CWE-620 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-620 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
CVE-2026-91995pig before 4.1.0 contains an authentication bypass vulnerability in the /register/password endpoint …0.6%심각9.3CVE-2026-97380MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 1…0.6%높음8.8CVE-2026-46623Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the OAuth2 authen…0.5%높음7.4CVE-2026-54176backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of …0.5%보통6.5CVE-2026-92467zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in…0.4%높음8.7CVE-2026-86260A security flaw has been discovered in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef…0.4%보통5.5CVE-2026-118984OmniRoute 3.8.0 before 3.8.52 contains an unverified password change vulnerability that allows holde…0.4%높음7.0CVE-2026-54175backpack/crud provides Create, Read, Update & Delete (CRUD) functions for Backpack, a collection of …0.4%높음7.6
전체 목록
15건
CVE-2026-119429phpMyAdmin through 5.2.3 contains a missing re-authentication vulnerability that allows authenticated attacker…0.4%보통5.3
CVE-2026-102603Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Prior to 3.0.0…0.3%보통5.3
CVE-2026-85591phpMyFAQ versions before 4.1.8 contain an authentication bypass vulnerability in the user control panel API en…0.3%높음7.1
CVE-2026-112002ProjectSend 2.5.0 before 2.7.0 contains an unverified password change vulnerability in PasswordController::upd…0.3%높음7.6
CVE-2013-20008Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the …0.3%높음7.0
CVE-2026-104106FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior …0.3%보통6.5
CVE-2026-105785Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prio…0.2%보통4.8
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.