CWE-405 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-405 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
CVE-2026-96960Asymmetric resource consumption (amplification) in .NET allows an unauthorized attacker to deny serv…1.1%높음7.5CVE-2026-104712Asymmetric resource consumption (amplification) vulnerability in Apache Struts. When a request param…0.9%높음7.5CVE-2026-70162A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly han…0.8%보통5.9CVE-2026-78659When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to po…0.6%높음7.5CVE-2026-78669A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a lar…0.6%높음7.5CVE-2026-103880Asymmetric Resource Consumption vulnerability in Apache Directory LDAP API. Storing a password using…0.5%미평가CVE-2026-104817Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauth…0.5%높음8.7CVE-2026-75029In a query response, an attacker may send `named` multiple copies of a record that should only exist…0.4%보통5.3
전체 목록
24건
CVE-2026-97031Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a we…0.4%높음7.5
CVE-2026-87011Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1,…0.3%높음7.5
CVE-2026-104431Zebra before 6.0.0 contains a denial of service vulnerability that allows unauthenticated peers to stall Tokio…0.3%높음8.7
CVE-2026-104423Zebra (zebrad) before 6.2.1 contains an asymmetric resource consumption vulnerability that allows unauthentica…0.3%높음8.7
CVE-2026-15822IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.…0.3%높음7.5
CVE-2026-109932undici is an HTTP client library for Node.js. In versions 5.15.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0…0.3%보통5.9
CVE-2026-118764minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior …0.3%보통6.9
CVE-2026-104425ZcashFoundation Zebra before 6.1.0 contains a resource exhaustion vulnerability that allows unauthenticated pe…0.3%보통6.9
CVE-2026-84897src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange mess…0.3%보통6.9
CVE-2026-68531Concrete CMS 9 before 9.5.3 did not escape SQL LIKE wildcard characters in the keyword search filters used by …0.3%낮음2.1
CVE-2026-86432commonmark versions from 2.0.0 before 2.8.4 contain a denial of service vulnerability in XmlRenderer that emit…0.2%보통6.9
CVE-2026-119207pypdf is a free and open-source pure-python PDF library. Prior to 6.21.3, pypdf can consume excessive memory w…0.2%높음7.1
CVE-2026-85783Crypt::Age versions before 0.004 for Perl allow CPU exhaustion via an unbounded number of recipient stanzas, e…0.2%미평가
CVE-2026-82309Robots::Validate versions from 0.3.2 before 0.3.11 for Perl allow unbounded outbound DNS queries per validatio…0.2%미평가
CVE-2026-110676Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full d…0.2%미평가
CVE-2026-111752Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript…높음8.2
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.