CWE-532 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-532 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2023-21492Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged loca…2.6%보통4.4● 실제 악용이 확인됨CVE-2025-24984Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to …2.0%보통4.6CVE-2026-110248Insertion of sensitive information into log files in the git_utils[.]py component in Amazon SageMake…0.5%보통6.0CVE-2026-105963Externally-Generated Error Message Containing Sensitive Information vulnerability in plug_crypto in …0.5%보통5.1CVE-2026-82434Description When ZooKeeper authentication is configured, Storm deliberately retains `storm.zookeeper…0.5%심각10.0CVE-2026-119290Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core w…0.5%높음7.5CVE-2026-68873Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service …0.5%보통5.5CVE-2026-85857Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized…0.5%보통5.5
전체 목록
111건
CVE-2026-87779Insertion of sensitive information into log file vulnerability in Apache Syncope. When AES key of non-standard…0.4%높음7.5
CVE-2026-86049Jupyter Server is the backend for Jupyter web applications. Prior to version 2.21.0, the 5xx request logging p…0.4%높음7.1
CVE-2026-85961On Azure deployments, Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 ma…0.4%높음7.5
CVE-2026-113799Slack Morphism is a client library for Slack Web/Events API/Socket Mode and Block Kit. Versions 1.0.0 through …0.4%보통5.3
CVE-2026-107291Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4…0.4%낮음2.3
CVE-2026-85171n8n before 1.123.73, 2.35.4, and 2.36.2 contains a credential exposure vulnerability in the Strapi, SeaTable, …0.4%높음7.1
CVE-2026-61411Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information int…0.4%높음7.7
CVE-2026-92918admin3 through 3.0.0 persists user session tokens in the audit log event body when publishing UserLoggedIn dom…0.4%높음8.7
CVE-2026-107293Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 0.3.4…0.3%낮음2.3
CVE-2026-73457Under certain circumstances on affected platforms running Arista EOS with gRPC Network Packet Sampling Interfa…0.3%보통6.0
CVE-2026-90861Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's passwor…0.3%보통6.6
CVE-2026-62347Element Call is a native Matrix video conferencing application. From 0.16.0 until 0.20.3, the standalone Eleme…0.3%보통5.9
CVE-2026-59388Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances: custom buildpack credentia…0.3%보통6.5
CVE-2026-106035An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 a…0.3%보통5.5
CVE-2026-85174SiYuan before v3.8.2 logs API tokens from query parameters in plaintext to an accessible log file when full-te…0.3%높음8.7
CVE-2023-54407Frappe 14.x before 14.45.0 contains an information disclosure vulnerability that allows users with error log a…0.3%보통6.9
CVE-2026-63208Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, when a Microsoft Graph req…0.3%보통5.1
CVE-2026-88883Renovate is an automated dependency update tool. In versions before 44.14.4 (and Mend Renovate CE/EE images be…0.3%높음8.3
CVE-2026-116814OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database connection URLs and…0.3%높음7.1
CVE-2026-104055The postgresql-operator charm runs a Prometheus postgres_exporter to collect database metrics using a dedicate…0.3%보통5.3
CVE-2026-87993The consul-template library is vulnerable to an information disclosure issue in its error handling path that m…0.3%높음7.7
CVE-2026-92237Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell U…0.3%보통6.5
CVE-2026-103371Insertion of Sensitive Information into Log File in Apache Geode Web Management. This issue affects Apache Geo…0.3%높음7.5
CVE-2026-86501In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log0.3%낮음2.8
CVE-2026-106502Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolde…0.3%보통5.3
CVE-2026-107370When a username for an Active Directory connection is a domain without a local part, the auth0-lock library in…0.3%보통5.3
CVE-2026-81862Apache Airflow's Teradata provider embedded cloud storage credentials directly into SQL statements. `S3ToTerad…0.3%보통6.5
CVE-2026-91883Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information …0.3%보통4.3
CVE-2026-106499Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolde…0.3%보통4.9
CVE-2026-118647n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 saves the SeaTable Trigger node's API token i…0.3%보통5.3
CVE-2026-16648Insertion of Sensitive Information into Log File vulnerability in Drupal Mailer Plus Log allows Remote Service…0.2%낮음3.8
CVE-2026-108325Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.0.2%보통6.6
CVE-2026-106504Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolde…0.3%보통6.5
CVE-2026-104872OpenTelemetry JavaScript Contrib provides instrumentation libraries for collecting telemetry from JavaScript a…0.2%보통5.8
CVE-2026-85949Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sens…0.2%높음8.1
CVE-2026-108328Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.0.2%보통4.2
CVE-2026-19600Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to sanitize…0.2%보통4.5
CVE-2026-117341In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit eve…0.2%높음7.7
CVE-2026-63689Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information int…0.2%보통6.5
CVE-2026-73442On affected platforms running Arista EOS with VRRP enabled, the peer device VRRP authentication credentials ar…0.2%낮음2.1
CVE-2026-116691MLflow is an open source AI engineering platform for agents, large language models, and machine learning model…0.2%보통6.5
CVE-2025-46808An Insertion of Sensitive Information into Log File vulnerability in SUSE neuvector manager exposes sensitive …0.2%보통6.8
CVE-2026-16528Insertion of Sensitive Information into Log File in certain ASUS router models allows a remote authenticated a…0.2%높음8.4
CVE-2025-71423Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before 1.12.2, the …0.2%높음8.5
CVE-2026-115358OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attackers to leak sensitive …0.2%낮음2.0
CVE-2026-64943Insertion of Sensitive Information into Log File vulnerability in Apache Answer. This issue affects Apache Ans…0.2%높음8.1
CVE-2026-81870OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerP…0.2%낮음2.0
CVE-2026-85417Incomplete property masking in the SANnav logging subsystem permits SNMP authentication and privacy passwords …0.2%보통6.4
CVE-2025-71425Contrast (Edgeless Systems) before 1.8.1 logs the workload secret to stderr, and thus to Kubernetes logs, when…0.2%높음8.5
CVE-2026-92872Pgpool-II inserts sensitive information into log file, which may allow an authenticated attacker to obtain the…0.2%보통5.3
CVE-2026-87980IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information…0.2%낮음3.1
CVE-2026-112250A vulnerability has been identified in BRAIN2 versions up to and including version 3.09. Under specific instal…0.2%보통4.4
CVE-2026-111762A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, RestHandler.pa…0.2%보통5.7
CVE-2026-82716The Botslab G980H dash camera firmware includes sensitive configuration information, including WiFi credential…0.2%보통5.1
CVE-2026-82372Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav versions b…0.2%높음8.5
CVE-2026-93982OpenPanel through commit bad75bdd writes Model Context Protocol authentication tokens from URL query parameter…0.2%보통4.8
CVE-2026-79656A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth…0.2%보통6.0
CVE-2026-101168GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.0 before 19.2.8, 19.3 before 19.…0.2%보통6.2
CVE-2026-76113Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Informati…0.2%보통4.3
CVE-2026-54711pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prio…0.2%낮음2.4
CVE-2026-95815OpenClaw iOS before 2026.8.11 logs complete agent deep-link URLs including persistent bearer keys to unified l…0.2%높음7.2
CVE-2026-85260Insertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component. This issue affe…0.2%보통5.5
CVE-2026-119117Insertion of sensitive information into a log file in Amazon Kinesis Producer Library for Java before 1.0.8, w…0.2%높음8.2
CVE-2026-82723Insertion of Sensitive Information into Log File vulnerability in team-alembic AshAuthentication allows disclo…0.1%낮음1.8
CVE-2026-14442An information exposure vulnerability in the job scheduling component of SANnav allows sensitive credentials t…0.2%보통6.9
CVE-2026-49810Dell Command Powershell Provider (DCPP), versions prior to 2.10.2 contain an Insertion of Sensitive Informatio…0.2%높음7.8
CVE-2026-78242Insertion of sensitive information into log file vulnerability in Apache APISIX. This vulnerability can cause …0.2%보통5.7
CVE-2026-92758If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect…0.2%보통5.7
CVE-2026-115657When used as an executor in either KNIME Server or KNIME Business Hub, KNIME Analytics Platform LTS versions b…0.1%보통4.8
CVE-2026-81320A flaw was found in hawtio-operator. When a custom Route TLS secret is configured and the operator runs at deb…0.1%보통5.5
CVE-2026-16689IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus …0.1%보통6.2
CVE-2026-19649IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus …0.1%보통6.2
CVE-2026-114073Trigger.dev CLI before 4.5.9 contains an information disclosure vulnerability that exposes resolved environmen…0.1%보통6.8
CVE-2026-82371Plaintext exposure of sensitive authentication data in Brocade SANnav discovery service log files enables indi…0.1%높음8.5
CVE-2026-77285OpenBao is an open source identity-based secrets management system. Prior to 2.6.0, OpenBao Agent's exec rende…0.1%낮음2.4
CVE-2026-55102hashi-vault-js is a Node.js module for interacting with the HashiCorp Vault API. Prior to 0.5.2, every API met…0.1%보통5.8
CVE-2026-66068RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, ?LO…0.1%보통5.6
CVE-2026-115885The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph de…0.1%보통4.1
CVE-2026-94594Armatura One's message broker logs client connection credentials and the associated password in plain text dur…0.1%보통5.1
CVE-2026-108858Predibase LoRAX through 0.12.1 contains a sensitive information exposure vulnerability that writes the caller-…0.1%보통6.8
CVE-2026-94593Armatura One's backup and restore routine records the full database connection command, including the superuse…0.1%높음8.5
CVE-2026-87672An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade F…0.1%보통6.8
CVE-2026-14443Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav versions before 3.0.1a permi…0.1%높음8.4
CVE-2026-108857Hugging Face Text Embeddings Inference through 1.9.4 contains a cleartext logging vulnerability that exposes t…0.1%보통4.8
CVE-2026-108754GPT-Load through 1.4.11 contains a cleartext logging vulnerability that exposes client proxy keys because the …0.1%보통4.8
CVE-2026-78627The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property…0.1%높음7.3
CVE-2026-17442IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus …0.1%보통5.1
CVE-2026-114409Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to …0.1%보통5.7
CVE-2026-107783Insertion of sensitive information into log file in AWS Tools for PowerShell before 5.0.306 might allow local …0.1%보통6.7
CVE-2026-80124Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,…0.1%보통5.5
CVE-2026-80056Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,…0.1%보통5.5
CVE-2026-78631The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the defa…0.1%보통5.3
CVE-2026-80169Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,…0.1%낮음3.3
CVE-2026-79966Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,…0.1%낮음3.3
CVE-2026-114471Insertion of sensitive information into a log file in the SMTP server of Progressive Robot hMailServer 6.0.0 t…0.1%보통4.7
CVE-2026-73466On affected platforms running Arista EOS, under certain circumstances user passwordss may be written in clear …0.1%보통6.0
CVE-2026-73465On affected platforms running Arista EOS, under certain circumstances plaintext private keys may be written in…0.1%보통6.0
CVE-2026-73467On affected platforms running Arista EOS, under certain circumstances plaintext shared secrets for configured …0.1%보통6.0
CVE-2026-109968A flaw was found in the clevis PKCS#11 pin. The clevis-pkcs11-afunix-socket-unlock daemon logs LUKS disk encry…0.1%보통5.5
CVE-2026-86597Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODB…0.1%보통6.5
CVE-2026-96293A cleartext storage of sensitive information vulnerability in WatchGuard Endpoint Security's Full Disk Encrypt…0.1%보통6.9
CVE-2026-18800When an Event Publisher output adapter is configured with properties that are irrelevant to its function, the …보통4.4
CVE-2026-20592In Modem, there is a possible information disclosure due to side channel information disclosure. This could le…보통4.1
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.