CVE Ledger

CWE-354 관련 취약점

같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.

원장 35,126건이 중 악용 확인 1,767건분류: CWE-354

CWE-354 — 주요 취약점

악용이 확인된 것을 먼저 보여줍니다.

33건

CVE-2026-119186Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to …0.2%보통5.9

CVE-2026-85747Distribution is a toolkit to pack, ship, store, and deliver container content. Prior to 3.1.2, registry/client…0.2%보통6.8

CVE-2026-105280Improper Validation of Integrity Check Value vulnerability in hexpm hex allows a package mirror to substitute …0.2%보통6.9

CVE-2026-89320`HmacShaCryptor.Hash` never hashed its input. For any input it returned `HMAC_K("")` — the MAC of the empty me…0.2%높음8.8

CVE-2026-16001Exposure of the message authentication key through the encryption keystream in the stream mode of IesEngine (a…0.2%높음8.2

CVE-2026-73459On affected platforms running Arista EOS with IS-IS configured, an unauthenticated attacker who can inject a s…0.2%높음7.0

CVE-2026-93318A malicious image can advertise DiffIDs from another image while containing different layer contents. In affec…0.2%높음7.5

CVE-2026-93317An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that …0.2%보통5.9

CVE-2026-109366Zebra before 6.4.0 contains an improper integrity validation vulnerability in the inbound gossip download path…0.2%보통6.3

CVE-2026-85515In Bouncy Castle for Java before 1.86, a truncated OpenPGP encrypted message was accepted with no error report…0.2%높음8.2

CVE-2026-116608A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is th…0.1%낮음2.1

CVE-2026-115906zip is a zip library for Rust that supports reading and writing simple ZIP files. From 0.6.0 until 9.0.0, the …0.2%보통6.5

CVE-2026-102759NetX Secure TLS accepts an empty application-data record without verifying its message authentication code. In…0.2%보통6.3

CVE-2026-95625The Tauri updater plugin verifies update binaries using minisign signatures, but the signature covers only the…0.2%보통5.9

CVE-2026-84900Previous versions of HP ThinPro (prior to HP ThinPro 8.1 SP10) could potentially contain security vulnerabilit…0.1%보통6.8

CVE-2026-118776Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to …0.1%낮음3.7

CVE-2026-118782Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to …0.1%높음7.5

CVE-2026-65625The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified authentication tag bits from t…0.1%보통5.9

CVE-2026-54578mport is the MidnightBSD Package Manager. Prior to 2.7.8, mport_verify_package() in libmport/verify.c could co…0.1%낮음2.0

CVE-2026-35501When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trust anchor a…0.1%낮음3.7

CVE-2026-106434The explicit decryption component of MongoDB libmongocrypt can return an unrecognized encrypted payload unchan…0.1%보통5.3

CVE-2026-71888In Bouncy Castle for Java before 1.86, the streaming CMS AuthenticatedData parser accepted a message whose dig…0.1%높음8.7

CVE-2026-54174melange allows users to build apk packages using declarative pipelines. Apko prior to version 1.2.9, correspon…0.1%높음8.3

CVE-2026-90720Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0…0.1%보통6.7

CVE-2020-7807A vulnerability that can hijack a DLL file that is loaded during products(LGPCSuite_Setup, IPSFULLHD, LG_ULTRA…보통5.5

이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.