주요 제품 취약점 (3,477건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
|
CVE-2026-102210 | 9.8 | CWE-122 | — | |
|
Windows
Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.
|
CVE-2026-100202 | 9.8 | CWE-416 | — | |
|
Windows
SQLite 'sqldiff.exe' does not securely handle the way the Microsoft Windows C runtime converts Unicode characters to ANSI codepages. An attacker cou…
|
CVE-2025-71316 | 9.8 | CWE-176 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
nvme_f…
|
CVE-2025-40261 | 9.8 | — | — | |
|
Windows
An issue was discovered in AnyDesk for Windows before 9.0.5, AnyDesk for macOS before 9.0.1, AnyDesk for Linux before 7.0.0, AnyDesk for iOS before 7…
|
CVE-2025-27918 | 9.8 | CWE-190 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
nfsd: clear acl_access/acl_default after releasing them
If getting acl_default …
|
CVE-2025-21796 | 9.8 | CWE-416 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
mptcp: consolidate suboption status
MPTCP maintains the received sub-options st…
|
CVE-2025-21707 | 9.8 | CWE-908 | — | |
|
OpenSSH
ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is…
|
CVE-2023-28531 | 9.8 | CWE-284 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: require Ethernet MAC header before using eth_hdr()
`ip6t_eui64`, `xt…
|
CVE-2026-53131 | 9.4 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry
New t…
|
CVE-2026-43114 | 9.4 | CWE-20 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: ip6t_eui64: reject invalid MAC header for all packets
`eui64_mt6()` …
|
CVE-2026-31685 | 9.4 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ext4: avoid infinite loops caused by residual data
On the mkdir/mknod path, whe…
|
CVE-2026-31448 | 9.4 | CWE-835 | — | |
|
Node.js
Ghost is a Node.js content management system. Versions 3.24.0 through 6.19.0 allow unauthenticated attackers to perform arbitrary reads from the data…
|
CVE-2026-26980 | 9.4 | CWE-89 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
bpf: Scrub packet on bpf_redirect_peer
When bpf_redirect_peer is used to redire…
|
CVE-2025-37959 | 9.4 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv4: validate checksum_start before completing checksum
If a packet with bad c…
|
CVE-2026-99999 | 9.3 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation
Computin…
|
CVE-2026-89775 | 9.3 | — | — | |
|
Microsoft Exchange
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to …
|
CVE-2026-70279 | 9.3 | CWE-79 | — | |
|
Microsoft Exchange
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to …
|
CVE-2026-69356 | 9.3 | CWE-79 | — | |
|
curl
When reusing a libcurl handle for sequential transfers driven by
environment-variable proxy configuration, libcurl fails to clear the proxy
authentic…
|
CVE-2026-8927 | 9.1 | CWE-294 | — | |
|
Apache Tomcat
Inconsistent interpretation of HTTP/2 requests ('HTTP Request/Response smuggling') vulnerability in Apache Tomcat caused by a regression in fix for C…
|
CVE-2026-86350 | 9.1 | CWE-444 | — | |
|
Microsoft Exchange
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69641 | 9.1 | CWE-862 | — | |
|
Apache Tomcat
Incorrect Authorization vulnerability in Apache Tomcat's FORM authentication process allows the bypassing of a security constraint that limits user h…
|
CVE-2026-68525 | 9.1 | CWE-863 | — | |
|
Apache Tomcat
Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path…
|
CVE-2026-65182 | 9.1 | CWE-284 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
sctp: fix uninit-value in __sctp_rcv_asconf_lookup()
__sctp_rcv_asconf_lookup()…
|
CVE-2026-53225 | 9.1 | CWE-908 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nfnetlink_osf: fix out-of-bounds read on option matching
In nf_osf_m…
|
CVE-2026-52999 | 9.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb/client: fix out-of-bounds read in symlink_data()
Since smb2_check_message()…
|
CVE-2026-46185 | 9.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
btrfs: tracepoints: get correct superblock from dentry in event btrfs_sync_file(…
|
CVE-2026-43117 | 9.1 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
dcache: Limit the minimal number of bucket to two
There is an OOB read problem …
|
CVE-2026-43071 | 9.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
bridge: br_nd_send: linearize skb before parsing ND options
br_nd_send() parses…
|
CVE-2026-31682 | 9.1 | CWE-125 | — | |
|
Windows
SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to esca…
|
CVE-2026-28321 | 9.1 | CWE-284 | — | |
|
Windows
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation. This issue requires …
|
CVE-2026-28317 | 9.1 | CWE-639 | — | |
|
Windows
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation to a system administr…
|
CVE-2026-28316 | 9.1 | CWE-639 | — | |
|
Windows
SolarWinds Serv-U is affected by an insecure direct object reference vulnerability that leads to an account takeover. User authentication is required…
|
CVE-2026-28314 | 9.1 | CWE-639 | — | |
|
Windows
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to SMTP hijacking leading to arbitrary accoun…
|
CVE-2026-28313 | 9.1 | CWE-639 | — | |
|
Windows
SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate a group’s access to system administrator and allow code exe…
|
CVE-2026-28312 | 9.1 | CWE-285 | — | |
|
Windows
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to escalate their user type to that of a sys…
|
CVE-2026-28310 | 9.1 | CWE-862 | — | |
|
Windows
SolarWinds Serv-U is affected by a broken access control vulnerability that allows a domain administrator to create system administrator accounts. Th…
|
CVE-2026-28309 | 9.1 | CWE-862 | — | |
|
Windows
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution. Domain administrato…
|
CVE-2026-28308 | 9.1 | CWE-639 | — | |
|
Windows
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain user group to be elevated into an administrator group. The…
|
CVE-2026-28307 | 9.1 | CWE-284 | — | |
|
Windows
SolarWinds Serv-U is affected by a privilege escalation vulnerability that allows a domain administrator to elevate their privileges to a system admi…
|
CVE-2026-28306 | 9.1 | CWE-284 | — | |
|
Windows
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to remote code execution as root. A domain ac…
|
CVE-2026-28305 | 9.1 | CWE-639 | — | |
|
Windows
SolarWinds Serv-U is affected by a remote code execution vulnerability that, when exploited, can allow the arbitrary execution of code remotely as ro…
|
CVE-2026-28304 | 9.1 | CWE-284 | — | |
|
Windows
SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability that can lead to privilege escalation and remote code execu…
|
CVE-2026-28302 | 9.1 | CWE-639 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()
In DecodeQ9…
|
CVE-2026-23455 | 9.1 | CWE-125 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: stmmac: fix the crash issue for zero copy XDP_TX action
There is a crash i…
|
CVE-2025-71095 | 9.1 | — | — | |
|
Windows
Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
|
CVE-2026-85818 | 9.0 | CWE-347 | — | |
|
Cisco IOS
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehen…
|
CVE-2026-20267 | 9.0 | CWE-284 | — | |
|
Windows
No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
|
CVE-2026-105008 | 9.0 | CWE-290 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80211: don't filter by BSS type when removing stale entries
When an as…
|
CVE-2026-98339 | 8.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()
kvmhv…
|
CVE-2026-98283 | 8.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba
The commit b…
|
CVE-2026-98282 | 8.8 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs
Fix se…
|
CVE-2026-98171 | 8.8 | — | — | |
|
Windows
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
|
CVE-2026-96952 | 8.8 | CWE-122 | — | |
|
Windows
Integer overflow or wraparound in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
|
CVE-2026-96943 | 8.8 | CWE-122 | — | |
|
Microsoft Exchange
Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network.
|
CVE-2026-96940 | 8.8 | CWE-1390 | — | |
|
Windows
Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96917 | 8.8 | CWE-122 | — | |
|
Windows
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96914 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
|
CVE-2026-96913 | 8.8 | CWE-122 | — | |
|
Windows
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
|
CVE-2026-96202 | 8.8 | CWE-122 | — | |
|
Apache HTTP
Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes…
|
CVE-2026-93546 | 8.8 | CWE-190 | — |