CWE-835 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-835 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2024-20353A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA) So…69.8%높음8.6CVE-2026-110354HAProxy 3 before 3.4.6 allows a remote unauthenticated attacker to cause a denial of service (persis…0.8%높음7.5CVE-2026-101895Angular is a development platform for building mobile and desktop web applications using TypeScript/…0.7%높음8.7CVE-2026-103492In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments0.7%보통6.5CVE-2026-87082Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidate…0.7%높음7.5CVE-2026-93690uri-js through 4.4.1 contains a denial of service vulnerability in the removeDotSegments function th…0.7%높음8.7CVE-2026-84446libheif is a HEIF and AVIF file format decoder and encoder. Prior to 1.23.2, crafted HEIF sequence t…0.7%높음7.5CVE-2026-115269Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader…0.6%높음8.7
전체 목록
117건
CVE-2026-81876HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior…0.6%높음7.5
CVE-2026-82560Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over…0.6%미평가
CVE-2026-68537`fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tena…0.6%높음7.5
CVE-2026-68523`fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tena…0.6%높음7.5
CVE-2026-84997react/http is an event-driven, streaming HTTP client and server implementation for ReactPHP. From 0.6.0 until …0.5%높음7.5
CVE-2026-76445Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an un…0.5%보통5.3
CVE-2026-20019Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that could all…0.5%보통5.8
CVE-2026-86537Uncaught exception, Loop with unreachable exit condition ('infinite loop'), Integer underflow (wrap or wraparo…0.6%높음8.7
CVE-2026-120194A flaw was found in json-glib. The JSONPath slice evaluator used by json_path_query() can enter an infinite lo…0.5%높음7.5
CVE-2026-106121The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with Rabbit…0.5%보통4.9
CVE-2026-113794pypdf is a free and open-source pure-python PDF library. Prior to 6.20.0, an attacker can craft an incomplete …0.5%보통6.0
CVE-2026-113793pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, removing an object from a crafted cy…0.5%보통6.0
CVE-2026-113792pypdf is a free and open-source pure-python PDF library. Prior to 6.20.1, calling PdfWriter.find_outline_item …0.5%보통6.0
CVE-2026-102046A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in netsctp.ko of Juniper Networks Junos…0.5%높음8.7
CVE-2026-69210Http4s is a Scala interface for HTTP services. Prior to 0.23.35 and 1.0.0-M47, WebSocket FrameTranscoder.bodyL…0.5%높음7.5
CVE-2026-116581Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capab…0.5%높음7.5
CVE-2026-93925Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProt…0.5%높음8.7
CVE-2026-115774Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, tw…0.4%보통4.9
CVE-2026-107695FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that allows remote attackers to…0.4%높음7.1
CVE-2026-111074In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentication remo…0.4%높음8.7
CVE-2026-107577Inefficient algorithmic complexity and a non-terminating loop in the MIME processing of received messages in P…0.4%높음7.5
CVE-2026-102253iperf3 versions prior to 3.22 contains a denial of service vulnerability that allows unauthenticated remote at…0.4%높음8.7
CVE-2026-85715ExifReader is a JavaScript Exif information parser. Prior to 4.41.1, ExifReader parses attacker-controlled HEI…0.4%높음7.5
CVE-2026-107349An infinite loop in PgBouncer 1.20.0 through 1.26.0 allows an unauthenticated remote attacker to cause a denia…0.4%높음7.5
CVE-2026-80489Converting crafted EUC_JISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv…0.4%보통5.9
CVE-2026-77117Converting crafted SHIFT_JISX0213 input to UCS-4 or the internal wide character encoding, for example with ico…0.4%보통5.9
CVE-2026-111731P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck record with su…0.4%높음8.7
CVE-2026-20154A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptiv…0.4%높음8.6
CVE-2026-96642Pillow is a Python imaging library. Prior to 13.0.0, the TarIO initializer in src/PIL/TarIO.py accepts a negat…0.4%높음7.1
CVE-2026-94654Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift python bindings. This is…0.4%높음8.2
CVE-2026-85476Loop with unreachable exit condition ('infinite loop') vulnerability in Apache Thrift c_glib bindings. This is…0.4%높음8.2
CVE-2026-109832A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, …0.4%높음7.5
CVE-2026-97370Junrar is an open source Java RAR archive library. Prior to 7.6.1, RarVM.ExecuteCode in src/main/java/com/gith…0.4%높음7.5
CVE-2026-62949AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 prot…0.4%보통6.5
CVE-2026-96780figlet.js is a FIG driver written in JavaScript that aims to implement the FIGfont specification. Prior to 1.1…0.4%높음8.2
CVE-2026-106567ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-…0.4%보통5.9
CVE-2026-106565ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-…0.4%보통5.9
CVE-2026-6668Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 allows an unauthenticated remot…0.4%높음7.5
CVE-2026-107348Integer overflow in the message buffer growth logic (mbuf_make_room) in PgBouncer 1.21.0 through 1.26.0 allows…0.4%보통5.9
CVE-2026-120596A remotely exploitable denial-of-service vulnerability exists in the TCP options parser of the Nut/Net TCP/IP …0.4%높음7.5
CVE-2026-118036In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infi…0.4%높음7.5
CVE-2026-104633When migrating a repository from another Gitea instance, Gitea used the page size reported in the source serve…0.4%보통6.5
CVE-2026-106568ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-…0.4%보통5.3
CVE-2026-85730smol-toml is a small, fast, and correct TOML parser and serializer. Prior to 1.7.1, parse() can enter an infin…0.4%높음8.2
CVE-2026-102185A Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the routing protocol daemon (rpd) of…0.4%높음8.7
CVE-2026-68906libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sa…0.4%높음8.7
CVE-2026-78543IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.12.28 and IBM Integration Bus …0.4%보통5.3
CVE-2026-106116ImageSharp is a 2D graphics library. From 2.0.0 until 4.1.2, ExifReader.ReadValues64 trusts the 64-bit BigTIFF…0.4%보통5.3
CVE-2026-91952FreeRDP versions before 3.31.0 contain an infinite-loop denial of service in the pool_decode_rect function whe…0.3%높음7.1
CVE-2026-105273MP4Parser does not adequately validate MP4 box sizes. A malformed box can cause parsing to make no forward pro…0.3%높음8.7
CVE-2026-107621JPEGParser can enter an infinite loop while parsing a specially crafted or truncated stream.0.3%높음8.7
CVE-2026-88000Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1…0.3%보통6.5
CVE-2026-88002Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.1,…0.3%보통6.5
CVE-2026-86535Loop with unreachable exit condition ('infinite loop'), Improperly controlled modification of object prototype…0.3%높음8.7
CVE-2026-103410An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allo…0.3%높음7.5
CVE-2026-61633NanoMQ is an MQTT broker. Prior to 0.24.14, the NanoMQ client function nni_mqtt_msg_decode_unsubscribe() in nn…0.3%낮음2.0
CVE-2026-78132strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietf…0.3%높음7.5
CVE-2026-107696FFmpeg through 9.0.2 contains an infinite loop vulnerability in ff_rtsp_connect() in libavformat/rtsp.c that f…0.3%높음7.1
CVE-2026-114095Dulwich before 1.2.9 contains a denial of service vulnerability in Pack.resolve_object that allows attackers t…0.3%높음7.1
CVE-2026-118035In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, inef…0.3%높음7.5
CVE-2026-119738The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox …0.3%보통6.9
CVE-2026-66281In EmberZNet 9.1.1 and earlier, a malformed Discover Attributes command can result in a loop with unreachable …0.3%보통6.0
CVE-2026-112391Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow's PdfParser.get_value() can recurse withou…0.3%보통6.3
CVE-2026-112406Pillow is a Python imaging library. From 5.1.0 until 13.0.0, Pillow can enter an infinite loop while rewriting…0.3%높음8.7
CVE-2026-112390Pillow is a Python imaging library. From 7.2.0 until 13.0.0, Pillow can enter an infinite loop while determini…0.3%높음8.2
CVE-2026-118037In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, uncontrolled recursion, infi…0.3%높음7.5
CVE-2026-97688urllib3 is an HTTP client library for Python. From 2.6.2 until 2.8.0, HTTPResponse.stream and HTTPResponse.rea…0.3%보통6.9
CVE-2026-109088A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the par…0.3%보통6.5
CVE-2026-97362HFS2 version 2.4.0 and earlier contains a denial of service vulnerability that allows unauthenticated attacker…0.3%높음8.7
CVE-2026-87013Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1…0.3%보통4.3
CVE-2026-109941FreeRDP from 2.3.0 before 3.32.0 contains an infinite loop vulnerability in http_chuncked_read that allows mal…0.3%높음7.1
CVE-2026-116774russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From 0.60.0 …0.3%보통4.3
CVE-2026-110836FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv() that allows m…0.3%높음7.1
CVE-2026-104266tinytag is a Python library for reading audio file metadata. From 2.0.0 until 2.3.0, an M4A file containing a …0.3%보통6.5
CVE-2016-20099L-SMASH through 2.14.5 contains an infinite loop vulnerability in vc1_importer_probe() in importer/vc1_imp.c t…0.2%보통6.8
CVE-2026-119203pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop whi…0.2%높음7.1
CVE-2026-119205pypdf is a free and open-source pure-python PDF library. Prior to 6.21.4, pypdf can enter an infinite loop whe…0.2%높음7.1
CVE-2026-63570Loop with unreachable exit condition in Pkcs12Store.GetCertificateChain in Legion of the Bouncy Castle Inc. bc…0.2%높음7.1
CVE-2026-111496Kafka Streams derives its stream-time clock from record timestamps. PunctuationSchedule.next() computed the ne…0.2%미평가
CVE-2026-78633The Okta RADIUS Agent does not validate the sub-attribute length when parsing a Vendor-Specific attribute. A s…0.2%보통6.5
CVE-2026-63575Loop with unreachable exit condition in the PKCS#12 key derivation (Pkcs12ParametersGenerator) in Legion of th…0.2%높음7.1
CVE-2026-106164In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite…0.2%높음7.3
CVE-2026-96596Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP stdlib (erl_tar module), he…0.2%보통5.9
CVE-2026-102511Improper Verification of Source of a Communication Channel in the ADS discovery of the Go implementation of Ap…0.2%높음8.5
CVE-2026-15923The Zephyr SDIO subsystem function sdio_io_rw_extended_helper() in subsys/sd/sdio.c finishes transfers with a …0.2%보통4.6
CVE-2026-120458Kvazaar through 2.3.2 contains an infinite loop vulnerability in read_header() in src/encmain.c that allows at…0.2%보통6.8
CVE-2026-62250LibreDWG is a free C library to read and write DWG files. Prior to 0.14.8413, a crafted pre-R13 DWG can make `…0.2%보통5.5
CVE-2026-92454The GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long enough to…0.2%보통6.8
CVE-2026-102726Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read0.2%보통6.0
CVE-2026-102714`_nx_icmpv6_validate_options()` scans the option area with `while (length > 2)` (`common/src/nx_icmpv6_validat…0.2%높음7.1
CVE-2026-88252A flaw was found in sssd. A local user can cause a Denial of Service (DoS) by exhausting the responder service…0.1%보통4.7
CVE-2026-96418TIFF protocol dissector infinite loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service0.1%보통5.5
CVE-2026-89045zstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFin…0.1%보통5.1
CVE-2026-107391music-metadata is a metadata parser for audio and video media files. In the public development revision introd…0.1%보통6.2
CVE-2026-120251imagecodecs 2026.3.6 through 2026.10.10 contains an infinite loop vulnerability in ccitt_fax4_decode_size() th…0.1%보통6.8
CVE-2026-118781Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to …0.1%낮음2.9
CVE-2026-112046OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve() caused by 16-bit forward…0.1%보통6.8
CVE-2026-81885radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's NE re…0.1%보통5.5
CVE-2026-107677FFmpeg through 9.0.2 contains a denial of service vulnerability in the DASH demuxer that allows attackers to t…0.1%보통5.7
CVE-2026-107168A flaw was found in m17n-lib. By providing crafted input containing an invalid UTF-8 character sequence, an at…0.1%보통6.2
CVE-2026-116671Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 im…0.1%낮음2.1
CVE-2026-6554libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement loopi…0.1%보통5.5
CVE-2023-37366An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem Exynos 9810, Exyno…0.1%낮음2.8
CVE-2026-120651CGI versions before 5.00 for Perl allow an infinite loop on a short request body when $DISABLE_UPLOADS is set.…미평가
CVE-2026-63475isomorphic-git is a pure JavaScript implementation of Git for Node.js and browsers. Prior to 1.38.6, isomorphi…보통4.3
CVE-2026-121261A vulnerability has been found in phpMyAdmin ShapeFile up to 4.0.1. Impacted is the function ShapeRecord::load…낮음2.1
CVE-2026-121400FreeRDP before 3.32.2 contains a denial-of-service vulnerability in rdg_process_control_packet that allows a m…높음7.1
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.