CWE-287 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-287 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 랜섬웨어 캠페인에 사용됨CVE-2023-35078An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted…100.0%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2023-35082An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to …100.0%심각9.8● 실제 악용이 확인됨CVE-2024-7593Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or …100.0%심각9.8● 실제 악용이 확인됨CVE-2017-7921An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 14072…100.0%심각9.8● 실제 악용이 확인됨CVE-2021-33044The identity authentication bypass vulnerability found in some Dahua products during the login proce…100.0%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2022-40684An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.…100.0%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2023-46805An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Polic…100.0%높음8.2● 랜섬웨어 캠페인에 사용됨CVE-2020-0688A remote code execution vulnerability exists in Microsoft Exchange software when the software fails …100.0%높음8.8
전체 목록
120건
CVE-2021-39226악용 확인Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated …99.9%높음7.3
CVE-2025-61882랜섬웨어 악용Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher …99.7%심각9.8
CVE-2021-33045악용 확인The identity authentication bypass vulnerability found in some Dahua products during the login process. Attack…99.6%심각9.8
CVE-2021-32030악용 확인The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_…99.4%심각9.8
CVE-2025-49706랜섬웨어 악용Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing ove…99.1%보통6.5
CVE-2025-61884랜섬웨어 악용Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported…95.9%높음7.5
CVE-2024-53704랜섬웨어 악용An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to by…95.3%심각9.8
CVE-2022-23134악용 확인After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, …93.9%보통5.3
CVE-2013-0625악용 확인Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass a…93.8%심각9.8
CVE-2018-10561악용 확인An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appendin…92.8%심각9.8
CVE-2026-20182악용 확인May 2026: This security advisory provides the details and fix information for a vulnerability that was discove…91.8%심각10.0
CVE-2021-32648악용 확인octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system pa…91.1%심각9.1
CVE-2026-20127악용 확인A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cis…89.3%심각10.0
CVE-2020-8193악용 확인Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 1…88.3%보통6.5
CVE-2026-50751랜섬웨어 악용A logic flow weakness in Remote Access and Mobile Access certificate validation in deprecated IKEv1 key exchan…85.3%심각9.3
CVE-2015-1187악용 확인The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the…82.7%심각9.8
CVE-2026-105133악용 확인A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file…79.5%보통5.5
CVE-2023-27351랜섬웨어 악용This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 2…78.1%높음7.5
CVE-2020-4427악용 확인IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, and 2.0.6 could allow a remote attacker to bypass sec…70.0%심각9.8
CVE-2023-28461랜섬웨어 악용Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An attacker can b…68.1%심각9.8
CVE-2015-7755악용 확인Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 bef…61.1%심각9.8
CVE-2024-8956악용 확인PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The c…58.8%심각9.1
CVE-2019-19006악용 확인Sangoma FreePBX 115.0.16.26 and below, 14.0.13.11 and below, 13.0.197.13 and below have Incorrect Access Contr…55.9%심각9.8
CVE-2021-22893랜섬웨어 악용Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by…47.2%심각10.0
CVE-2020-12812랜섬웨어 악용An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may resu…45.4%심각9.8
CVE-2023-49105악용 확인An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete an…43.2%심각9.8
CVE-2024-37085랜섬웨어 악용VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Director…26.8%높음7.2
CVE-2020-8196악용 확인Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 1…26.3%보통4.3
CVE-2016-7836악용 확인SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authenticat…19.2%심각9.8
CVE-2026-82329악용 확인JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthen…14.4%심각9.8
CVE-2023-20867악용 확인A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacti…13.6%낮음3.9
CVE-2026-46817악용 확인Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Suppor…12.3%심각9.8
CVE-2026-42018악용 확인JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous ac…9.8%높음7.5
CVE-2022-0492악용 확인A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c fu…5.5%높음7.8
CVE-2019-0543랜섬웨어 악용An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka "M…4.7%높음7.8
CVE-2026-16232악용 확인An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated…3.5%심각9.3
CVE-2025-32975악용 확인Quest KACE Systems Management Appliance (SMA) 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.…2.5%심각10.0
CVE-2026-49869악용 확인Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, AuthenticationFilte…2.1%심각10.0
CVE-2026-65400악용 확인An authentication issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.…1.7%심각9.8
CVE-2026-59822악용 확인LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, LiteLLM…0.8%높음8.8
CVE-2026-93680IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to imp…2.2%심각9.8
CVE-2026-108907A vulnerability was determined in Netcore NR268 1.7.121109. Affected is the function user_ok of the component …1.2%심각9.3
CVE-2026-86400Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0…0.9%심각9.8
CVE-2026-116006A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.09. The affected element is an u…0.8%보통5.5
CVE-2026-100169Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.3…0.9%높음7.6
CVE-2026-120191A weakness has been identified in Presenton up to 0.9.11-beta. Affected by this issue is some unknown function…0.8%보통5.5
CVE-2026-112104A flaw has been found in eremef bandcamp-player up to 1.8.33-beta. The impacted element is an unknown function…0.8%보통6.9
CVE-2026-101956An Improper Authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS al…0.7%심각9.3
CVE-2026-100886A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affect…0.8%심각9.3
CVE-2026-110799Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior …0.7%심각9.8
CVE-2026-114509Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard toke…0.7%심각9.2
CVE-2026-97864A vulnerability has been found in GibbonEdu Gibbon up to 30.0.01. The affected element is the function makeBlo…0.7%보통5.5
CVE-2026-112427An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate…0.7%높음8.1
CVE-2026-117532REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history …0.7%심각9.3
CVE-2026-94493A vulnerability was detected in Gigatech PDV5701 1.0.31_240305_112640. This issue affects some unknown process…0.7%심각9.3
CVE-2026-86293A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is a…0.7%보통5.5
CVE-2026-101077A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function process_request of the component…0.7%심각9.3
CVE-2026-90524A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff1453…0.7%보통5.5
CVE-2026-97785Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.0.6%심각10.0
CVE-2026-85984The miniOrange OTP Login, Verification and SMS Notifications plugin for WordPress is vulnerable to Authenticat…0.7%심각9.8
CVE-2026-108921A vulnerability was detected in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7d…0.7%보통5.5
CVE-2026-94151A weakness has been identified in Omega Solution HRM OS up to 20260717. This affects an unknown function of th…0.7%보통5.5
CVE-2026-116257A vulnerability was determined in BillaBear up to 2025.01.03. Affected by this issue is the function processIn…0.6%보통5.5
CVE-2026-92401A vulnerability was identified in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This vulnera…0.7%보통6.9
CVE-2026-86810A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapa…0.7%보통6.9
CVE-2026-95271A vulnerability has been found in dgtlmoon changedetection.io up to 0.60.7. The impacted element is the functi…0.7%보통5.5
CVE-2026-93559A vulnerability was identified in Forget-C Jellyfish AI Short Drama Studio 0.1.0-alpha/0.2.0/0.3.0/0.3.1/0.3.2…0.7%보통6.9
CVE-2026-97879A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. The affected element is an unknown…0.6%보통5.5
CVE-2026-97637The JSON API Auth plugin for WordPress is vulnerable to Authentication Bypass via Cached Session Cookie Disclo…0.6%심각9.8
CVE-2026-69854Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a net…0.6%심각9.0
CVE-2026-75878IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authentica…0.6%심각9.1
CVE-2026-19125The EthPress – Web3 Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, a…0.6%높음8.1
CVE-2026-90504A vulnerability has been found in vvbbnn00 WARP-Clash-API up to c7bf2360073959861219b422e51ae86411051b46. The …0.6%보통5.5
CVE-2026-86808A security vulnerability has been detected in moltis-org moltis up to 20260818.10. The affected element is the…0.6%보통5.5
CVE-2026-101073A security flaw has been discovered in Netcore NR289-GE 1.4.5102. Impacted is an unknown function of the file …0.6%보통5.5
CVE-2026-97878A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Impacted is the function anonymous of t…0.6%보통5.5
CVE-2026-114248A security vulnerability has been detected in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9ba…0.6%보통5.5
CVE-2026-76187Apache Airflow Keycloak provider: the unauthenticated token endpoint accepts a client-credentials grant for an…0.6%심각9.8
CVE-2026-109516The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Acc…0.6%심각9.8
CVE-2026-110669A security vulnerability has been detected in cemtan sar2html 4.0.0. This affects the function deleteHost/dele…0.6%보통5.5
CVE-2026-116604A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an u…0.6%보통5.5
CVE-2026-101986An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an …0.6%심각9.3
CVE-2026-84295Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows …0.6%심각10.0
CVE-2026-106013The Jupiter X Core plugin for WordPress is vulnerable to Authentication Bypass via the Twitter/X Social Login …0.6%심각9.8
CVE-2026-114260A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591…0.6%보통5.5
CVE-2026-75957The Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform plugin for WordPress is vulnerable to Authen…0.6%심각9.8
CVE-2026-105034The EnergizeLab Eilik NestJS auth service issues device tokens for arbitrary robot serial numbers without auth…0.6%높음8.2
CVE-2026-88920An authentication bypass in the DOM security processor in Apache WSS4J allows unauthenticated remote attackers…0.6%심각9.8
CVE-2026-93960A vulnerability was identified in Pixelfed up to 0.12.11. Impacted is the function instancePeers of the file a…0.6%낮음2.1
CVE-2026-114439A vulnerability was determined in oretnom23 php-travel-agency-system. Affected by this issue is some unknown f…0.5%보통5.5
CVE-2026-86426LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthentic…0.6%심각9.2
CVE-2026-18922A flaw was found in 389 Directory Server. During SASL PLAIN authentication, a stale identity carried in a Cyru…0.6%심각9.8
CVE-2026-108707Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows u…0.6%심각9.3
CVE-2026-89093The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerab…0.6%보통5.3
CVE-2026-76743A vulnerability have been identified in the management interface of AOS-S that could potentially allow an unau…0.5%심각9.8
CVE-2026-89136When using RPK (Raw Public Key), the client side of a TLS 1.2, 1.3 and DTLS 1.2 connection could accept an uns…0.6%높음8.3
CVE-2026-114261A vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df. This i…0.5%보통5.5
CVE-2026-108157Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote…0.5%심각9.2
CVE-2026-108818A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6. This affects the function get_authenticatio…0.5%보통5.5
CVE-2026-31377An Improper Authentication vulnerability in the Apache Doris Frontend (FE) meta service allows an unauthentica…0.5%높음7.5
CVE-2026-86306A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c…0.5%보통5.5
CVE-2026-112143A security flaw has been discovered in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f787…0.5%보통5.5
CVE-2026-80312Improper Authentication vulnerability in Apache Camel OAuth component. This issue affects Apache Camel: from 4…0.5%높음8.2
CVE-2026-109114A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f…0.5%보통5.5
CVE-2026-76009The Next-Cart Store to WooCommerce Migration plugin for WordPress is vulnerable to Authentication Bypass in al…0.5%높음8.1
CVE-2026-104759The WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) plugin for WordPress is vulnerable to…0.5%높음8.1
CVE-2026-19607A flaw was found in the first-broker-login flow of the keycloak-services component. This component handles the…0.5%보통5.3
CVE-2026-107058An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of …0.5%심각9.8
CVE-2026-80099Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because the plugins …0.5%높음8.8
CVE-2026-75903The Vulnity Security plugin for WordPress is vulnerable to authentication bypass in all versions up to, and in…0.5%높음8.1
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.