CWE-470 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-470 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 랜섬웨어 캠페인에 사용됨CVE-2021-21985The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input valid…100.0%심각9.8● 실제 악용이 확인됨CVE-2026-82078An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCu…63.0%심각9.4CVE-2026-58400GeoNetwork is a catalog application to manage spatially referenced resources. Prior to versions 4.4.…1.2%심각9.1CVE-2026-86792Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found …1.2%높음8.8CVE-2026-55107Kobako is a Ruby gem that embeds a Wasm-isolated mruby interpreter inside applications, allowing exe…0.8%심각10.0CVE-2026-41871Missing Authorization, Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflect…0.8%심각9.8CVE-2026-116692MLflow is an open source AI engineering platform for agents, large language models, and machine lear…0.7%심각9.8CVE-2026-78030DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm att…0.7%심각9.8
전체 목록
50건
CVE-2026-41870Missing Authorization, Improper Control of Generation of Code ('Code Injection'), Improper Control of Dynamica…0.7%높음8.8
CVE-2026-62379Open Access Management (OpenAM) is an access management solution. Prior to 16.1.2, the pre-authentication /aut…0.7%심각9.8
CVE-2026-70410Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Cal…0.6%높음8.8
CVE-2026-119578MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() tha…0.6%높음8.5
CVE-2026-76825RestrictedPython is a tool that helps define a subset of the Python language for accepting program input in a …0.6%높음8.4
CVE-2026-93762Mongoid contains an unsafe reflection weakness in the query path used for embedded documents. An application t…0.6%심각9.2
CVE-2026-97666Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a…0.6%보통6.9
CVE-2026-115931Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend…0.5%심각9.9
CVE-2026-93765Mongoid contains an unsafe reflection weakness in the document persistence layer of its object-document mappin…0.5%높음8.3
CVE-2026-92206CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability. This vulnerabilit…0.5%높음8.8
CVE-2026-102094Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Unsafe Reflection and does not suffic…0.5%높음7.2
CVE-2026-106439Hydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.7 and 1.4.0.dev10, H…0.5%높음8.5
CVE-2026-119050Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows attackers to invoke…0.4%심각9.2
CVE-2026-106510Backstage is an open framework for building developer portals. Prior to 1.14.6, the @backstage/plugin-techdocs…0.4%높음7.7
CVE-2026-112145A security vulnerability has been detected in speaches-ai speaches up to 0.9.0-rc.3. This vulnerability affect…0.4%보통5.5
CVE-2026-101292Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerability in FederationStreamConnectMe…0.4%높음8.2
CVE-2026-114508Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion…0.4%보통6.5
CVE-2026-61599djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance.…0.4%높음8.8
CVE-2026-66269Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Inpu…0.4%높음7.3
CVE-2026-105782Scrapy is a high-level web crawling and scraping framework for Python. From 1.4.0 until 2.14.2, RefererMiddlew…0.4%높음7.5
CVE-2026-79987A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute …0.4%높음8.7
CVE-2026-10853IBM MQ could allow an authenticated attacker with cluster access to cause a denial of service or potentially e…0.4%높음7.5
CVE-2026-71253Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Joh…0.4%심각9.8
CVE-2026-96740A flaw was found in the StreamsHub Console for Apache Kafka. Tenant-supplied Kafka client properties from the …0.4%보통6.5
CVE-2026-92415— Use of Externally-Controlled Input to Select Classes or Code vulnerability in Apache Jackrabbit's WebDAV/Dav…0.3%보통6.9
CVE-2026-108097Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Dru…0.3%미평가
CVE-2026-115886MLflow is an open source AI engineering platform for agents, large language models, and machine learning model…0.3%보통6.5
CVE-2026-104629A component loading mechanism in openPDC and openHistorian will construct and run any specified type, which ma…0.3%높음7.7
CVE-2026-108099Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Ent…0.3%미평가
CVE-2026-112075A weakness has been identified in unslothai unsloth up to 0.1.501-beta. This affects the function FastSentence…0.3%낮음2.1
CVE-2017-20285YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes.…0.3%심각9.1
CVE-2026-111851Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in WProyal Ro…0.3%높음7.6
CVE-2026-106440Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, t…0.3%높음7.8
CVE-2026-105064Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Unlimited …0.2%보통6.5
CVE-2026-102580A flaw was found in Moodle. An authenticated attacker can supply an improperly validated audience class name t…0.2%보통4.3
CVE-2026-115749hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 contains an arbitrary module import …0.2%보통4.8
CVE-2026-111440在 openGauss-connector-jdbc 的 pgjdbc/src/main/java/org/postgresql/log/LogFactory.java 中，LogFactory 根据 JDBC 连接参数…0.2%높음7.0
CVE-2026-114660Grav from 2.0.0 before 2.2.5 contains an improper access control vulnerability in FlexDirectory::dynamicFlexFi…0.2%높음7.0
CVE-2026-96672Frappe ERPNext versions before 16.34.1 fail to validate that Financial Report Template calculation_formula val…0.2%보통5.3
CVE-2026-18123IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remote attacker to cause a denial o…0.2%높음7.6
CVE-2026-55543TuxGuitar is an open-source guitar tablature editor. Prior to 2.1.0, an untrusted .tg file can set gervil.soun…0.1%높음8.5
CVE-2026-100308Deserialization of untrusted data in the model loading component in Amazon GluonTS before 0.17.0 might allow c…0.1%높음8.4
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.