주요 제품 취약점 (3,481건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
47건
KEV 38 · 최근 2026-10-30
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Redis
infra
11건
KEV 3 · 최근 2026-05-26
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: core: flush gadget workqueue after device removal
device_del() can…
|
CVE-2025-21838 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
While the MIDI jacks…
|
CVE-2025-21835 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ptp: Ensure info->enable callback is always set
The ioctl and sysfs handlers un…
|
CVE-2025-21814 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: let net.core.dev_weight always be non-zero
The following problem was encou…
|
CVE-2025-21806 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: hns3: fix oops when unload drivers paralleling
When unload hclge driver, i…
|
CVE-2025-21802 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
vxlan: check vxlan_vnigroup_init() return value
vxlan_init() must check vxlan_v…
|
CVE-2025-21790 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
team: better TEAM_OPTION_TYPE_STRING validation
syzbot reported following splat…
|
CVE-2025-21787 | 5.5 | CWE-908 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
Ad…
|
CVE-2025-21779 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
USB: hub: Ignore non-compliant devices with too many configs or interfaces
Robe…
|
CVE-2025-21776 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic c…
|
CVE-2025-21767 | 5.5 | CWE-667 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
blk-cgroup: Fix class @block_class's subsystem refcount leakage
blkcg_fill_root…
|
CVE-2025-21745 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
On removal o…
|
CVE-2025-21744 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
bpf: Send signals asynchronously if !preemptible
BPF programs can execute in al…
|
CVE-2025-21728 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
vxlan: Fix uninit-value in vxlan_vnifilter_dump()
KMSAN reported an uninit-valu…
|
CVE-2025-21716 | 5.5 | CWE-908 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: usb: rtl8150: enable basic endpoint checking
Syzkaller reports [1] encount…
|
CVE-2025-21708 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
mptcp: pm: only set fullmesh for subflow endp
With the in-kernel path-manager, …
|
CVE-2025-21706 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
mptcp: handle fastopen disconnect correctly
Syzbot was able to trigger a data s…
|
CVE-2025-21705 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netfilter: conntrack: clamp maximum hashtable size to INT_MAX
Use INT_MAX as ma…
|
CVE-2025-21648 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled it
…
|
CVE-2025-21645 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback
commit 1f5664351410…
|
CVE-2024-58077 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
team: prevent adding a device which is already a team device lower
Prevent addi…
|
CVE-2024-58071 | 5.5 | CWE-667 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
If a drive…
|
CVE-2024-58068 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtlwifi: fix memory leaks and invalid access at probe error path
Deinitia…
|
CVE-2024-58063 | 5.5 | CWE-401 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: prohibit deactivating all links
In the internal API this calls …
|
CVE-2024-58061 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ubifs: skip dumping tnc tree when zroot is null
Clearing slab cache will free a…
|
CVE-2024-58058 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
remoteproc: core: Fix ida_free call while not allocated
In the rproc_alloc() fu…
|
CVE-2024-58056 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
HID: multitouch: Add NULL check in mt_input_configured
devm_kasprintf() can ret…
|
CVE-2024-58020 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
Shifting 1 <<…
|
CVE-2024-58017 | 5.5 | CWE-190 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
safesetid: check size of policy writes
syzbot attempts to write a buffer with a…
|
CVE-2024-58016 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: int3472: Check for adev == NULL
Not all devices have an ACPI comp…
|
CVE-2024-58011 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
A NULL sock poin…
|
CVE-2024-58009 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
tpm: Change to kvalloc() in eventlog/acpi.c
The following failure was reported …
|
CVE-2024-58005 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint chec…
|
CVE-2024-57993 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
usb: xhci: Fix NULL pointer dereference on certain command aborts
If a command …
|
CVE-2024-57981 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
memcg: fix soft lockup in the OOM process
A soft lockup issue was found in the …
|
CVE-2024-57977 | 5.5 | CWE-667 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
fs: relax assertions on failure to encode file handles
Encoding file handles is…
|
CVE-2024-57924 | 5.5 | CWE-617 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ALSA: control: Avoid WARN() for symlink errors
Using WARN() for showing the err…
|
CVE-2024-56657 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: Fix icmp host relookup triggering ip_rt_bug
arp link failure may trigger i…
|
CVE-2024-56647 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: enetc: allocate vf_state during PF probes
In the previous implementation, …
|
CVE-2024-50298 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ext4: fix access to uninitialised lock in fc replay path
The following kernel t…
|
CVE-2024-50014 | 5.5 | CWE-908 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
block: fix integer overflow in BLKSECDISCARD
I independently rediscovered
com…
|
CVE-2024-49994 | 5.5 | CWE-190 | — | |
|
Redis
In the Linux kernel, the following vulnerability has been resolved:
block: fix integer overflow in BLKSECDISCARD
I independently rediscovered
com…
|
CVE-2024-49994 | 5.5 | CWE-190 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ext4: filesystems without casefold feature cannot be mounted with siphash
When …
|
CVE-2024-49968 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
dlm: fix possible lkb_resource null dereference
This patch fixes a possible nul…
|
CVE-2024-47809 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
erofs: handle overlapped pclusters out of crafted images properly
syzbot report…
|
CVE-2024-47736 | 5.5 | CWE-667 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix NULL pointer dereference in gfs2_log_flush
In gfs2_jindex_free(), set…
|
CVE-2024-42079 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
iommu: Return right value in iommu_sva_bind_device()
iommu_sva_bind_device() sh…
|
CVE-2024-40945 | 5.5 | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv6: Fix potential uninit-value access in __ip6_make_skb()
As it was done in c…
|
CVE-2024-36903 | 5.5 | CWE-908 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
mm/vmscan: fix a bug calling wakeup_kswapd() with a wrong zone index
With numa …
|
CVE-2024-26783 | 5.5 | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none
After gra…
|
CVE-2023-53292 | 5.5 | CWE-476 | — | |
|
OpenSSH
In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during ad…
|
CVE-2023-51384 | 5.5 | CWE-284 | — | |
|
Windows
Windows Mobile Device Management Information Disclosure Vulnerability
|
CVE-2021-24084 | 5.5 | CWE-59 | — | |
|
nginx
Malcolm's nginx Lua role-based access control (RBAC) layer decides whether an authenticated user may reach a role-restricted path (e.g. /htadmin, /au…
|
CVE-2026-107334 | 5.4 | CWE-863 | — | |
|
nginx
Description
NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_v3_module module. When using HTTP/3 with
proxy_request_buffering …
|
CVE-2026-95101 | 5.3 | CWE-172 | — | |
|
Windows
Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.
|
CVE-2026-85939 | 5.3 | CWE-1390 | — | |
|
wolfSSL
src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSH_MSG_KEX_DH_GEX_GROUP (31) and …
|
CVE-2026-84897 | 5.3 | CWE-372 | — | |
|
Windows
Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the rendere…
|
CVE-2026-84329 | 5.3 | CWE-441 | — | |
|
Apache HTTP
Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard Us…
|
CVE-2026-79768 | 5.3 | CWE-55 | — | |
|
Windows
Use after free in Windows Distributed File System (DFS) allows an authorized attacker to deny service over a network.
|
CVE-2026-78446 | 5.3 | CWE-416 | — | |
|
Fortinet
A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 a…
|
CVE-2026-71408 | 5.3 | CWE-770 | — |