보안악용 확인 · 악용 확률 · 한국어 권고
소개
CVE Ledger

CWE-35 관련 취약점

같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.

원장 35,126건이 중 악용 확인 1,767건분류: CWE-35
우선순위순최신 공개순CWE-787 278CWE-78 205CWE-416 191CWE-22 166CWE-94 120CWE-502 120CWE-20 96CWE-119 94CWE-306 81CWE-843 79

CWE-35 — 주요 취약점

악용이 확인된 것을 먼저 보여줍니다.

8.4RACWE-35● 랜섬웨어 캠페인에 사용됨CVE-2025-8088RARLAB · WinRARA path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execu…94.0%높음8.47.522CWE-35CVE-2026-27557An unauthenticated remote attacker can exploit a path traversal vulnerability in the /index.php/view…0.7%높음7.59.221CWE-35CVE-2026-118633A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as…0.6%심각9.27.523CWE-35CVE-2026-39734Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions.0.5%높음7.58.924CWE-35CVE-2026-44415Affected systems do not properly restrict access to internal APIs and paths for authenticated users.…0.5%높음8.96.924CWE-35CVE-2026-44414A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device K…0.5%보통6.99.328CWE-35CVE-2026-82824Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that …0.4%심각9.38.822CWE-35CVE-2026-21092Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image…0.3%높음8.8

전체 목록

15건

CVE-2026-105683Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have all…0.3%낮음3.8
CVE-2026-85310import_contacts Path Traversal in Groundhogg <= 4.7.1 versions.0.3%보통6.5
CVE-2026-97244Contributor Path Traversal in Creator LMS <= 1.2.19 versions.0.3%높음7.5
CVE-2026-5703Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal p…0.3%높음7.1
CVE-2026-103290Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize…0.3%보통5.1
CVE-2026-21103Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files …0.2%보통6.8
CVE-2026-20513In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to …0.2%보통4.4
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.