CWE-789 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-789 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
CVE-2026-62370KubeEdge is an open source system for extending native containerized application orchestration capab…0.9%보통6.5CVE-2026-85324Memory allocation with excessive size value in Active Directory Federation Services (AD FS) allows a…0.8%높음7.5CVE-2026-53717Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based…0.7%보통6.5CVE-2026-53716Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based…0.7%보통6.5CVE-2026-93019Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 327…0.7%심각9.1CVE-2026-94626vLLM through 0.29.0 fails to validate the tp_size parameter in kv_transfer_params on OpenAI-compatib…0.6%높음8.7CVE-2026-82435Description The worker's Netty message decoder is installed ahead of the SASL authentication handler…0.6%심각9.8CVE-2026-58268SIPGO is a library for writing SIP services in the GO language. Prior to 1.4.1, ParserStream.parseSi…0.6%높음7.5
전체 목록
110건
CVE-2026-77301adm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, getData()…0.6%높음7.5
CVE-2026-20295A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Sec…0.5%높음8.6
CVE-2026-116095A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.1. Affected is the function jp…0.5%보통5.5
CVE-2020-37280cbor-sync through 1.0.4 contains a resource exhaustion vulnerability in CBOR.decode that trusts declared array…0.5%높음8.7
CVE-2026-88045rclone is a command-line program to sync files and directories to and from different cloud storage providers. …0.5%높음7.5
CVE-2026-109149A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknow…0.5%보통5.5
CVE-2026-93307A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the componen…0.5%낮음2.1
CVE-2026-77322SIPGO is a library for writing SIP services in the GO language. Prior to 1.4.3, WSConnection.Read in sip/trans…0.5%높음7.5
CVE-2026-77619Vector is a high-performance observability data pipeline. From 0.15.0 until 0.57.0, the logstash source reads …0.5%높음8.7
CVE-2026-59991psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to 1.17.4, PSDImage.composite(…0.5%높음7.5
CVE-2026-111279Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clie…0.5%높음8.7
CVE-2026-115909zip is a zip library for Rust that supports reading and writing simple ZIP files. From 1.3.0 until 9.0.0, ZipA…0.5%높음7.5
CVE-2026-93849Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 Mattermost fail …0.5%보통6.5
CVE-2026-102809PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command…0.5%높음7.1
CVE-2026-47321The CompressionFilter class uses ZLib to deflate and inflate data sent and received. When we inflate incoming …0.5%높음7.5
CVE-2026-85494Improper handling of length parameter inconsistency, Uncaught exception, Inefficient Algorithmic Complexity, M…0.5%높음8.7
CVE-2026-118590A security vulnerability has been detected in nipy nibabel up to 5.4.2. The affected element is the function a…0.4%보통6.9
CVE-2026-102731Memory allocation with excessive size value vulnerability in Apache Directory LDAP API. A malicious peer (or a…0.4%미평가
CVE-2026-85715ExifReader is a JavaScript Exif information parser. Prior to 4.41.1, ExifReader parses attacker-controlled HEI…0.4%높음7.5
CVE-2026-77410RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.recvContent in channel.go preallocates…0.4%높음8.9
CVE-2026-82458Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerabilit…0.4%높음8.7
CVE-2026-83745Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability…0.4%높음8.7
CVE-2026-94633Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability…0.4%높음8.7
CVE-2026-118589A weakness has been identified in nschloe meshio up to 5.3.5. Impacted is an unknown function of the file mesh…0.4%보통6.9
CVE-2026-108359PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1.19, 2.4.8…0.4%높음8.7
CVE-2026-85442MOOS core-moos through 10.4.0 fails to validate packet length declarations in CMOOSCommPkt::OnBytesWritten(), …0.4%높음8.7
CVE-2026-42528A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to c…0.4%보통4.3
CVE-2026-55149Vouch Proxy is an SSO and OAuth/OIDC login solution for Nginx using the auth_request module. Prior to 0.48.0, …0.4%높음7.5
CVE-2026-103603Memory allocation with excessive size value in the HSS/LMS signature code (HssPublicKeyParameters, HssSignatur…0.4%높음8.7
CVE-2026-61845Crass is a Ruby CSS parser that's fully compliant with the CSS Syntax Level 3 specification. Prior to 1.0.7, C…0.4%높음8.9
CVE-2026-96260Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to enforce …0.4%보통6.5
CVE-2026-91752GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerability in the process_star_office f…0.4%높음8.7
CVE-2026-102509Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits, and Uncontrolled Recursio…0.4%높음8.7
CVE-2026-104895The asynchronous Smile parser (NonBlockingByteArrayParser) uses a raw-binary length prefix taken from untruste…0.4%높음7.5
CVE-2026-118036In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infi…0.4%높음7.5
CVE-2026-102504Imager versions before 1.037 for Perl exit the process reading a raw image with an out-of-range raw_datachanne…0.4%높음7.5
CVE-2026-106569ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-…0.4%보통5.3
CVE-2026-88382hiredis commit 29ea279 (post-v1.5.0) contains an uncontrolled memory allocation vulnerability in its RESP aggr…0.4%높음7.5
CVE-2026-119278MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0…0.4%보통5.9
CVE-2026-77050An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. `django.utils.tra…0.4%보통6.9
CVE-2026-108106Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers…0.4%높음8.7
CVE-2026-54700ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, the S…0.4%보통6.9
CVE-2026-106453yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, LZ4DecompressorWithLength uses getDecompre…0.4%보통5.3
CVE-2026-106452yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, net.jpountz.lz4.LZ4BlockInputStream refill…0.4%보통5.3
CVE-2026-63566Memory allocation with excessive size value in the DTLS handshake reassembly (DtlsReliableHandshake, DtlsReass…0.4%높음8.7
CVE-2026-33374The Prometheus rule conversion API endpoints in Grafana do not limit request body size, allowing authenticated…0.4%보통6.5
CVE-2026-119276MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0…0.4%보통5.9
CVE-2026-115907zip is a zip library for Rust that supports reading and writing simple ZIP files. From 5.1.0 until 9.0.0, appl…0.4%높음7.5
CVE-2026-115417Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0…0.4%높음8.2
CVE-2026-106114ImageSharp is a 2D graphics library. From 1.0.0-beta0001 until 4.1.2, ICC CLUT parsing calculates allocation s…0.4%보통5.3
CVE-2026-92550A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to…0.4%높음7.5
CVE-2026-85445MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket() function tha…0.4%높음8.7
CVE-2026-62297ag-psd is a JavaScript library for reading and writing Photoshop Document files. Before the allocation-limit r…0.3%높음7.5
CVE-2026-115825HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a l…0.3%미평가
CVE-2026-67211OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellModelSerializer Versions Affected…0.3%미평가
CVE-2026-102510Integer Overflow, Improper Validation of Array Index, Uncontrolled Recursion and Memory Allocation with Excess…0.3%높음8.7
CVE-2026-119280MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. From 3.0…0.3%낮음3.7
CVE-2026-103224In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL mes…0.3%높음8.2
CVE-2026-103223In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQ…0.3%높음8.2
CVE-2026-107223Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.1.0 to 2.11.0, …0.3%높음7.1
CVE-2026-63574Memory allocation with excessive size value in the OpenPGP signature and user attribute subpacket parsers (Sig…0.3%높음8.7
CVE-2026-108683A security vulnerability has been detected in zhayujie CowAgent up to 2.1.9. The impacted element is an unknow…0.3%낮음2.1
CVE-2026-83594Memory allocation with an excessive size value in Apache Wicket. org.apache.wicket.markup.html.form.upload.res…0.3%높음8.3
CVE-2026-103005Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Exces…0.3%보통6.5
CVE-2026-19204A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing J…0.3%높음8.7
CVE-2026-112399Pillow is a Python imaging library. From 8.1.0 until 13.0.0, Pillow can allocate an APNG disposal background a…0.3%높음8.7
CVE-2026-84888A weakness has been identified in RightNow-AI OpenFang up to 0.6.9. This vulnerability affects the function sh…0.3%낮음2.1
CVE-2026-56387The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted input. …0.3%미평가
CVE-2026-102463In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary ar…0.3%높음8.2
CVE-2026-114629Web::Simple versions before 0.035 for Perl allocate a buffer sized by the Content-Length header for urlencoded…0.3%미평가
CVE-2026-111108Apache Kafka's code-generated protocol readers pre-size an array's collection from the element count declared …0.3%미평가
CVE-2026-105749Docling simplifies document processing by parsing diverse formats and providing integrations with the generati…0.3%보통6.5
CVE-2026-102466In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x My…0.3%높음8.2
CVE-2026-114349When a broker decodes a compressed record batch, the per-record decoder reads a declared body size from the de…0.2%미평가
CVE-2026-89092The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS ser…0.2%보통4.2
CVE-2026-115865Starlet versions before 0.33 for Perl allow a request declaring a large Content-Length to kill a worker by exh…0.2%미평가
CVE-2026-111551Several Kafka deserialization paths read a size or count field from input data and use it directly to allocate…0.2%미평가
CVE-2026-107215Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, …0.2%높음7.5
CVE-2026-83530A user could provide an expression whose string length is longer than the ParserExpressionSizeLimit() configur…0.2%보통6.9
CVE-2026-112214A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an atta…0.2%보통6.5
CVE-2026-107387music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the APEv2 parser reads …0.2%보통6.2
CVE-2026-105614PostgreSQL Anonymizer's `anon.image_blur()` function doesn't check the declared dimension of the provided imag…0.2%보통4.7
CVE-2026-105613PostgreSQL Anonymizer's range-based dummy functions dont constraint the range size. This vulnerability can be …0.2%보통4.7
CVE-2026-110258OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutineRetSuccess…0.2%보통6.8
CVE-2026-110257OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulnerability in ClassReader.readBootstrapMeth…0.2%보통6.8
CVE-2026-62254LibreDWG is a free C library to read and write DWG files. Prior to 0.14, a specially crafted R13-R2000 DWG can…0.2%보통5.5
CVE-2026-115394Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows…0.2%보통6.8
CVE-2026-113604Ghidra 10.2 through 12.1.4 contains a denial of service vulnerability in the ELF loader's ElfHeader class that…0.2%보통6.8
CVE-2026-97853Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.…0.1%보통6.9
CVE-2026-115922Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to 1.22.0…0.1%보통6.2
CVE-2026-78861An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Pri…0.1%높음7.7
CVE-2026-107390music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the MP4 parser accepts …0.1%보통6.2
CVE-2026-107388music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the ID3v2 parser trusts…0.1%보통6.2
CVE-2026-102820pageant provides a [PageantStream] type that implements [AsyncRead] and [AsyncWrite] traits and can be used to…0.1%보통6.2
CVE-2026-54697ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachine. Prior to 0.3.1, DerRe…0.1%보통6.7
CVE-2026-86776KeePass versions 2.35 through 2.61.1 fail to validate KDBX header field sizes before memory allocation in the …0.1%보통4.6
CVE-2026-112283VideoLAN libbluray through 1.5.1 contains an uncontrolled memory allocation vulnerability in _parse_extent_sta…0.1%보통6.8
CVE-2026-112048libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to…0.1%보통6.9
CVE-2026-107389music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the Matroska and WebM E…0.1%보통6.2
CVE-2026-85201In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in…0.1%보통6.8
CVE-2026-93323The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a…0.1%보통6.8
CVE-2026-63476isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphi…보통4.3
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.