주요 제품 취약점 (538건)
Windows
infra
293건
KEV 293 · 최근 2026-10-13
Cisco IOS
infra
44건
KEV 44 · 최근 2026-07-13
Ivanti
infra
36건
KEV 36 · 최근 2026-10-13
Linux 커널
infra
30건
KEV 30 · 최근 2026-09-18
Fortinet
infra
21건
KEV 22 · 최근 2026-10-16
Microsoft Exchange
infra
20건
KEV 20 · 최근 2026-05-15
Citrix NetScaler
infra
16건
KEV 16 · 최근 2026-10-04
Palo Alto PAN-OS
infra
14건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
12건
KEV 12 · 최근 2026-08-18
Apache HTTP
infra
11건
KEV 11 · 최근 2026-08-24
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
Apache Tomcat
infra
8건
KEV 8 · 최근 2026-08-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
OpenSSH
infra
3건
KEV 3 · 최근 2025-10-02
Redis
infra
3건
KEV 3 · 최근 2026-05-26
MySQL/MariaDB
finance
2건
KEV 2 · 최근 2024-11-07
Node.js
infra
2건
KEV 2 · 최근 2025-01-14
PostgreSQL
finance
2건
KEV 2 · 최근 2026-09-02
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
curl
infra
1건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
1건
KEV 1 · 최근 2022-05-04
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Cisco IOS
Cisco IOS and IOS XE Software
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authen…
|
CVE-2017-6740 | 8.8 | CWE-119 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE Software
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authen…
|
CVE-2017-6738 | 8.8 | CWE-119 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE Software
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authen…
|
CVE-2017-6736 | 8.8 | CWE-119 | KEV | 2022-03-03 |
|
Windows
Adobe Flash Player
Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to …
|
CVE-2016-7855 | 8.8 | CWE-416 | KEV | 2022-03-03 |
|
Windows
Adobe Reader and Acrobat
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execu…
|
CVE-2014-0496 | 8.8 | CWE-416 | KEV | 2022-03-03 |
|
Windows
Adobe Flash Player
Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; an…
|
CVE-2011-0611 | 8.8 | CWE-843 | KEV | 2022-03-03 |
|
Windows
Microsoft Windows
Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1…
|
CVE-2017-8464 | 8.8 | — | KEV | 2022-02-10 |
|
Windows
Microsoft SMBv1
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Win…
|
CVE-2017-0145 | 8.8 | — | KEV | 2022-02-10 |
|
Windows
Microsoft SMBv1
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Win…
|
CVE-2017-0144 | 8.8 | — | KEV | 2022-02-10 |
|
Windows
Nagios Nagios XI
Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/…
|
CVE-2021-25296 | 8.8 | — | KEV | 2022-01-18 |
|
Microsoft Exchange
Microsoft Exchange Server Remote Code Execution Vulnerability
|
CVE-2021-42321 | 8.8 | — | KEV | 2021-11-17 |
|
Windows
Microsoft MSHTML
Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted …
|
CVE-2021-40444 | 8.8 | CWE-22 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who s…
|
CVE-2021-34527 | 8.8 | — | KEV | 2021-11-03 |
|
Ivanti
Ivanti Pulse Connect Secure
A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execut…
|
CVE-2021-22899 | 8.8 | CWE-77 | KEV | 2021-11-03 |
|
Windows
Ivanti Pulse Connect Secure
A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to perform remote code execut…
|
CVE-2021-22899 | 8.8 | CWE-77 | KEV | 2021-11-03 |
|
Ivanti
Ivanti Pulse Connect Secure
A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker to execute arbitrary code as th…
|
CVE-2021-22894 | 8.8 | CWE-94 | KEV | 2021-11-03 |
|
Cisco IOS
Cisco IOS XR
A vulnerability in the Cisco Discovery Protocol implementation for Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to execute…
|
CVE-2020-3118 | 8.8 | CWE-134 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted …
|
CVE-2020-1020 | 8.8 | CWE-787 | KEV | 2021-11-03 |
|
Microsoft Exchange
Microsoft Exchange Server
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Micros…
|
CVE-2020-0688 | 8.8 | CWE-287 | KEV | 2021-11-03 |
|
Atlassian Confluence
Atlassian Confluence Server and Data Center
Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to …
|
CVE-2019-3398 | 8.8 | CWE-22 | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Win…
|
CVE-2017-0143 | 8.8 | — | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Window…
|
CVE-2014-1812 | 8.8 | CWE-255 | KEV | 2021-11-03 |
|
Ivanti
Ivanti Endpoint Manager (EPM)
An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credenti…
|
CVE-2026-1603 | 8.6 | CWE-288 | KEV | 2026-03-09 |
|
Palo Alto PAN-OS
Palo Alto Networks PAN-OS
A PAN-OS URL filtering policy misconfiguration could allow a network-based attacker to conduct reflected and amplified TCP denial-of-service (RDoS) a…
|
CVE-2022-0028 | 8.6 | CWE-406 | KEV | 2022-08-22 |
|
Cisco IOS
Cisco IOS XE Software
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, rem…
|
CVE-2018-0174 | 8.6 | CWE-20 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE Software
A vulnerability in the Cisco IOS Software and Cisco IOS XE Software function that restores encapsulated option 82 information in DHCP Version 4 (DHCP…
|
CVE-2018-0173 | 8.6 | CWE-20 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE Software
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, rem…
|
CVE-2018-0172 | 8.6 | CWE-20 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS Software and Cisco IOS XE Software
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated,…
|
CVE-2018-0158 | 8.6 | CWE-20 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS XR
Multiple vulnerabilities in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, r…
|
CVE-2020-3569 | 8.6 | CWE-400 | KEV | 2021-11-03 |
|
Cisco IOS
Cisco IOS XR
A vulnerability in the Distance Vector Multicast Routing Protocol (DVMRP) feature of Cisco IOS XR Software could allow an unauthenticated, remote att…
|
CVE-2020-3566 | 8.6 | CWE-400 | KEV | 2021-11-03 |
|
Linux 커널
Linux Kernel
A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel ve…
|
CVE-2022-0185 | 8.4 | CWE-190 | KEV | 2024-08-21 |
|
Linux 커널
Code Aurora ACDB Audio Driver
Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualco…
|
CVE-2013-2597 | 8.4 | CWE-121 | KEV | 2022-09-15 |
|
Linux 커널
Linux Kernel
The perf_swevent_init function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integer data type, which allows local users…
|
CVE-2013-2094 | 8.4 | CWE-189 | KEV | 2022-09-15 |
|
Windows
Microsoft Windows
Microsoft DWM Core Library Elevation of Privilege Vulnerability
|
CVE-2021-33739 | 8.4 | CWE-269 | KEV | 2021-11-03 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Remote Code Execution Vulnerability
|
CVE-2020-17144 | 8.4 | CWE-502 | KEV | 2021-11-03 |
|
Windows
Google Chromium Mojo
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perfo…
|
CVE-2025-2783 | 8.3 | — | KEV | 2025-03-27 |
|
VMware ESXi
VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within the VMX process may trigger an arbitrary kernel write…
|
CVE-2025-22225 | 8.2 | CWE-787 | KEV | 2025-03-04 |
|
Ivanti
Ivanti Connect Secure, Policy Secure, and Neurons
A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivant…
|
CVE-2024-21893 | 8.2 | CWE-918 | KEV | 2024-01-31 |
|
Citrix NetScaler
Citrix NetScaler ADC and NetScaler Gateway
Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Servi…
|
CVE-2023-6549 | 8.2 | CWE-119 | KEV | 2024-01-17 |
|
Ivanti
Ivanti Connect Secure and Policy Secure
An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restr…
|
CVE-2023-46805 | 8.2 | CWE-287 | KEV | 2024-01-10 |
|
Windows
Qlik Sense
A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlie…
|
CVE-2023-41266 | 8.2 | CWE-22 | KEV | 2023-12-07 |
|
Windows
Microsoft Win32k
The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012…
|
CVE-2015-2546 | 8.2 | CWE-119 | KEV | 2022-03-15 |
|
Fortinet
Fortinet Multiple Products
A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiO…
|
CVE-2025-25249 | 8.1 | CWE-122 | KEV | 2026-09-09 |
|
Microsoft Exchange
Microsoft Microsoft
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to …
|
CVE-2026-42897 | 8.1 | CWE-79 | KEV | 2026-05-15 |
|
Fortinet
Fortinet FortiOS and FortiProxy
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.2.0 throu…
|
CVE-2025-24472 | 8.1 | CWE-288 | KEV | 2025-03-18 |
|
Windows
Microsoft Windows
Internet Shortcut Files Security Feature Bypass Vulnerability
|
CVE-2024-21412 | 8.1 | CWE-693 | KEV | 2024-02-13 |
|
Windows
Microsoft Windows
Windows LSA Spoofing Vulnerability
|
CVE-2022-26925 | 8.1 | CWE-306 | KEV | 2022-07-01 |
|
Windows
Adobe Flash Player
Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x;…
|
CVE-2012-0754 | 8.1 | CWE-787 | KEV | 2022-06-08 |
|
Windows
Microsoft SMBv1 server
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Win…
|
CVE-2017-0148 | 8.1 | CWE-20 | KEV | 2022-04-06 |
|
Apache Tomcat
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via sett…
|
CVE-2017-12617 | 8.1 | CWE-434 | KEV | 2022-03-25 |
|
Apache Tomcat
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default t…
|
CVE-2017-12615 | 8.1 | CWE-434 | KEV | 2022-03-25 |
|
Windows
Apache Tomcat
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default t…
|
CVE-2017-12615 | 8.1 | CWE-434 | KEV | 2022-03-25 |
|
Palo Alto PAN-OS
Palo Alto Networks PAN-OS
Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalPro…
|
CVE-2019-1579 | 8.1 | CWE-134 | KEV | 2022-01-10 |
|
Windows
Microsoft Windows
A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attacker could…
|
CVE-2020-0601 | 8.1 | CWE-295 | KEV | 2021-11-03 |
|
Windows
Citrix Session Recording
Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Activ…
|
CVE-2024-8068 | 8.0 | CWE-269 | KEV | 2025-08-25 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Remote Code Execution Vulnerability
|
CVE-2022-41082 | 8.0 | CWE-502 | KEV | 2022-09-30 |
|
Cisco IOS
Cisco IOS, XR, and XE Software
Format String vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Soft…
|
CVE-2018-0175 | 8.0 | CWE-119 | KEV | 2022-03-03 |
|
Linux 커널
Linux Kernel
A use after free vulnerability exists in the ALSA PCM package in the Linux Kernel. SNDRV_CTL_IOCTL_ELEM_{READ|WRITE}32 is missing locks that can be u…
|
CVE-2023-0266 | 7.9 | CWE-416 | KEV | 2023-03-30 |
|
Linux 커널
Linux Kernel
In the Linux kernel, the following vulnerability has been resolved:
crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
Issuing two write…
|
CVE-2025-39964 | 7.8 | CWE-362 | KEV | 2026-09-18 |
|
Windows
Microsoft Windows
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
|
CVE-2026-85880 | 7.8 | CWE-122 | KEV | 2026-09-08 |