CWE-73 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-73 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2025-33053External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to …87.0%높음8.8● 실제 악용이 확인됨CVE-2024-43451NTLM Hash Disclosure Spoofing Vulnerability84.3%보통6.5● 실제 악용이 확인됨CVE-2025-24054External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spo…62.3%보통5.4● 실제 악용이 확인됨CVE-2020-1631A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Fir…4.9%심각9.8● 실제 악용이 확인됨CVE-2025-0111An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authen…2.0%높음7.1● 실제 악용이 확인됨CVE-2026-96656Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be exec…1.8%높음8.6CVE-2026-77621Vector is a high-performance observability data pipeline. From 0.10.0 until 0.57.0, the file sink re…1.1%심각9.3CVE-2026-110385A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an …1.0%높음8.7
전체 목록
120건
CVE-2026-85520Google Merchant Center Feed (gmfeed) module for PrestaShop is vulnerable to unauthenticated arbitrary file wri…1.0%심각9.3
CVE-2026-54629Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes file-backed SQ…1.0%높음7.5
CVE-2026-90817An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Im…1.0%심각9.8
CVE-2026-57155OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP …0.9%심각9.9
CVE-2026-69355External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute co…0.8%높음8.8
CVE-2026-106042An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remo…0.8%심각9.9
CVE-2026-111230Netgate pfSense CE through 2.9.0 contains a local file read vulnerability that allows users with the Dynamic D…0.8%보통6.9
CVE-2026-50006Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server forwards unauthenticat…0.8%심각9.1
CVE-2026-46652The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From ve…0.7%심각9.8
CVE-2026-59976ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanit…0.6%높음8.1
CVE-2026-106219In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositor…0.6%보통6.5
CVE-2026-85684marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /marker/upload handler that fails …0.7%높음8.8
CVE-2026-16338IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to perfo…0.6%심각9.9
CVE-2026-65125NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause external con…0.6%보통6.6
CVE-2026-54675FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the…0.6%높음8.7
CVE-2026-61738SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior …0.6%심각10.0
CVE-2026-90946DeepWiki-Open through commit d92819a contains an arbitrary file read vulnerability in the unauthenticated /ws/…0.6%높음8.7
CVE-2026-66302External control of file name or path in Skype for Business allows an unauthorized attacker to execute code ov…0.5%심각9.8
CVE-2026-54582mport is the MidnightBSD Package Manager. Prior to 2.7.8, package installation lacked a preflight check for in…0.5%보통6.0
CVE-2026-15983The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Arbitrary File/Directory Dele…0.5%높음8.1
CVE-2026-53940Conda is a system-level binary package and environment manager that runs on major operating systems and platfo…0.5%높음8.8
CVE-2026-54583mport is the MidnightBSD Package Manager. Prior to 2.7.8, libmport/fetch.c did not consistently reject empty, …0.5%높음8.3
CVE-2026-103507Perforce P4 Search prior to 2026.4.2 does not restrict file paths written through its logging configuration in…0.5%높음7.5
CVE-2026-69805External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a net…0.5%높음7.5
CVE-2026-115931Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend…0.5%심각9.9
CVE-2026-6205An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager (DSM) bef…0.5%높음8.1
CVE-2026-73171Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-re…0.5%높음8.6
CVE-2026-100638SiYuan versions before v3.8.4 contain a path traversal vulnerability in the setNotebookIcon endpoint that allo…0.5%높음8.3
CVE-2026-100637SiYuan versions before v3.8.4 contain a path traversal vulnerability in the checkoutRepo endpoint that allows …0.5%높음8.3
CVE-2026-90932LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup h…0.5%높음8.6
CVE-2026-107594The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path taken from att…0.5%심각10.0
CVE-2026-119328Immich is a high-performance self-hosted photo and video management solution. Prior to 3.3.0, the unauthentica…0.4%보통6.5
CVE-2026-54584mport is the MidnightBSD Package Manager. mport before 2.7.8 used TMPDIR while extracting package metafiles, i…0.5%보통5.3
CVE-2026-107377datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.81.0, an at…0.5%높음7.5
CVE-2026-85668Xinference (affected commit 4a94832, v3.x) contains an unauthenticated arbitrary-path file read vulnerability …0.4%높음8.7
CVE-2026-88899knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/op…0.4%심각9.3
CVE-2026-92153F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software…0.4%높음7.1
CVE-2026-69783External control of file name or path in Windows Update allows an authorized attacker to elevate privileges lo…0.4%높음7.8
CVE-2026-77247MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to …0.4%높음8.3
CVE-2026-75602OpenList a file list program that supports multiple storage. Prior to 4.2.3, OpenList's offline-download featu…0.4%보통6.5
CVE-2026-76553The WP Import Export Lite WordPress plugin before 3.9.33 does not validate a path taken from stored, user-supp…0.4%보통6.5
CVE-2026-13248An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface …0.4%높음8.8
CVE-2026-103591DeepWiki-Open through commit d92819a contains an unauthenticated arbitrary file read vulnerability in the GET …0.4%높음8.7
CVE-2026-57113PraisonAI is a multi-agent teams system. From version 2.6.0 to before version 4.6.59, PraisonAI's template loa…0.4%높음8.1
CVE-2026-86189WWBN AVideo contains a path traversal vulnerability in notify.ffmpeg.json.php that allows unauthenticated atta…0.4%심각9.3
CVE-2026-85603Grav versions before 1.10.55 contain a path traversal vulnerability in the admin plugin's Save As action that …0.4%높음7.1
CVE-2026-103928Metabase is an open source business intelligence and analytics platform. From 1.55.0 until 1.58.16, 1.59.13, 1…0.4%심각9.3
CVE-2026-105037EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege …0.4%심각9.9
CVE-2026-105676Ghost is a Node.js content management system. From 1.20.0 until 6.64.0, a vulnerability in how Ghost loads the…0.4%보통4.9
CVE-2026-57208Entire CLI hooks into Git workflows to capture AI agent sessions. Prior to version 0.7.7, a path traversal vul…0.4%보통6.2
CVE-2026-90464An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows …0.4%높음7.2
CVE-2026-94401MISP has a file-handling vulnerability that could let certain authenticated users make the server read files o…0.4%높음8.3
CVE-2026-105865Payload is a free and open source headless content management system. In versions before 3.90.0 and canary ver…0.4%높음8.1
CVE-2026-101126Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4 - The final form submissi…0.4%보통6.9
CVE-2026-85176DbGate fails to validate jslid parameters in the jsldata controller, allowing authenticated users to read and …0.3%높음8.7
CVE-2026-83603Netdata is an open source observability tool. Prior to 2.10.4, the setuid-root ndsudo helper command fail2ban-…0.3%높음8.4
CVE-2026-105744Docling simplifies document processing by parsing diverse formats and providing integrations with the generati…0.3%높음7.5
CVE-2026-73496MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to …0.3%높음7.7
CVE-2026-114253A vulnerability was determined in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591…0.3%낮음2.1
CVE-2026-53581OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and versio…0.3%심각9.0
CVE-2026-112310docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read…0.3%보통5.3
CVE-2026-62804External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code…0.3%높음7.8
CVE-2026-103511Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation featu…0.3%보통5.1
CVE-2026-102146An authenticated Email Protection Gateway administrator holding only limited, delegated permissions could writ…0.3%보통6.5
CVE-2026-119210MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0…0.3%보통5.9
CVE-2026-119298croc is a tool that allows any two computers to simply and securely transfer files and folders. Prior to 11.5.…0.3%보통4.2
CVE-2026-61647NotebookLM MCP is an MCP server and HTTP service for interacting with Google NotebookLM and exporting generate…0.3%높음7.1
CVE-2026-106559Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffold…0.3%보통6.3
CVE-2026-111234SimplePie through 1.9.0 contains a local file read vulnerability that allows malicious feed servers to read se…0.3%높음8.2
CVE-2026-77005The CODE MONKEYS PROPOSALS WordPress plugin through 1.0.1 does not validate a user-supplied file path before d…0.3%심각9.6
CVE-2026-92709Rsyslog is a rocket-fast system for log processing. From versions 1.15.0 to 8.2610.0, rsyslog's omfile dynaFil…0.3%높음8.1
CVE-2026-101148The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 does not properly validate its integratio…0.3%심각10.0
CVE-2026-5461The Forminator Forms plugin for WordPress is vulnerable to Limited File Deletion in all versions up to, and in…0.3%보통6.5
CVE-2026-119250A malicious actor with local access and low privileges could exploit an External Control of File Name or Path …0.3%높음7.8
CVE-2026-119198Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, a client with TCP access …0.3%보통5.9
CVE-2026-85687surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read vulnerability in the /info, /pa…0.3%높음8.7
CVE-2026-119343Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. Prior to 3.…0.3%보통6.8
CVE-2026-86995n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node valida…0.3%보통5.3
CVE-2026-103255n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path traversal…0.3%높음7.1
CVE-2026-106103Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongen…0.3%높음7.1
CVE-2026-106494Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-default…0.3%보통4.4
CVE-2026-114379A flaw has been found in EKKOLearnAI ekko-studio up to 1.0.6. This vulnerability affects the function saveGene…0.3%보통5.3
CVE-2026-109601Frappe Framework before 15.117.0 and 16.x before 16.30.0 contains an arbitrary file read vulnerability in the …0.3%높음7.1
CVE-2026-87815SiYuan versions before v3.8.2 contain a path traversal vulnerability in the /api/riff/removeRiffDeck endpoint …0.3%높음8.4
CVE-2026-90871Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior …0.3%보통5.3
CVE-2026-108591InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with fi…0.3%보통5.9
CVE-2026-103398OpenSave through 2.4.0 fails to properly validate save paths supplied by paired peers in the manifest request …0.3%높음8.6
CVE-2026-79692Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,…0.3%높음7.3
CVE-2026-114491pdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy() restriction to images referenced inside …0.3%보통6.9
CVE-2026-92164Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.…0.3%보통6.5
CVE-2026-78620The Okta Access Gateway Kerberos configuration handler does not validate file paths specified in event payload…0.3%보통5.9
CVE-2026-108694ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read …0.3%높음7.1
CVE-2026-86751Snipe-IT before 8.7.0 fails to properly sanitize markdown image syntax in note fields, allowing authenticated …0.2%높음8.4
CVE-2026-69383External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges loc…0.2%높음7.0
CVE-2026-111935NoteGen through 0.38.3 contains an external control of file path vulnerability in chat image analysis that all…0.3%낮음2.1
CVE-2026-53956Rattler is a library that provides common functionality used within the conda ecosystem. `rattler_cache` prior…0.2%보통5.4
CVE-2026-76796The LoadImageAsPngBase64 endpoint of the Newell Brands DYMO Connect Desktop local web service accepts a file p…0.2%보통5.1
CVE-2026-86671In Eclipse Che versions 7.29.0 and later, the GET `/api/scm/resolve` and `POST /api/factory/resolver` endpoint…0.3%높음8.4
CVE-2026-86741Snipe-IT versions before 8.7.0 fail to sanitize the category EULA text field before rendering it in checkout c…0.2%높음8.4
CVE-2026-81347The Frontend Admin by DynamiApps WordPress plugin before 3.29.13 does not properly validate a user-controllabl…0.2%보통5.9
CVE-2026-19253The Cache Enabler WordPress plugin before 1.8.17 does not validate a URL before using it to build a filesystem…0.2%높음8.7
CVE-2026-50158yutu is an AI-powered toolkit for managing and growing YouTube channels. Prior to 0.10.9, the caption-download…0.2%높음7.7
CVE-2026-19860The JetFormBuilder — Dynamic Blocks Form Builder WordPress plugin before 3.6.5.3 does not sufficiently restric…0.2%보통5.5
CVE-2026-105748Docling simplifies document processing by parsing diverse formats and providing integrations with the generati…0.2%보통4.3
CVE-2026-85160AVideo through commit c91b5975d contains a cross-site request forgery and path traversal vulnerability in stop…0.2%높음7.2
CVE-2026-116822YesWiki before 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows unauthenticated a…0.2%보통6.9
CVE-2026-54703Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code. Prior to 0.8.30, the _crossn…0.2%보통5.8
CVE-2026-104805DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker w…0.2%높음8.5
CVE-2026-91797Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting…0.2%높음7.8
CVE-2026-118437The BuddyForms WordPress plugin before 2.10.1 does not properly verify ownership before deleting guest-uploade…0.2%낮음3.7
CVE-2026-86147External control of file name or path and uncontrolled resource consumption in Apache bRPC (version < 1.18.0) …0.2%미평가
CVE-2026-82194The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.134 does not validate a user supplied pa…0.2%보통5.5
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.