CWE-552 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-552 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2026-21589This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Da…99.5%심각9.3● 실제 악용이 확인됨CVE-2020-17519A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attack…98.0%높음7.5● 실제 악용이 확인됨CVE-2025-11371In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unaut…92.1%높음7.5● 실제 악용이 확인됨CVE-2016-3715The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to…75.3%보통5.5● 실제 악용이 확인됨CVE-2017-16651Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized acce…45.7%높음7.8● 실제 악용이 확인됨CVE-2025-48928The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content i…0.6%보통4.0CVE-2026-88137Files or directories accessible to external parties in WebDAV allows an authorized attacker to discl…1.0%보통6.5CVE-2026-85840Files or directories accessible to external parties in Windows Event Viewer allows an authorized att…1.0%보통6.5
전체 목록
42건
CVE-2026-54629Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes file-backed SQ…1.0%높음7.5
CVE-2026-114400Trudesk through 1.2.11 contains a missing authentication vulnerability that allows unauthenticated attackers t…0.6%높음8.2
CVE-2026-58415Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Se…0.5%보통5.3
CVE-2026-109162Forms using FileUpload or ImageUpload elements with a custom saveToFileMount configured stored uploaded files …0.5%보통6.3
CVE-2026-112144A weakness has been identified in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f…0.5%보통5.5
CVE-2026-108070A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauth…0.4%높음8.7
CVE-2026-71379The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a …0.4%심각10.0
CVE-2026-76531As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a compreh…0.4%심각9.9
CVE-2026-112948Vitest is a testing framework powered by Vite. From 5.0.0-beta.6 until 5.0.5, Vitest dev servers can misapply …0.4%보통6.5
CVE-2026-75164An arbitrary file read vulnerability in /cgi-bin/ugwdownload.cgi of MBS-Solutions X-Serie Gateway firmware V6_…0.4%보통6.5
CVE-2026-46651The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From ve…0.4%심각9.8
CVE-2026-96857Files or directories accessible to external parties in Windows Projected File System allows an authorized atta…0.4%보통5.5
CVE-2026-85812Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacke…0.4%보통5.5
CVE-2026-61730SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. In aff…0.4%심각9.3
CVE-2026-77259MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to …0.4%높음7.7
CVE-2026-77884Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local ne…0.3%높음7.1
CVE-2026-67402An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the…0.3%심각9.2
CVE-2026-80494The Yogeta WP Cloud WordPress plugin through 1.0 does not validate a user-supplied file path before passing it…0.3%높음8.6
CVE-2026-68831Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized …0.3%보통5.5
CVE-2026-120501An Otter Wiki 2.20.1 before 2.26.2 contains a file disclosure vulnerability in the DataTable embedding that al…0.3%보통6.9
CVE-2026-108938A flaw has been found in code-projects Matrimonial System 1.0. This issue affects some unknown processing of t…0.3%보통5.5
CVE-2026-102695OmniFaces is a utility library for Faces. In OmniFaces versions before 1.14.3, 2.7.33, 3.14.23, 4.7.12, and 5.…0.3%높음8.2
CVE-2026-105750Docling simplifies document processing by parsing diverse formats and providing integrations with the generati…0.3%보통5.9
CVE-2026-94375The Order Export & Order Import for WooCommerce plugin for WordPress is vulnerable to Sensitive Information Ex…0.3%보통5.3
CVE-2026-84172Files accessible to external parties in Apache Wicket. org.apache.wicket.markup.html.PackageResourceGuard deci…0.3%보통6.3
CVE-2026-65210This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disc…0.2%보통4.9
CVE-2026-74853The Pods WordPress plugin before 3.3.9.2 does not restrict which functions a display callback may resolve to, …0.2%보통6.8
CVE-2026-100727An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read file…0.2%보통6.9
CVE-2026-67073HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This coul…0.2%높음8.6
CVE-2026-89118SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve…0.2%보통5.3
CVE-2026-119201Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, nuxt dev stores a generat…0.2%보통4.8
CVE-2026-85175SiYuan versions <= 3.8.1 (fixed in v3.8.2) contain an incomplete blocklist in the IsForbiddenAbsPath() functio…0.2%높음8.7
CVE-2026-15915IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive information due to recursive …0.1%보통6.2
CVE-2026-6544IBM Concert 1.0.0 through 3.0.0 allows recursive copying of directories without proper controls which can lead…0.1%보통6.2
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.