CWE-915 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-915 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
CVE-2026-90863Missing authorization in the administrative interface of Progress Software WS_FTP Server versions pr…0.7%심각9.1CVE-2026-93752CSSOM through 0.5.0 contains a denial of service vulnerability in CSSStyleDeclaration.setProperty() …0.7%높음8.7CVE-2026-72710SPIP before 4.4.18 contains a remote code execution vulnerability in the editer_objet action where t…0.6%심각9.3CVE-2026-112305Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with t…0.6%높음8.7CVE-2026-77470Lychee is a free, open-source photo-management tool. Prior to 7.7.1, the Supporter or Pro webshop PO…0.5%높음8.3CVE-2026-58255Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.12…0.4%높음8.8CVE-2026-61598djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered pe…0.4%높음7.1CVE-2026-107249Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drup…0.4%심각9.8
전체 목록
41건
CVE-2026-105863Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.…0.4%심각9.2
CVE-2026-120448DoraCMS through 3.1.0 contains a mass assignment vulnerability in the PUT /api/v1/user/api-keys/:id endpoint t…0.4%높음8.6
CVE-2026-55091flat-to-nested converts a hierarchy from a flat representation to a nested representation. Prior to 1.1.2, Fla…0.4%높음7.5
CVE-2026-103235MISP contains a mass assignment vulnerability in the event delegation feature. When a user with delegation per…0.4%높음8.7
CVE-2026-109186jshERP through 3.6 contains a mass assignment vulnerability in the UserController update handler that allows a…0.4%높음8.7
CVE-2026-112239The extension provides a backend endpoint that writes a submitted value into a submitted field of a submitted …0.4%높음7.2
CVE-2026-92217A vulnerability was determined in a2ui-project a2ui up to 0.10.6. This affects the function processMessages of…0.3%보통5.3
CVE-2026-108740GoatCounter through 2.7.0 contains a mass assignment privilege escalation vulnerability in the userPrefSave ha…0.3%높음7.2
CVE-2026-119565Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in update_traffic_change_notificati…0.3%보통5.3
CVE-2026-118538A vulnerability was determined in a2ui-project a2ui up to 0.12.0. This issue affects the function Root.renderC…0.3%보통5.1
CVE-2026-105180A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the fil…0.3%낮음2.1
CVE-2026-92119REST API Mass Assignment vulnerability in Apache Allura. This issue affects Apache Allura: through 1.21.0. Use…0.3%미평가
CVE-2026-76086Formie is a Craft CMS plugin for creating forms. Prior to 2.2.23 and 3.1.31, Formie's formie/integrations/form…0.3%높음8.5
CVE-2026-104908MISP contains an improper input validation vulnerability in the decaying model import functionality. The impor…0.3%높음7.1
CVE-2026-116216MacCMS v10 through 2026.1000.4056 contains a mass assignment vulnerability in index/Comment::saveData() that a…0.3%보통6.9
CVE-2026-106550Mozilla's Node-convict (version 6.2.2 and later) is vulnerable to a Denial of Service vulnerability caused by …0.3%높음7.5
CVE-2026-61834scim-patch is a library for applying SCIM patch operations. Prior to 0.9.2, navigate() reads inherited propert…0.3%보통4.3
CVE-2026-108948A vulnerability has been found in code-projects Online Reviewer System 1.0. This vulnerability affects unknown…0.3%낮음2.1
CVE-2026-112295FlyCms through commit edfdf724 contains a mass assignment vulnerability that allows authenticated users to ove…0.3%보통5.3
CVE-2026-115933Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker o…0.2%심각9.9
CVE-2026-102780Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content …0.3%보통6.9
CVE-2026-97858An attacker can cause the server to unbind the target device from its current owner and rebind it to the reque…0.3%보통6.9
CVE-2026-114573Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Monster…0.2%미평가
CVE-2026-85408A vulnerability was determined in Eleveo Quality Management 9.7.0. Impacted is an unknown function of the file…0.2%낮음2.1
CVE-2026-96378Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Commerc…0.2%보통4.3
CVE-2026-103918oRPC is a tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1…0.2%보통6.5
CVE-2026-103036oRPC is a tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1…0.2%보통6.5
CVE-2026-106100Payload is a free and open source headless content management system. In @payloadcms/db-mongodb versions befor…0.2%높음7.1
CVE-2026-93477Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in ash-project as…0.2%보통5.9
CVE-2026-93364Bludit CMS through 3.22.0 contains a mass assignment vulnerability that allows authenticated users with the Au…0.2%보통5.3
CVE-2026-110804Improperly controlled modification of JIT elevation settings in PAM checkout in Devolutions Server 2026.3.8.0 …0.2%보통4.3
CVE-2026-61591djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance.…0.2%높음8.1
CVE-2026-13720An Editor can set file-provisioning metadata (the grafana.app/managedBy, grafana.app/managerId and grafana.app…0.2%보통5.4
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.