026-25254Improper authorization leads to Remote Code Execution via SocketIO interface.0.3%심각9.8
CVE-2026-103532A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAcce…0.3%보통6.9
CVE-2026-92799The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Authorizat…0.3%보통5.3
CVE-2026-55217GLPI is a free asset and IT management software package. From 0.85 until 10.0.26 and 11.0.8, a low-privileged …0.3%보통5.3
CVE-2026-108812A security vulnerability has been detected in SEMCMS up to 5.0. The impacted element is an unknown function of…0.3%보통5.5
CVE-2026-97647A security vulnerability has been detected in ningzichun student-management-system up to 98760f5711cf6dc8b4adc…0.3%보통5.5
CVE-2026-109116A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f…0.3%보통5.5
CVE-2026-33522Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service meta…0.3%보통5.3
CVE-2026-86009Mailu is a mail server distributed as a set of Docker images. Prior to f05aeb8322e2f61096af6b089d61ba6f40587d9…0.3%높음8.2
CVE-2026-49446Cosmos provides users the ability self-host a home server by acting as a secure gateway to your application, a…0.3%보통6.1
CVE-2026-112043A weakness has been identified in calcom cal.com and cal.diy up to 6.2.0. Impacted is the function createWebho…0.3%보통5.3
CVE-2026-75792IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to view administ…0.3%보통4.3
CVE-2026-97646A weakness has been identified in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca4…0.3%보통5.5
CVE-2026-62989Shopper is a Headless e-commerce Admin Panel. Prior to 2.10.0, the Variants Livewire component in `packages/ad…0.3%높음8.1
CVE-2026-105097A vulnerability was identified in Omega Solution CoinEx Crypto 2025. This impacts an unknown function of the f…0.3%낮음2.1
CVE-2026-90499A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This affects the function HrInfoController.upda…0.3%낮음2.1
CVE-2026-86212A vulnerability has been found in Open5GS 2.7.7/2.8.0. This vulnerability affects unknown code of the componen…0.3%낮음2.1
CVE-2026-80436IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of s…0.3%높음8.5
CVE-2026-105382A flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f6…0.3%보통5.5
CVE-2026-96762A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the function Unm…0.3%보통5.5
CVE-2026-104908MISP contains an improper input validation vulnerability in the decaying model import functionality. The impor…0.3%높음7.1
CVE-2026-105096A vulnerability was determined in Omega Solution CoinEx Crypto 2025. This affects an unknown function of the f…0.3%낮음2.1
CVE-2026-52825Kimai is an open-source time tracking application. Prior to 2.58.0, POST /api/teams/{id}/members/{userId} and …0.3%보통5.3
CVE-2026-104632Gitea Actions blocks the jobs of workflow runs from first-time fork pull request contributors until a maintain…0.3%높음8.8
CVE-2026-103506An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the…0.3%높음8.9
CVE-2026-80378IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of s…0.3%높음8.5
CVE-2026-96882A vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is t…0.3%보통5.5
CVE-2026-96881A vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks o…0.3%보통5.5
CVE-2026-96880A vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1. This impacts the function getBook of the…0.3%보통5.5
CVE-2026-85241A weakness has been identified in SpecterOps BloodHound up to 9.5.1. The affected element is the function NewV…0.3%보통5.3
CVE-2026-105571A flaw has been found in PickMall Lilishop up to 4.2.4. The impacted element is an unknown function of the fil…0.3%보통5.5
CVE-2026-81212IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into …0.3%심각10.0
CVE-2026-102293A vulnerability was identified in realjerrytang tacomall 1.0.0. Impacted is the function OrgStaffServiceImpl.a…0.3%보통5.5
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.