CWE-59 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-59 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 랜섬웨어 캠페인에 사용됨CVE-2022-30333RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an ex…99.2%높음7.5● 실제 악용이 확인됨CVE-2020-36193Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadeq…70.6%높음7.5● 랜섬웨어 캠페인에 사용됨CVE-2024-57728SimpleHelp remote support software v5.5.7 and before allows admin users to upload arbitrary files an…64.5%높음7.2● 실제 악용이 확인됨CVE-2023-36874Windows Error Reporting Service Elevation of Privilege Vulnerability42.6%높음7.8● 랜섬웨어 캠페인에 사용됨CVE-2020-0787An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Serv…42.5%높음7.8● 랜섬웨어 캠페인에 사용됨CVE-2019-0841An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improp…41.4%높음7.8● 랜섬웨어 캠페인에 사용됨CVE-2022-21999Windows Print Spooler Elevation of Privilege Vulnerability41.0%높음7.8● 랜섬웨어 캠페인에 사용됨CVE-2021-41379Windows Installer Elevation of Privilege Vulnerability19.5%보통5.5
전체 목록
120건
CVE-2019-1253랜섬웨어 악용An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junc…11.6%높음7.8
CVE-2015-1130악용 확인The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentica…9.9%높음7.8
CVE-2026-41091악용 확인Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized atta…8.2%높음7.8
CVE-2020-0683악용 확인An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic lin…7.7%높음7.8
CVE-2019-1064랜섬웨어 악용An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handl…6.9%높음7.8
CVE-2019-1069랜섬웨어 악용An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file op…6.1%높음7.8
CVE-2015-5287악용 확인The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with ce…5.0%높음7.8
CVE-2025-60710랜섬웨어 악용Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an aut…4.6%높음7.8
CVE-2025-48384악용 확인Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides …4.4%높음8.0
CVE-2019-1385랜섬웨어 악용An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs…3.6%높음7.8
CVE-2019-1315랜섬웨어 악용An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard li…3.5%높음7.8
CVE-2020-0638랜섬웨어 악용An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exp…2.4%높음7.8
CVE-2019-1129랜섬웨어 악용An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handl…1.8%높음7.8
CVE-2019-1130랜섬웨어 악용An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handl…1.7%높음7.8
CVE-2026-81963악용 확인Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized at…0.4%높음7.8
CVE-2026-110063Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allo…0.9%심각10.0
CVE-2026-70563Improper link resolution before file access ('link following') in Windows Shell allows an unauthorized attacke…0.9%높음8.1
CVE-2026-101894The decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default decompress(input…0.8%심각9.1
CVE-2026-67368Improper link resolution before file access ('link following') in SQL Server allows an authorized attacker to …0.7%높음8.8
CVE-2026-104068JetBackup plugin for WordPress before 3.1.24.10 contains a symlink-based arbitrary file write vulnerability th…0.7%높음8.6
CVE-2026-103975Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver proto…0.6%보통6.5
CVE-2026-85731oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, content/file.Store extraction of OCI layer…0.7%높음8.8
CVE-2026-15815Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin archives. A cr…0.7%높음8.8
CVE-2026-96279A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs …0.6%보통6.5
CVE-2026-116682FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-beta, file…0.5%높음8.6
CVE-2026-103263Tornado before 6.5.9 contains a path traversal vulnerability in StaticFileHandler that follows symbolic links …0.5%높음8.2
CVE-2026-120307The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns th…0.5%심각9.9
CVE-2026-104103Ludwig is a low-code framework for building custom LLMs, neural networks, and other AI models. Prior to 0.17.8…0.5%높음8.1
CVE-2026-119364ProFTPD through 1.3.9e and 1.3.10rc1 through 1.3.10rc4 contains a link-following vulnerability in mod_copy tha…0.5%보통6.0
CVE-2026-89091A flaw was found in ansible-core. When installing a collection with `ansible-galaxy collection install`, the a…0.5%높음8.8
CVE-2026-85583SiYuan versions before v3.8.2 contain a path traversal vulnerability in the reader-accessible file-read endpoi…0.5%높음7.1
CVE-2026-86861pgAdmin 4's File Manager save_file endpoint, which backs saving from the Query Tool and ERD, validated the req…0.5%보통6.0
CVE-2026-53882An improper link resolution before file access ('link following') vulnerability has been reported to affect Vi…0.5%높음8.7
CVE-2026-116213Webasyst Framework through 4.4.0 contains an arbitrary file read vulnerability in waArchiveTar::writeItem() th…0.4%보통6.9
CVE-2026-59944Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and from 2.3.0 until 2.10.3, a ma…0.5%보통6.1
CVE-2026-70190Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevat…0.5%높음7.3
CVE-2026-69673Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker…0.5%높음7.8
CVE-2026-113678Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownWithNewStats that all…0.4%심각9.4
CVE-2026-115908zip is a zip library for Rust that supports reading and writing simple ZIP files. From 7.2.0 until 9.0.0, ZipA…0.4%높음7.4
CVE-2026-83507Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows a…0.4%보통5.5
CVE-2026-62687Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized a…0.4%보통5.5
CVE-2026-76654An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is se…0.4%보통5.8
CVE-2026-87910When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from…0.4%보통5.7
CVE-2026-55074Ansible FreeBSD Jail Connection Plugin is an Ansible connection plugin for FreeBSD Jails via jexec. Through ve…0.4%높음8.2
CVE-2026-70264Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized atta…0.4%보통5.5
CVE-2026-83933Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows a…0.4%보통5.5
CVE-2026-90930File Browser through 2.63.23 applies path rules to the requested lexical path but resolves symbolic links with…0.4%높음7.6
CVE-2026-83704Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an…0.4%높음7.8
CVE-2026-115377Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability …0.4%심각9.4
CVE-2026-82331Improper link resolution before file access ('link following') vulnerability in the `tar` source plugin of Apa…0.4%심각9.8
CVE-2026-94620Classroom 50 is a free and open-source tool for managing and grading programming assignments via GitHub. Prior…0.4%심각9.4
CVE-2026-85849Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an au…0.4%높음7.8
CVE-2026-88133Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate …0.4%높음7.8
CVE-2026-100692Hugo is a static site generator. In versions after v0.123.0 and before v0.166.0, Hugo's symlink confinement ch…0.4%높음8.7
CVE-2026-110767Gitingest through 0.3.1 contains a symlink following vulnerability in ingest_query single-file blob ingestion …0.4%높음8.7
CVE-2026-96911Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an…0.4%높음7.8
CVE-2026-87799Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later (fixed in 4.0.1…0.4%심각9.9
CVE-2026-83927Improper link resolution before file access ('link following') in Windows Registry allows an authorized attack…0.4%높음7.8
CVE-2026-100715Froxlor through 2.3.10 is vulnerable to arbitrary file deletion via symlink following in the FTP data deletion…0.4%높음8.5
CVE-2026-100716Froxlor is a server administration panel. In versions 2.3.10 and earlier, the customer data-export (DataDump) …0.4%심각9.4
CVE-2026-88191Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an…0.4%높음7.8
CVE-2026-55828qbee transport is a remote access transport protocol implementation. Prior to 1.26.25, the extractTar routine …0.4%보통6.0
CVE-2026-90464An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows …0.4%높음7.2
CVE-2026-111045CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing out…0.4%높음7.5
CVE-2026-97790Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver…0.4%보통5.5
CVE-2026-114665Goploy 1.18.0 before 1.18.1 contains a link following vulnerability in the /deploy/fileDiff and /deploy/fileCo…0.4%높음7.1
CVE-2026-69289Improper link resolution before file access ('link following') in Windows Setup Files Cleanup allows an author…0.4%높음7.8
CVE-2026-102242Improper link resolution (CWE-59 / CWE-22) in the allowedLocalRoots path validation in Google MCP Toolbox for …0.4%높음8.6
CVE-2026-107810Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, internal/backup/restore.go …0.4%높음8.1
CVE-2026-103401An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web ser…0.3%높음8.8
CVE-2026-119334Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side softw…0.3%낮음2.2
CVE-2026-88072Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges l…0.4%높음7.8
CVE-2026-85343Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacke…0.4%높음7.8
CVE-2026-102202Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized att…0.4%높음7.8
CVE-2026-70165Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevat…0.4%보통6.7
CVE-2026-100690Hugo versions from v0.161.0 through v0.165.0 run Node.js tools (css.PostCSS, css.TailwindCSS, js.Babel) under …0.3%높음8.7
CVE-2026-96231Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevat…0.3%높음7.8
CVE-2026-96225Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevat…0.3%높음7.8
CVE-2026-68491An insufficient check allowed for the overwrite of arbitrary files via a symlink.0.3%심각9.4
CVE-2026-102204Improper link resolution before file access ('link following') in Microsoft Defender for Endpoint allows an au…0.3%높음7.8
CVE-2026-69969Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an au…0.3%보통4.7
CVE-2026-69771Improper link resolution before file access ('link following') in Windows Container Manager Service allows an …0.3%보통4.7
CVE-2026-89258Hugo is a static site generator. In versions after v0.123.0 and before v0.165.0, symlinks in parent directorie…0.3%심각9.3
CVE-2026-106500Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @ba…0.3%높음8.5
CVE-2026-104109FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior …0.3%보통6.8
CVE-2026-106486Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder…0.3%높음8.5
CVE-2026-96282A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at a…0.3%낮음3.1
CVE-2026-109375Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that …0.3%보통4.9
CVE-2026-108759mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sand…0.3%높음7.6
CVE-2026-114462Improper link resolution before file access ('link following') vulnerability in Velneo vServer. This issue aff…0.3%보통6.0
CVE-2026-93353copyparty contains a volume restriction bypass vulnerability in its SFTP front end that allows authenticated S…0.3%보통6.0
CVE-2026-112344Syncplify Server! before 8.8.0 contains a path traversal vulnerability that allows attackers with a symbolic l…0.3%높음7.6
CVE-2026-106508Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs…0.3%보통5.3
CVE-2026-106507Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs…0.3%보통5.3
CVE-2026-90807A vulnerability was found in nanocoai NanoClaw up to 2.1.17. This issue affects the function forwardAttachedFi…0.3%낮음2.1
CVE-2026-115378Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability …0.3%보통6.9
CVE-2026-68830Improper link resolution before file access ('link following') in Windows Universal Plug and Play (UPnP) Devic…0.3%보통5.5
CVE-2026-83793Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows a…0.3%높음7.0
CVE-2026-69425Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker t…0.3%보통4.7
CVE-2026-69379Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker t…0.3%높음7.0
CVE-2026-55498FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior …0.3%보통4.8
CVE-2026-96243Improper link resolution before file access ('link following') in Windows WalletService allows an authorized a…0.3%높음7.8
CVE-2026-83659Improper link resolution before file access ('link following') in Windows User Profile Service allows an autho…0.3%높음7.8
CVE-2026-108135Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized a…0.3%높음7.0
CVE-2026-115709Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can …0.3%높음8.2
CVE-2026-119336Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side softw…0.2%높음7.8
CVE-2026-89021MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container package OCI/tar image…0.2%보통6.9
CVE-2026-108839thClaws through 0.141.0 contains a link-following vulnerability in the post_inputs handler of the v1 API POST …0.3%낮음2.3
CVE-2026-112936filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadW…0.2%보통6.1
CVE-2026-76061A flaw was found in CRI-O's `bind_mount_prefix` handling. When configured with a non-empty `bind_mount_prefix`…0.2%보통5.5
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.