CWE-755 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-755 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2026-109619PHP has various global state that temporarily points into request memory. In some scenarios, global …100.0%심각9.2● 실제 악용이 확인됨CVE-2026-109618PHP uses longjmp() for out-of-memory (OOM) errors to exit the current context and abort handling of …100.0%심각9.2● 랜섬웨어 캠페인에 사용됨CVE-2017-5638The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has in…100.0%심각9.8● 실제 악용이 확인됨CVE-2020-7247smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows …99.0%심각9.8● 실제 악용이 확인됨CVE-2021-38003Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker …38.6%높음8.8● 실제 악용이 확인됨CVE-2018-0155A vulnerability in the Bidirectional Forwarding Detection (BFD) offload implementation of Cisco Cata…7.7%높음8.6● 실제 악용이 확인됨CVE-2024-29748there is a possible way to bypass due to a logic error in the code. This could lead to local escalat…0.7%높음7.8CVE-2026-105242Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of…0.8%보통5.3
전체 목록
41건
CVE-2026-112331Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produ…0.7%높음8.7
CVE-2026-112330Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publi…0.7%높음8.7
CVE-2026-112332Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that a…0.6%높음8.7
CVE-2026-54632SIPSorcery is a WebRTC, SIP, and VoIP library for C# and .NET. Prior to 10.0.9, RTPChannel.OnRTPPacketReceived…0.5%높음7.5
CVE-2026-103936libp2p is a JavaScript implementation of the libp2p networking stack. Prior to 6.0.28, the @libp2p/webrtc webR…0.5%높음7.5
CVE-2026-101099A vulnerability was detected in ag-ui-protocol ag-ui up to 2026-09-23. This affects an unknown part of the fil…0.5%보통5.3
CVE-2026-41508OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.4.0 until 3.8.0, …0.5%보통5.8
CVE-2026-94651improper handling of exceptional conditions, Missing release of resource after effective lifetime vulnerabilit…0.5%높음8.2
CVE-2026-53496ExifReader is a JavaScript Exif information parser. Prior to 4.40.1, ExifReader.load() and the asynchronous fi…0.5%보통5.3
CVE-2026-89025Hirschmann HiOS Switch Platform devices contain a denial-of-service vulnerability in the integrated web server…0.4%높음8.7
CVE-2026-53459Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D printers. Starting in version 0…0.4%심각9.3
CVE-2026-96277Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift Ruby bindings. …0.4%높음8.7
CVE-2026-96294Uncaught exception, Improper Handling of Exceptional Conditions vulnerability in Apache Thrift NodeJS bindings…0.4%높음8.7
CVE-2026-94639improper handling of exceptional conditions, Allocation of resources without limits or throttling, Uncaught ex…0.4%높음8.2
CVE-2026-90440Uncaught exception, improper handling of exceptional conditions, improper resource shutdown vulnerability in A…0.4%높음8.2
CVE-2026-72758When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimum value of…0.4%높음7.5
CVE-2026-72756Routinator exits when an rsync URI for a file obtained over RRDP contains a path that cannot be stored on disk…0.4%높음7.5
CVE-2026-72754When Routinator encounters a CRL with many entries, it may hang or run out of memory. If Routinator encounters…0.4%높음7.5
CVE-2026-72753When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and …0.4%높음8.2
CVE-2026-72757Routinator runs out of open connections on the HTTP server when many connections are opened but never closed, …0.4%보통5.3
CVE-2026-63450Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring …0.4%낮음3.7
CVE-2026-81516Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native…0.3%높음7.5
CVE-2026-81515Steeltoe is an open source project that provides a collection of libraries that helps users build cloud-native…0.3%높음7.5
CVE-2026-67080HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or ex…0.3%보통6.5
CVE-2026-102274PyJWT is a Python implementation of JSON Web Token standards. From 2.9.0 until 2.14.0, PyJWKSet does not catch…0.4%보통5.9
CVE-2026-101017A vulnerability was found in Trusted Domain Project OpenDMARC up to 1.4.2. This vulnerability affects the func…0.3%보통5.5
CVE-2026-101016A vulnerability has been found in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function open…0.3%보통5.5
CVE-2026-85473The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) …0.3%보통5.3
CVE-2026-105757vLLM is an inference and serving engine for large language models. Prior to 0.30.0, structured-output request …0.3%보통6.5
CVE-2026-54580mport is the MidnightBSD Package Manager. Prior to 2.7.8, libmport/util.c did not make every truncated, corrup…0.3%높음8.3
CVE-2026-72752Routinator runs out of memory when the JSON output is requested many times concurrently. This condition can be…0.2%보통6.5
CVE-2026-72755Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwrit…0.2%낮음3.8
CVE-2026-54578mport is the MidnightBSD Package Manager. Prior to 2.7.8, mport_verify_package() in libmport/verify.c could co…0.1%낮음2.0
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.