CWE-80 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-80 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2020-13965An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via …76.6%보통6.1● 랜섬웨어 캠페인에 사용됨CVE-2018-19953If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicio…30.5%보통6.1● 랜섬웨어 캠페인에 사용됨CVE-2018-19943If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicio…22.7%보통5.4CVE-2026-52774YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki's Bazar widget handler refl…0.5%보통6.1CVE-2026-52773YesWiki is a wiki system written in PHP. From version 4.1.0 to before version 4.6.6, YesWiki's archi…0.5%보통6.1CVE-2026-112945Vite is a frontend tooling framework for JavaScript. Prior to 6.4.4, 7.3.7, 8.1.6, 8.2.4, and 8.3.3,…0.5%낮음2.1CVE-2026-68919GoCD is a continuous deliver server. From 13.3.0 until 26.1.0, GoCD does not correctly encode and es…0.5%높음7.0CVE-2026-52741GoCD is a continuous deliver server. From 18.3.0 until 26.1.0, GoCD can generate unescaped tracking-…0.4%높음7.5
전체 목록
49건
CVE-2026-91130Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.7.0…0.4%심각9.3
CVE-2026-103444Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia F…0.3%낮음1.1
CVE-2026-119479Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Crocoblock JetF…0.3%보통5.3
CVE-2026-62057Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Fahim Reza Divi…0.3%보통5.3
CVE-2026-52710Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ithemelandco GI…0.3%보통5.3
CVE-2026-116402Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brainstorm Forc…0.3%보통5.3
CVE-2026-116394Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Magepeople inc.…0.3%보통5.3
CVE-2026-48202Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brave Brave bra…0.3%보통5.3
CVE-2026-103585Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia F…0.3%낮음1.2
CVE-2026-103445Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia F…0.3%낮음1.2
CVE-2026-103437Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia F…0.3%낮음1.1
CVE-2026-12751IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject maliciou…0.3%보통5.4
CVE-2026-103584Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia F…0.3%낮음1.1
CVE-2026-25467Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ThemeGrill User…0.3%보통5.3
CVE-2026-57440The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser t…0.3%높음7.5
CVE-2026-54503plone.app.textfield provides a zope.schema-style field type called RichText for storing a value with a related…0.2%보통4.3
CVE-2026-63216Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, unsanitized option labels …0.2%보통5.3
CVE-2026-4418IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection. A remotely authenticated attacker c…0.2%보통5.4
CVE-2023-54409Frappe before 13.46.1 and 14.x before 14.20.0 contains a cross-site scripting vulnerability because the html2t…0.2%보통5.9
CVE-2026-108925Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Cohesity NetBac…0.2%보통6.1
CVE-2026-105829League CommonMark from 1.3.0 before 2.10.2 contains a cross-site scripting vulnerability that allows users pos…0.2%보통5.3
CVE-2026-102279Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APP_D…0.2%낮음3.1
CVE-2026-103443Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia F…0.2%낮음1.1
CVE-2026-10511The Jupiter X Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'forget_password_…0.2%보통6.4
CVE-2026-42694Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Kirki k…0.2%보통4.3
CVE-2026-106139In Progress® Kendo UI for Vue (@progress/kendo-vue-charts) starting with version 2.5.0 and prior to 16.2.0, th…0.2%보통5.4
CVE-2026-106138In Progress® KendoReact (@progress/kendo-react-charts) starting with version 1.1.0 and prior to 16.2.0, the de…0.2%보통5.4
CVE-2026-106163In Progress® Kendo® UI for jQuery versions starting with v2023.1.117 and prior to v2026.3.1015, the FileBrowse…0.2%보통6.5
CVE-2026-106148In Progress® Kendo® UI for jQuery prior to 2026.3.1015, the TabStrip, Menu, and PanelBar components insert dat…0.2%보통5.4
CVE-2026-106149In Progress® Kendo® UI for jQuery prior to v2026.3.1015, the Menu component constructs HTML attributes from bo…0.2%보통5.4
CVE-2026-106147In Progress® Kendo® UI for jQuery releases starting with R1 2020 and prior to 2026.3.1015, the ListBox default…0.2%보통5.4
CVE-2026-106151In Progress® Kendo® UI for jQuery versions starting with 2012.2.710 and prior to 2026.3.1015, the Validator de…0.2%보통5.4
CVE-2026-106161In Progress® Kendo® UI for jQuery releases starting with v2020.1.114 and prior to 2026.3.1015, the Badge text …0.2%보통5.4
CVE-2026-106157In Progress® Kendo® UI for jQuery versions starting with 2019.2.514 and prior to 2026.3.1015, the PanelBar com…0.2%보통4.7
CVE-2026-106159In Progress® Kendo® UI for jQuery versions starting with 2022.3.1109 and prior to 2026.3.1015, ToolBar ButtonG…0.2%보통4.7
CVE-2026-106158In Progress® Kendo® UI for jQuery, in v2026.3.811 and earlier, the Scheduler Day, Timeline, Month, and Agenda …0.2%보통4.7
CVE-2026-89290Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in İzometri IT Ser…0.2%낮음3.5
CVE-2026-106162In Progress® Kendo® UI for jQuery versions starting with 2023.3.1010 and prior to 2026.3.1015, the FileManager…0.1%보통4.7
CVE-2026-103439Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia F…0.1%낮음0.3
CVE-2026-103438Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia F…0.1%낮음0.3
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.