주요 제품 취약점 (3,477건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: stmmac: fix TSO DMA API usage causing oops
Commit 66600fac7a98 ("net: stmm…
|
CVE-2024-56719 | 10.0 | — | — | |
|
PostgreSQL
Improper authorization in Azure Database for PostgreSQL allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-85878 | 9.9 | CWE-285 | — | |
|
Ivanti
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrar…
|
CVE-2026-12650 | 9.9 | CWE-502 | — | |
|
Ivanti
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on th…
|
CVE-2026-12647 | 9.9 | CWE-862 | — | |
|
Ivanti
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on th…
|
CVE-2026-12646 | 9.9 | CWE-862 | — | |
|
Ivanti
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on th…
|
CVE-2026-12645 | 9.9 | CWE-862 | — | |
|
Ivanti
An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.
|
CVE-2026-109412 | 9.9 | CWE-749 | — | |
|
Ivanti
An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect a…
|
CVE-2026-106042 | 9.9 | CWE-73 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv4: free inet_opt and ireq_opt after an RCU grace period
tcp_v4_syn_recv_sock…
|
CVE-2026-98432 | 9.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access
mr_che…
|
CVE-2026-98365 | 9.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
RDMA/siw: Bound fragmented header copies by the remaining length
siw_get_hdr() …
|
CVE-2026-98323 | 9.8 | — | — | |
|
OpenSSH
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-97816 | 9.8 | CWE-416 | — | |
|
Windows
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-97816 | 9.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
|
CVE-2026-97815 | 9.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
|
CVE-2026-97814 | 9.8 | CWE-122 | — | |
|
Windows
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
|
CVE-2026-97805 | 9.8 | CWE-20 | — | |
|
Windows
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-96934 | 9.8 | CWE-416 | — | |
|
Windows
Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.
|
CVE-2026-96924 | 9.8 | CWE-822 | — | |
|
Windows
Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.
|
CVE-2026-96909 | 9.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-96320 | 9.8 | CWE-122 | — | |
|
Windows
Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-96219 | 9.8 | CWE-787 | — | |
|
Windows
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
|
CVE-2026-96096 | 9.8 | CWE-122 | — | |
|
curl
libcurl had a flaw that when instructed to clear proxy authentication
credentials which made it not do so, leaving the old credentials around to get
…
|
CVE-2026-9079 | 9.8 | CWE-522 | — | |
|
Citrix NetScaler
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before …
|
CVE-2026-88777 | 9.8 | CWE-119 | — | |
|
Citrix NetScaler
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 1…
|
CVE-2026-88776 | 9.8 | CWE-119 | — | |
|
Citrix NetScaler
Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, be…
|
CVE-2026-88775 | 9.8 | CWE-120 | — | |
|
Windows
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88102 | 9.8 | CWE-416 | — | |
|
Citrix NetScaler
Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service …
|
CVE-2026-8655 | 9.8 | CWE-119 | — | |
|
Apache Tomcat
CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat.
This issue affe…
|
CVE-2026-86248 | 9.8 | CWE-287 | — | |
|
Windows
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.
|
CVE-2026-85928 | 9.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
|
CVE-2026-85814 | 9.8 | CWE-122 | — | |
|
Windows
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
CVE-2026-85809 | 9.8 | CWE-122 | — | |
|
Windows
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
|
CVE-2026-85792 | 9.8 | CWE-416 | — | |
|
Windows
Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83862 | 9.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83782 | 9.8 | CWE-122 | — | |
|
Windows
Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83780 | 9.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83770 | 9.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83748 | 9.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83693 | 9.8 | CWE-122 | — | |
|
Windows
Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83578 | 9.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83519 | 9.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83517 | 9.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network.
|
CVE-2026-78445 | 9.8 | CWE-416 | — | |
|
PostgreSQL
Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added and all API routes are …
|
CVE-2026-77936 | 9.8 | CWE-1188 | — | |
|
MySQL/MariaDB
DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL_ROOT_PASSWORD and publ…
|
CVE-2026-77933 | 9.8 | CWE-1392 | — | |
|
Apache Tomcat
Authentication Bypass by Alternate Name vulnerability in Apache Tomcat allowed the security constraints for any WebSocket endpoint to be bypassed.
…
|
CVE-2026-76183 | 9.8 | CWE-289 | — | |
|
Windows
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
|
CVE-2026-73025 | 9.8 | CWE-1390 | — | |
|
Windows
Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code over a network.
|
CVE-2026-73010 | 9.8 | CWE-416 | — | |
|
Windows
Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-73009 | 9.8 | CWE-416 | — | |
|
Windows
Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.
|
CVE-2026-72983 | 9.8 | CWE-416 | — | |
|
Windows
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
|
CVE-2026-72982 | 9.8 | CWE-121 | — | |
|
Windows
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-72979 | 9.8 | CWE-416 | — | |
|
Windows
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70296 | 9.8 | CWE-787 | — | |
|
Windows
Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70157 | 9.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70096 | 9.8 | CWE-122 | — | |
|
Windows
Stack-based buffer overflow in Windows Internet Information Services allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70024 | 9.8 | CWE-20 | — | |
|
Windows
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69910 | 9.8 | CWE-121 | — | |
|
Windows
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69886 | 9.8 | CWE-122 | — | |
|
Windows
Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69883 | 9.8 | CWE-416 | — | |
|
Windows
Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69845 | 9.8 | CWE-20 | — |