CVE Ledger

CWE-617 관련 취약점

같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.

원장 35,126건이 중 악용 확인 1,767건분류: CWE-617

CWE-617 — 주요 취약점

악용이 확인된 것을 먼저 보여줍니다.

● 실제 악용이 확인됨CVE-2015-5477ISC · BINDnamed in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a…99.6%높음7.5CVE-2026-116467A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. Affected by this vulnerabilit…0.6%보통6.9CVE-2026-94623vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL connector's prefix cachin…0.6%높음8.7CVE-2026-102012A Reachable Assertion vulnerability in the na-grpcd process of Juniper Networks Junos OS Evolved all…0.6%높음8.7CVE-2026-92156F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedde…0.5%보통6.5CVE-2026-75894In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranap_handle_co_dt() fun…0.5%미평가 CVE-2026-108105Open5GS through 2.8.0 contains a reachable assertion vulnerability in mme_gn_handle_sgsn_context_req…0.5%높음8.2CVE-2026-92971InternLM LMDeploy through 0.17.0 contains a reachable assertion vulnerability in the DistServe decod…0.5%높음8.7

전체 목록

120건

CVE-2026-92151F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software…0.5%높음7.5

CVE-2026-91147A flaw was found in `cockpit-ws`. This vulnerability allows a remote, unauthenticated attacker to cause a Deni…0.5%보통5.9

CVE-2026-80274If a BIND resolver sends a query for a DNSSEC-signed authoritative zone, and the authoritative server replies …0.5%높음7.5

CVE-2026-76163If BIND is loaded with a "`named.conf`" file that contains no global "`options`" block, an attacker can send a…0.5%높음7.5

CVE-2026-96888A BIND resolver that is configured with both a "redirect" zone and "qname-minimization strict" may abort with …0.5%높음7.5

CVE-2026-92150F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software…0.5%높음7.5

CVE-2026-97313A recursive BIND server that receives a query with recursion desired (RD=1) followed by a non-recursive query …0.4%높음7.5

CVE-2026-55776OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, an authenticated OpenBao c…0.5%보통6.5

CVE-2026-102023A Reachable Assertion vulnerability in fwstatsd of Juniper Networks Junos OS Evolved allows an authenticated n…0.5%높음8.7

CVE-2026-102022A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juno…0.5%높음8.7

CVE-2026-102070A Reachable Assertion vulnerability in the Two-Way Active Measurement Protocol (TWAMP) client of Juniper Netwo…0.5%심각9.2

CVE-2026-102044A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allow…0.5%높음8.7

CVE-2026-102020A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allow…0.5%높음8.7

CVE-2026-102483Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS …0.4%높음7.5

CVE-2026-90786A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function align_order_members …0.4%보통5.5

CVE-2026-75584ION-DTN before 4.2.1-a.1 contains a denial of service vulnerability that allows unauthenticated remote attacke…0.4%높음8.7

CVE-2026-89146libp2p-rendezvous through 0.17.1 fails to validate registration TTL values in discovery responses, allowing at…0.4%높음8.7

CVE-2026-43853A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the s…0.4%높음8.2

CVE-2026-109363ZcashFoundation Zebra 6.4.0 before 6.4.2 parses version 6 transactions carrying a pre-NU6.3 consensus branch I…0.4%높음8.7

CVE-2026-90785A vulnerability was found in Dvidelabs flatcc up to 0.6.3. This affects the function analyze_struct of the fil…0.4%보통5.5

CVE-2026-105753vLLM is an inference and serving engine for large language models. Prior to 0.28.0, the default mirrored multi…0.4%보통6.5

CVE-2026-92157F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software…0.4%보통6.5

CVE-2026-86317A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpc_server::deserial…0.4%보통6.9

CVE-2026-115914vLLM is an inference and serving engine for large language models. From 0.11.1 until 0.32.0, the DeepSeek-OCR,…0.4%보통6.5

CVE-2026-92416A vulnerability has been found in Open5GS up to 2.8.0. Affected by this issue is the function smf_n4_handle_se…0.4%보통5.3

CVE-2026-84450libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.3, a crafted image item con…0.4%보통4.3

CVE-2026-104428The getblock RPC method in zebra-rpc before 11.0.0, used by the Zcash Foundation's Zebra node, panics on verbo…0.4%보통6.9

CVE-2026-102064A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juno…0.4%높음8.7

CVE-2026-76491As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series s…0.4%높음7.5

CVE-2026-82052The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to c…0.4%높음7.1

CVE-2026-92155F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software…0.4%높음7.5

CVE-2026-91951FreeRDP versions before 3.31.0 contain an out-of-bounds write vulnerability in the urbdrc client channel's urb…0.3%높음7.1

CVE-2026-91961FreeRDP before 3.31.0 contains a denial-of-service vulnerability in the URBDRC control-transfer request path t…0.3%높음7.1

CVE-2026-92160F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software…0.3%보통6.5

CVE-2026-107838RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embe…0.3%높음7.5

CVE-2026-85534A flaw was found in libsoup. When a client sends an HTTP/2 request body from a non-pollable input stream, the …0.3%보통5.9

CVE-2026-8674Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose…0.3%보통5.3

CVE-2026-109678FreeRDP 3.0.0-beta1 before 3.32.0, when built with verbose WinPR assertions and using smartcard emulation, has…0.3%높음7.1

CVE-2026-101936A Reachable Assertion vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an…0.3%높음7.1

CVE-2026-82064A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a sp…0.3%높음8.7

CVE-2026-103108Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation in the media i…0.3%높음7.5

CVE-2026-103104Pexip Infinity before 38.2, plus 39.0, 39.1 and 40.0, is affected by improper input validation in the media im…0.3%높음7.5

CVE-2026-103099Pexip Infinity before 41.1 is affected by improper input validation in the media implementation that allows a …0.3%높음7.5

CVE-2026-104434ZcashFoundation Zebra zebra-rpc before 8.0.0 and zebrad before 4.5.0 contain a reachable assertion in the z_li…0.3%높음7.1

CVE-2026-56388The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header. A remote unaut…0.3%미평가

CVE-2026-82065A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with co…0.3%높음7.1

CVE-2026-82068A security issue in MongoDB Server allows an authenticated user with write privileges to trigger a persistent …0.3%높음7.1

CVE-2026-102063A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos on MX Serie…0.3%높음7.1

CVE-2026-39453Navigating to a certain URL on the switch’s web server causes the switch to reboot. This can be automated usin…0.3%높음8.5

CVE-2026-102000A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an ad…0.3%높음7.1

CVE-2026-102071A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juno…0.3%높음7.1

CVE-2026-101996A Reachable Assertion vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved devi…0.3%높음7.1

CVE-2026-102042A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos OS Evolved allow…0.3%높음7.1

CVE-2026-101993A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juno…0.3%높음7.1

CVE-2026-102034A Reachable Assertion vulnerability in the l2ald daemon of Juniper Networks Junos OS and Junos OS Evolved allo…0.3%높음7.1

CVE-2026-102011A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an ad…0.3%높음7.1

CVE-2026-101984A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juno…0.3%높음7.1

CVE-2026-102041A Reachable Assertion vulnerability in the rpd routing daemon of Juniper Networks Junos OS and Junos OS Evolve…0.3%높음7.1

CVE-2026-102035A Reachable Assertion vulnerability in the l2ald process of Juniper Networks Junos OS and Junos OS Evolved all…0.3%높음7.1

CVE-2026-101999A Reachable Assertion vulnerability in the rpd process of Juniper Networks Junos OS and Junos EVO allows an ad…0.3%높음7.1

CVE-2026-101989A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juno…0.3%높음7.1

CVE-2026-109946FreeRDP 3.11.0 before 3.32.0 does not validate that AVC444 and AVC444v2 region widths are even before YUV444 c…0.3%높음7.1

CVE-2026-109944FreeRDP 3.0.0 before 3.32.0 does not remove card handles when Emulate_SCardReleaseContext releases a smartcard…0.3%높음7.1

CVE-2026-109350Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerability that allows malicious remotes to cr…0.3%높음7.1

CVE-2026-109349gitoxide gix-pack before 0.75.0 contains a reachable assertion in BytesToEntriesIter::new_from_header: the pac…0.3%높음7.1

CVE-2026-105754vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the /inference/v1/generate…0.3%보통6.5

CVE-2026-119142Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability where droppi…0.3%보통5.9

CVE-2026-119138Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows …0.3%보통5.9

CVE-2026-82059An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authentic…0.3%보통6.0

CVE-2026-103100Pexip Infinity before 40.1 is affected by improper input validation in the signaling implementation that allow…0.3%높음7.5

CVE-2026-102058A Reachable Assertion vulnerability in the bfdd daemon of Juniper Networks Junos OS and Junos OS Evolved platf…0.3%높음7.1

CVE-2026-9825IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitte…0.2%낮음3.7

CVE-2026-19395In Qt for MCUs, a Text element that displays styled text halts the device if an <img> tag in the text contains…0.3%보통6.6

CVE-2026-101964A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juno…0.3%높음7.1

CVE-2026-78048A reachable-assertion flaw in the HPACK header-compression decoder of the HTTP/2 (h2/gRPC) stack in Apache bRP…0.2%미평가

CVE-2026-96299A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user wit…0.2%높음7.1

CVE-2026-104005A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user wit…0.2%높음7.1

CVE-2026-73438On affected platforms running Arista EOS with Open Shortest Path First version 3 (OSPFv3) configured, an unaut…0.2%높음7.0

CVE-2026-119132Wasmtime from 49.0.0 before 49.0.3 contains a denial-of-service vulnerability that allows a WebAssembly guest …0.2%보통5.9

CVE-2026-109240FreeRDP 3.11.0 before 3.32.1 contains a reachable assertion vulnerability in urb_isoch_transfer that allows ma…0.2%낮음2.3

CVE-2026-119135Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 panics when the host reads a component model stream as …0.2%보통5.9

CVE-2026-119139Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a leftover assertion in component::Func::call …0.2%보통5.9

CVE-2026-15893net_if_ipv6_calc_reachable_time() in subsys/net/ip/net_if.c derives a randomized ND reachable time from ipv6->…0.2%보통6.5

CVE-2026-20600In Modem, there is a possible application crash due to a logic error. This could lead to remote denial of serv…0.2%보통5.3

CVE-2026-20525In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial …0.2%보통5.3

CVE-2026-20593In Modem, there is a possible application crash due to improper input validation. This could lead to remote de…0.2%보통5.3

CVE-2026-20503In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of …0.2%보통5.3

CVE-2026-20504In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of …0.2%보통5.3

CVE-2026-82210Enforceable assertion in the streaming feature of Apache bRPC (version < 1.18.0) on all platforms allows a rem…0.2%미평가

CVE-2026-87018undici is an HTTP client library for Node.js. In versions 4.2.1 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.…0.2%높음7.5

CVE-2026-101975A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Juno…0.2%높음7.1

CVE-2026-119339Tesseract is an open source OCR engine. Prior to 5.5.4, WeightMatrix::DeSerialize trusts a mode byte from a tr…0.2%보통5.5

CVE-2026-88341A reachable assertion vulnerability exists in YARA 4.5.8 when loading crafted .yrc compiled rule files. An att…0.2%보통5.5

CVE-2026-84971Improper handling of an unexpected value size in the decryption path of a client-side encryption library can c…0.2%높음7.1

CVE-2026-81038The Object Transfer Service server builds its Object Action Control Point (OACP) response indication in oacp_i…0.1%높음7.1

CVE-2026-82425A reachable assertion in Apache bRPC (version < 1.18.0) on all platforms allows a malicious remote peer to cra…0.1%미평가

CVE-2026-96422Frame protocol metadissector crash in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service0.1%보통5.5

CVE-2026-90611A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmt_parse_element of the file…0.1%낮음1.9

CVE-2026-90683A vulnerability was detected in GPAC up to f1219cde. Affected is the function gf_node_unregister of the file s…0.1%낮음1.9

CVE-2026-90612A vulnerability was identified in GPAC up to f1219cde. Affected is the function gf_sm_dump_command_list of the…0.1%낮음1.9

CVE-2026-90613A security flaw has been discovered in GPAC up to f1219cde. Affected by this vulnerability is the function stb…0.1%낮음1.9

CVE-2026-102916A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulati…0.1%보통6.8

CVE-2026-90685A vulnerability has been found in GPAC up to f1219cde. Affected by this issue is the function lsr_exec_command…0.1%낮음0.9

CVE-2026-90684A flaw has been found in GPAC up to f1219cde. Affected by this vulnerability is the function gf_node_get_field…0.1%낮음0.9

CVE-2026-19740The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains …0.1%보통6.5

CVE-2026-89098A flaw was found in nfs-utils. The fsidd daemon improperly handles input received over its local domain socket…0.1%보통5.5

CVE-2026-19739The Bluetooth Link Layer control procedure code in subsys/bluetooth/controller/ll_sw/ull_llcp_conn_upd.c retai…0.1%보통6.5

CVE-2026-31911libpcap BPF interpreter calls abort() if it encounters a BPF instruction that has an invalid opcode. In partic…0.1%보통5.5

CVE-2026-120956The MongoDB C Driver does not validate the type or format of a namespace field returned by the server in a que…높음7.1

CVE-2026-121409FreeRDP before 3.32.2 contains a denial of service vulnerability that allows malicious servers or unauthentica…높음8.2

CVE-2026-121406FreeRDP before 3.32.2 allows a client assertion abort because rdpgfx_on_data_received rejects only negative zg…보통5.3

CVE-2026-121396FreeRDP clients from 3.0.0 before 3.32.2 built with verbose WinPR assertions contain a reachable assertion in …보통5.3

이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.