주요 제품 취약점 (3,432건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 30 · 최근 2026-09-18
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
Redis
infra
7건
KEV 3 · 최근 2026-05-26
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Microsoft Windows
Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a secu…
|
CVE-2026-96951 | 8.8 | CWE-77 | KEV | 2026-10-13 |
|
Linux 커널
Linux Kernel
In the Linux kernel, the following vulnerability has been resolved:
netfilter: bridge: make ebt_snat ARP rewrite writable
The ebtables SNAT target …
|
CVE-2026-53266 | 8.8 | CWE-787 | KEV | 2026-09-18 |
|
Windows
Microsoft Internet Explorer
Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; …
|
CVE-2010-0249 | 8.8 | CWE-416 | KEV | 2026-05-20 |
|
Windows
Microsoft DirectX
Unspecified vulnerability in the QuickTime Movie Parser Filter in quartz.dll in DirectShow in Microsoft DirectX 7.0 through 9.0c on Windows 2000 SP4,…
|
CVE-2009-1537 | 8.8 | CWE-158 | KEV | 2026-05-20 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Remote Code Execution Vulnerability
|
CVE-2023-21529 | 8.8 | CWE-502 | KEV | 2026-04-13 |
|
Windows
Microsoft Windows
Stack-based buffer overflow in the CComVariant::ReadFromStream function in the Active Template Library (ATL), as used in the MPEG2TuneRequest ActiveX…
|
CVE-2008-0015 | 8.8 | CWE-119 | KEV | 2026-02-17 |
|
Windows
Microsoft Windows
Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.
|
CVE-2026-21513 | 8.8 | CWE-693 | KEV | 2026-02-10 |
|
Windows
Microsoft Windows
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
|
CVE-2026-21510 | 8.8 | CWE-693 | KEV | 2026-02-10 |
|
Windows
OpenPLC ScadaBR
OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via …
|
CVE-2021-26828 | 8.8 | CWE-434 | KEV | 2025-12-03 |
|
Windows
Microsoft Windows
Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
|
CVE-2025-33073 | 8.8 | CWE-284 | KEV | 2025-10-20 |
|
Windows
Microsoft Windows
The InformationCardSigninHelper Class ActiveX control in icardie.dll in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2,…
|
CVE-2013-3918 | 8.8 | CWE-787 | KEV | 2025-10-06 |
|
Windows
Microsoft Windows
Unspecified vulnerability in the TrueType font parsing engine in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows S…
|
CVE-2011-3402 | 8.8 | — | KEV | 2025-10-06 |
|
OpenSSH
GNU GNU Bash
GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to…
|
CVE-2014-6278 | 8.8 | CWE-78 | KEV | 2025-10-02 |
|
Apache HTTP
GNU GNU Bash
GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to…
|
CVE-2014-6278 | 8.8 | CWE-78 | KEV | 2025-10-02 |
|
Windows
RARLAB WinRAR
A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive f…
|
CVE-2025-8088 | 8.8 | CWE-35 | KEV | 2025-08-12 |
|
Windows
Microsoft Windows
External control of file name or path in Internet Shortcut Files allows an unauthorized attacker to execute code over a network.
|
CVE-2025-33053 | 8.8 | CWE-73 | KEV | 2025-06-10 |
|
Windows
Commvault Web Server
Commvault Web Server has an unspecified vulnerability that can be exploited by a remote, authenticated attacker. According to the Commvault advisory:…
|
CVE-2025-3928 | 8.8 | — | KEV | 2025-04-28 |
|
Windows
Microsoft Windows
Windows Task Scheduler Elevation of Privilege Vulnerability
|
CVE-2024-49039 | 8.8 | CWE-287 | KEV | 2024-11-12 |
|
Ivanti
Ivanti Endpoint Manager (EPM)
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network…
|
CVE-2024-29824 | 8.8 | CWE-89 | KEV | 2024-10-02 |
|
Windows
Adobe Flash Player
Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.…
|
CVE-2014-0502 | 8.8 | CWE-415 | KEV | 2024-09-17 |
|
Windows
Adobe Flash Player
Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 o…
|
CVE-2013-0648 | 8.8 | — | KEV | 2024-09-17 |
|
Windows
Adobe Flash Player
The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x be…
|
CVE-2013-0643 | 8.8 | CWE-269 | KEV | 2024-09-17 |
|
Windows
Microsoft Windows
Windows MSHTML Platform Spoofing Vulnerability
|
CVE-2024-43461 | 8.8 | CWE-451 | KEV | 2024-09-16 |
|
Windows
Microsoft Windows
A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized objects, aka "Microsoft COM f…
|
CVE-2018-0824 | 8.8 | CWE-502 | KEV | 2024-08-05 |
|
Windows
Microsoft Windows
Windows MSHTML Platform Security Feature Bypass Vulnerability
|
CVE-2024-30040 | 8.8 | CWE-20 | KEV | 2024-05-14 |
|
Windows
Microsoft Windows
Windows SmartScreen Security Feature Bypass Vulnerability
|
CVE-2023-36025 | 8.8 | — | KEV | 2023-11-14 |
|
Windows
Microsoft Windows
Windows SmartScreen Security Feature Bypass Vulnerability
|
CVE-2023-32049 | 8.8 | — | KEV | 2023-07-11 |
|
Windows
Microsoft Windows
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
|
CVE-2023-21674 | 8.8 | CWE-416 | KEV | 2023-01-10 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Elevation of Privilege Vulnerability
|
CVE-2022-41080 | 8.8 | — | KEV | 2023-01-10 |
|
Windows
Microsoft Windows
Windows Scripting Languages Remote Code Execution Vulnerability
|
CVE-2022-41128 | 8.8 | CWE-787 | KEV | 2022-11-08 |
|
Linux 커널
Linux Kernel
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files …
|
CVE-2021-3493 | 8.8 | CWE-270 | KEV | 2022-10-20 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Elevation of Privilege Vulnerability
|
CVE-2022-41040 | 8.8 | CWE-918 | KEV | 2022-09-30 |
|
Linux 커널
Linux Kernel
The (1) get_user and (2) put_user API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, w…
|
CVE-2013-6282 | 8.8 | CWE-20 | KEV | 2022-09-15 |
|
Windows
Google Chromium V8
Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to e…
|
CVE-2017-5070 | 8.8 | CWE-843 | KEV | 2022-06-08 |
|
Windows
Google Chromium V8
Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed …
|
CVE-2017-5030 | 8.8 | CWE-125 | KEV | 2022-06-08 |
|
Windows
Google Chromium V8
V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisati…
|
CVE-2016-5198 | 8.8 | CWE-787 | KEV | 2022-06-08 |
|
Windows
Adobe Acrobat and Reader
The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and Mac OS X, and 7.x before 7.1.4 allows remote attacke…
|
CVE-2009-3953 | 8.8 | CWE-787 | KEV | 2022-06-08 |
|
Windows
Microsoft Windows
atmfd.dll in the Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server …
|
CVE-2016-7256 | 8.8 | — | KEV | 2022-05-25 |
|
Windows
Adobe Flash Player and AIR
Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before 21.0.0.182 on Windows and OS X and before 11.2.202.577 on Linux…
|
CVE-2016-1010 | 8.8 | CWE-190 | KEV | 2022-05-25 |
|
Windows
Adobe Flash Player and AIR
Use-after-free vulnerability in Adobe Flash Player before 18.0.0.329 and 19.x and 20.x before 20.0.0.306 on Windows and OS X and before 11.2.202.569 …
|
CVE-2016-0984 | 8.8 | CWE-416 | KEV | 2022-05-25 |
|
Windows
Adobe Flash Player
Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Ad…
|
CVE-2015-8651 | 8.8 | CWE-190 | KEV | 2022-05-25 |
|
Windows
Microsoft Win32k
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows…
|
CVE-2015-2360 | 8.8 | CWE-119 | KEV | 2022-05-25 |
|
Windows
Adobe Flash Player
Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.…
|
CVE-2014-8439 | 8.8 | CWE-119 | KEV | 2022-05-25 |
|
Windows
Microsoft Windows
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Win…
|
CVE-2014-4148 | 8.8 | CWE-94 | KEV | 2022-05-25 |
|
Windows
Apple Multiple Products
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9…
|
CVE-2019-8506 | 8.8 | CWE-843 | KEV | 2022-05-04 |
|
Windows
Microsoft Windows
Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7…
|
CVE-2015-2426 | 8.8 | CWE-119 | KEV | 2022-03-28 |
|
Citrix NetScaler
Citrix SD-WAN and NetScaler
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6).
|
CVE-2019-12991 | 8.8 | CWE-78 | KEV | 2022-03-25 |
|
Windows
Microsoft Graphics Device Interface (GDI)
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Rem…
|
CVE-2019-0903 | 8.8 | — | KEV | 2022-03-25 |
|
Windows
Microsoft Windows
A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows Shell Remote Code Execution V…
|
CVE-2018-8414 | 8.8 | CWE-20 | KEV | 2022-03-25 |
|
Windows
Microsoft Windows
The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Win…
|
CVE-2017-0146 | 8.8 | — | KEV | 2022-03-25 |
|
Windows
Microsoft Windows
OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.…
|
CVE-2014-6332 | 8.8 | CWE-119 | KEV | 2022-03-25 |
|
Windows
Microsoft Kerberos Key Distribution Center (KDC)
The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1…
|
CVE-2014-6324 | 8.8 | — | KEV | 2022-03-25 |
|
Cisco IOS
Cisco IOS, XR, and XE Software
Multiple Buffer Overflow vulnerabilities in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisc…
|
CVE-2018-0167 | 8.8 | CWE-119 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS software
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authen…
|
CVE-2017-6744 | 8.8 | CWE-119 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE Software
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authen…
|
CVE-2017-6743 | 8.8 | CWE-119 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE Software
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authen…
|
CVE-2017-6740 | 8.8 | CWE-119 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE Software
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authen…
|
CVE-2017-6738 | 8.8 | CWE-119 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE Software
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authen…
|
CVE-2017-6736 | 8.8 | CWE-119 | KEV | 2022-03-03 |
|
Windows
Adobe Flash Player
Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to …
|
CVE-2016-7855 | 8.8 | CWE-416 | KEV | 2022-03-03 |
|
Windows
Adobe Reader and Acrobat
Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execu…
|
CVE-2014-0496 | 8.8 | CWE-416 | KEV | 2022-03-03 |