CWE-754 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-754 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2024-3393A Denial of Service vulnerability in the DNS Security feature of Palo Alto Networks PAN-OS software …29.1%높음8.7● 실제 악용이 확인됨CVE-2023-41993The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web…24.3%높음8.8● 실제 악용이 확인됨CVE-2021-3560It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, e…23.7%높음7.8● 실제 악용이 확인됨CVE-2023-41992The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 a…9.5%높음7.8● 실제 악용이 확인됨CVE-2025-39682In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length…3.3%높음7.1CVE-2026-73549Envoy is an open source edge and service proxy designed for cloud-native applications. Prior to 1.36…0.6%보통5.3CVE-2026-62334OpenVM is a performant and modular zkVM framework built for customization and extensibility. Before …0.5%높음8.7CVE-2026-67416RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, th…0.5%보통5.3
전체 목록
50건
CVE-2026-73314XenForo before 2.3.13 contains a signature verification logic error in the PayPal REST webhook handler that al…0.5%높음8.7
CVE-2026-48741libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sa…0.4%높음7.5
CVE-2026-100352kin-openapi is a Go project for handling OpenAPI files. Prior to 0.148.0, the OpenAPI 3.1 validation path pass…0.4%높음7.5
CVE-2026-77411RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, readLongstr in read.go returns an empty string…0.4%심각9.5
CVE-2026-94105NivoCart through 2.4.0 contains a destructive configuration write vulnerability in the admin password reset co…0.4%보통6.9
CVE-2026-116516Mattermost versions <=11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zoom chat line length before slicing which…0.4%보통6.5
CVE-2026-85014undici's experimental WebSocketStream client crashes the whole Node.js process when a remote peer closes the T…0.4%보통5.9
CVE-2026-102077An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of…0.3%높음8.7
CVE-2026-100296In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, an empty-body POST to /setUserConfig, dispatched through t…0.3%높음7.2
CVE-2026-13411Mattermost versions 11.7.x <= 11.7.11 fail to validate null elements when decoding playbook import conditions …0.3%보통4.3
CVE-2026-91733Improper state validation in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had co…0.3%높음8.3
CVE-2026-0321Denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker wit…0.3%보통6.6
CVE-2026-113380In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere with t…0.3%심각9.3
CVE-2026-0318A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® …0.3%보통4.6
CVE-2026-107275@fastify/jwt is a JSON Web Token plugin for the Fastify web framework. In versions before 10.2.3, a time span …0.3%보통6.8
CVE-2026-104432Zebra before 6.3.0 contains an improper exceptional condition check in ChainSync::obtain_tips that discards va…0.3%보통6.9
CVE-2026-0317A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a r…0.3%낮음1.2
CVE-2026-106346Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to pot…0.3%높음8.8
CVE-2026-87548Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to by…0.3%미평가
CVE-2026-109855undici is an HTTP client library for Node.js. In versions 8.11.0 and 8.11.1, its experimental WebSocket client…0.3%높음7.5
CVE-2026-0319An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software e…0.3%보통4.9
CVE-2026-87012Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.1,…0.3%보통4.3
CVE-2026-65838Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.27.35, the opaAuthorizeRequest…0.3%높음8.2
CVE-2026-119126Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 mishandles dot notation keys with null or undefine…0.3%낮음2.3
CVE-2026-95330Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to by…0.3%보통6.5
CVE-2026-10556Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to validate…0.2%보통5.3
CVE-2026-93387Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain …0.3%보통4.3
CVE-2026-62374SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specification. In version 0.…0.2%높음7.1
CVE-2026-13417Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to validate…0.2%보통4.3
CVE-2026-87532Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to…0.2%미평가
CVE-2026-78017Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for…0.2%낮음3.8
CVE-2026-107311Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions by Term allows Forcef…0.2%낮음3.7
CVE-2026-117680Improper Check for Unusual or Exceptional Conditions vulnerability in the pattern and patternProperties keywor…0.2%낮음2.1
CVE-2026-106562Backstage is an open framework for building developer portals. Prior to 2.1.6 in @backstage/plugin-search-back…0.2%보통4.3
CVE-2026-87656Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to…0.2%미평가
CVE-2026-106343Improper state validation in Autofill AI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remot…0.2%보통5.4
CVE-2026-87645Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to…0.2%미평가
CVE-2026-115385Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial of service vulnerability in the wasmt…0.1%보통6.9
CVE-2026-121237Improper state validation in FileSystem in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leve…미평가
CVE-2026-121098Improper state validation in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had com…높음8.3
CVE-2026-121054Improper state validation in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass w…미평가
CVE-2026-121445darylldoyle svg-sanitizer from 1.0.0 before 1.1.0 contains a regular expression denial of service vulnerabilit…높음8.2
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.