CWE-770 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-770 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2020-3566A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR So…3.7%높음8.6● 실제 악용이 확인됨CVE-2020-3569Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco …3.3%높음8.6CVE-2026-70133Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized at…1.1%높음7.5CVE-2026-45769Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M…1.2%높음7.5CVE-2026-70163Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized a…1.1%높음7.5CVE-2026-85319Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS)…1.1%높음7.5CVE-2026-83645Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS)…1.1%높음7.5CVE-2026-70072Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attack…1.1%보통6.5
전체 목록
120건
CVE-2026-96236Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny s…1.1%높음7.5
CVE-2026-85321Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an…1.1%높음7.5
CVE-2026-70181Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny s…1.1%높음7.5
CVE-2026-70159Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny s…1.1%높음7.5
CVE-2026-69374Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to de…1.1%보통6.5
CVE-2026-93491A flaw was found in Netty's HttpServerCodec. A remote, unauthenticated attacker can exploit this vulnerability…0.9%높음7.5
CVE-2026-96300Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny servi…0.8%보통5.9
CVE-2026-100274In JetBrains YouTrack before 2026.2.19197 project Admin could trigger DoS via a notification template0.8%보통6.5
CVE-2026-57099Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny s…0.8%높음7.5
CVE-2026-96959Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service o…0.8%높음7.5
CVE-2026-72978Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an…0.8%보통5.9
CVE-2026-50277dd-trace-cpp is the Datadog distributed tracing library for C++. Prior to 2.1.0, dd-trace-cpp parses incoming …0.8%높음7.5
CVE-2026-50276dd-trace-rb is Datadog's client library for Ruby. Prior to 2.32.0, W3C baggage extraction does not enforce DD_…0.8%높음7.5
CVE-2026-50285Pomerium is an identity and context-aware access proxy. Prior to 0.32.8, decodeQueryStringV2 in pkg/hpke/url.g…0.7%높음7.5
CVE-2026-109527The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and client…0.7%높음7.5
CVE-2026-93688SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails to validat…0.7%높음8.7
CVE-2026-101896Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript…0.7%높음8.2
CVE-2026-104713Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin. A request…0.7%보통6.5
CVE-2026-93310A vulnerability was identified in O-RAN-SC SMO OAM 2025-06-10. This affects an unknown part of the component V…0.7%보통5.5
CVE-2026-93488A flaw was found in Netty. SpdySessionHandler accepts an unlimited number of concurrent remote-initiated strea…0.7%높음7.5
CVE-2026-57227Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring …0.7%높음7.5
CVE-2026-50275The Datadog PHP Tracer provides application performance monitoring and distributed tracing for PHP. Prior to 1…0.7%높음7.5
CVE-2026-68495The CBOR parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLength…0.7%높음7.5
CVE-2026-68496The Smile parser in FasterXML jackson-dataformats-binary never invokes StreamReadConstraints.validateNameLengt…0.7%높음7.5
CVE-2026-109468Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny s…0.6%높음7.5
CVE-2026-68956Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP ssh allows an authenticated r…0.7%높음7.1
CVE-2026-57173vLLM is an inference and serving engine for large language models. Prior to 0.24.0, the input_audio handling p…0.7%보통6.5
CVE-2026-93838SGLang versions through 0.5.20 contain an unbounded memory allocation vulnerability in handle_staging_req() th…0.7%높음8.2
CVE-2026-1168GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 1…0.6%높음7.5
CVE-2025-14871GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 1…0.6%높음7.5
CVE-2026-94613authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an unauthenticated a…0.6%높음7.5
CVE-2026-114213Allocation of Resources Without Limits or Throttling vulnerability in the WebSocket fragment reassembly of mtr…0.6%높음8.7
CVE-2026-111101Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/1.1 chunked body reader of mtru…0.6%높음8.7
CVE-2026-110499Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of mtrudel ban…0.6%높음8.7
CVE-2026-115269Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrude…0.6%높음8.7
CVE-2026-108525Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of mtrudel ban…0.6%높음8.7
CVE-2026-119701WPGraphQL before 2.24.1 contains a missing rate limiting vulnerability that allows unauthenticated attackers t…0.6%보통6.9
CVE-2026-108395The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients. F…0.6%높음7.5
CVE-2026-94624vLLM through 0.29.0 contains a denial of service vulnerability in P2P KV offloading when OffloadingConnector i…0.6%높음8.7
CVE-2026-59990Jawn is an open source JSON parser. Prior to 1.7.0, Jawn parse methods accept arbitrarily deep JSON array and …0.6%높음7.5
CVE-2026-82399CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, an…0.6%높음7.5
CVE-2026-75508GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.2.3 until 3.2.12 and 3.3.0rc1…0.6%높음7.5
CVE-2026-84447libheif is a HEIF and AVIF file format decoder and encoder. In 1.23.1 and earlier, crafted grid, iovl, and ide…0.6%높음7.5
CVE-2026-91149A flaw was found in Cockpit. An unauthenticated remote attacker can exploit this vulnerability by initiating a…0.6%높음7.5
CVE-2026-97200Allocation of Resources Without Limits or Throttling vulnerability in hackney_conn in benoitc hackney allows a…0.6%높음8.2
CVE-2026-91080webhook through 2.8.3 reads the entire request body into memory before evaluating trigger rules, allowing unau…0.6%높음8.7
CVE-2026-93572A flaw was found in Netty's `RedisArrayAggregator` component. A remote attacker can exploit this vulnerability…0.6%높음7.5
CVE-2026-115778Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, tw…0.5%높음7.5
CVE-2026-50270dd-trace-java is a Datadog APM client for Java. Prior to 1.62.0, W3C baggage extraction does not enforce DD_TR…0.6%높음7.5
CVE-2026-65654github.com/temporalio/ringpop-go enforces configured LabelOptions limits when an application changes the local…0.6%높음8.7
CVE-2026-111985A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This impacts the function read…0.5%낮음2.1
CVE-2026-54156node-opcua is an OPC UA implementation for TypeScript and Node.js. Prior to 2.166.0, the process-global g_alre…0.5%높음7.5
CVE-2026-107166A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogs_pfcp_xact_l…0.6%보통5.5
CVE-2026-113658ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0, the unauthenticated Rich T…0.5%높음7.5
CVE-2026-54135AirSane is a SANE frontend, and a scanner server that supports Apple's AirScan protocol. Versions prior to 0.4…0.6%높음7.5
CVE-2026-67414RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.24, 4.1.15, 4.2.10, and 4.3.4, deps/amqp10_…0.5%보통6.0
CVE-2026-103471restbed through 5.0.0 buffers HTTP request headers without enforcing a maximum size limit, allowing remote una…0.6%높음8.7
CVE-2026-108859mcp-go through 1.2.1 contains a denial of service vulnerability in StreamableHTTPServer.ServeHTTP that allows …0.5%높음8.7
CVE-2026-113711ApostropheCMS is an open-source Node.js content management system. Prior to 4.33.0 of ApostropheCMS and 3.7.0 …0.5%높음7.5
CVE-2026-75516The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with Rabbit…0.5%높음8.7
CVE-2026-118689OvenMediaEngine through 0.21.0 contains a denial of service vulnerability in OvtPacket::LoadHeader() that allo…0.5%높음8.7
CVE-2026-115776Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, tw…0.5%높음7.5
CVE-2026-82439Description The DRPC server kept a map from function name to request queue and created an entry the first time…0.5%심각9.8
CVE-2026-116078Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrude…0.5%높음8.7
CVE-2026-103042LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL control channel when started wit…0.5%높음8.7
CVE-2026-77528Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio. Prior to …0.5%보통5.3
CVE-2026-93309A vulnerability was determined in O-RAN-SC SMO OAM 2025-06-10. Affected by this issue is some unknown function…0.5%낮음2.1
CVE-2026-93308A vulnerability was found in O-RAN-SC SMO OAM 2025-06-10. Affected by this vulnerability is an unknown functio…0.5%낮음2.1
CVE-2026-76716Multiple vulnerabilities exist in the Analytics and Location Engine (ALE) that may allow for unauthorized acce…0.5%보통5.3
CVE-2026-114644The MongoDB C# Driver's BSON library contains an uncontrolled resource consumption weakness in its deserializa…0.5%높음8.2
CVE-2026-114052vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio model serving tha…0.5%높음8.7
CVE-2026-41510OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. From 3.0.0 until 3.8.1, …0.5%높음7.2
CVE-2026-81176Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficien…0.5%보통5.3
CVE-2026-112269SGLang through 0.5.22 with the Mooncake disaggregation backend accepts unauthenticated decode registration mes…0.5%높음7.1
CVE-2026-109228SGLang through 0.5.21 contains a resource budget bypass vulnerability that allows remote attackers to override…0.5%높음8.7
CVE-2026-107386amqp091-go is a Go AMQP 0.9.1 client. From 1.13.0 until 1.14.0, the frame-size mitigation from the prior alloc…0.5%보통6.3
CVE-2026-82728Allocation of Resources Without Limits or Throttling vulnerability in elixir-mint mint allows a remote HTTP se…0.5%높음8.2
CVE-2026-54086SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU han…0.5%보통5.3
CVE-2026-113795pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, accessing a crafted PDF stream with …0.5%보통6.0
CVE-2026-89425UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for it…0.5%높음7.5
CVE-2026-45763Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring …0.5%보통5.9
CVE-2026-77281Caddy is an extensible server platform that uses TLS by default. In version 2.11.3 and earlier, three configur…0.5%보통6.5
CVE-2026-57497webtransport-go is an implementation of the WebTransport protocol. Prior to 0.11.1, Session.parseNextCapsule()…0.5%보통5.3
CVE-2026-113729Moov signedxml is a pure Go library for processing signed XML documents. Prior to 1.4.1, ExclusiveCanonicaliza…0.5%높음7.5
CVE-2026-119699WPGraphQL Smart Cache before 2.3.3 contains an uncontrolled resource consumption vulnerability that allows una…0.5%보통6.9
CVE-2026-91865A small WS-Policy document using repeated policy references can force Neethi to re-expand the same references …0.5%높음7.5
CVE-2026-91864A specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which Neethi copi…0.5%높음7.5
CVE-2026-91866A specially crafted pair of WS-Policy documents can force Neethi's policy-intersection to do exponential amoun…0.5%높음7.5
CVE-2026-69147vLLM is an inference and serving engine for large language models. Prior to 0.28.0, request bodies for Chat Co…0.5%보통6.5
CVE-2026-69218Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, When Ember receives an HTTP/2 H…0.5%높음7.5
CVE-2026-69203Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, An Ember server with HTTP/2 ena…0.5%높음7.5
CVE-2026-110595BottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in _read_upload() that …0.5%보통5.3
CVE-2026-45768Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring …0.5%높음7.5
CVE-2026-115482In lsquic before 4.9.0, the HTTP/3 implementation can use an excessive amount of memory because the number of …0.4%높음7.5
CVE-2026-115775Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, th…0.4%높음8.7
CVE-2026-103261Tornado before 6.5.9 fails to limit the number of query string fields in HTTPServerRequest.__init__, allowing …0.5%보통6.9
CVE-2026-67230RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15, 4.0.20, 4.1.11, and 4.2.6, the Web ST…0.5%보통6.3
CVE-2026-104817Misskey is an open source, federated social media platform. From 12.112.1 until 2026.7.0, the unauthenticated …0.5%높음8.7
CVE-2026-114136Django REST framework is a toolkit for building Web APIs. From 3.6.4 until 3.18.2, JSONParser.parse in rest_fr…0.4%높음7.5
CVE-2026-114144toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() passes unbounded hexadeci…0.4%높음7.5
CVE-2026-88084Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny servi…0.5%보통5.3
CVE-2026-100350kin-openapi is a Go project for handling OpenAPI files. From 0.145.0 until 0.146.0, openapi3filter repeatedly …0.5%보통5.3
CVE-2026-54873Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impa…0.5%높음7.5
CVE-2026-86696Allocation of Resources Without Limits or Throttling vulnerability in esaml in dropbox esaml allows an unauthe…0.4%높음8.2
CVE-2026-92003Affected versions of MISP do not consistently apply the existing authentication-failure logging throttle. Two …0.4%보통6.9
CVE-2026-69202Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, Ember’s HTTP/2 flow-control win…0.4%높음7.5
CVE-2026-53752docx4j is an open source Java library for creating, editing, and saving OpenXML packages, including DOCX, PPTX…0.4%높음7.5
CVE-2026-108768A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the function json.l…0.5%낮음2.1
CVE-2026-114731Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled resource consumption vul…0.4%보통5.3
CVE-2026-54716Valhalla is an open source routing engine and accompanying libraries for use with OpenStreetMap data. In 3.7.0…0.5%높음7.5
CVE-2026-107585Uncontrolled eviction in the pending sign-in tables of the REST API in Progressive Robot hMailServer 6.3.4 and…0.4%보통5.3
CVE-2026-105626HashiCorp Consul and Consul Enterprise are vulnerable to a denial of service in the HTTP API that may allow an…0.4%높음7.5
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.