주요 제품 취약점 (3,438건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
47건
KEV 38 · 최근 2026-10-30
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Redis
infra
11건
KEV 3 · 최근 2026-05-26
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST
The PDR_INTERFACE…
|
CVE-2026-98187 | — | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length
mwifiex_sear…
|
CVE-2026-98186 | — | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: mwifiex: validate scan response extents
mwifiex_ret_802_11_scan() subtrac…
|
CVE-2026-98185 | — | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
wifi: mac80211: refuse to make a monitor active when it has no queue
A monitor …
|
CVE-2026-98182 | — | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
drm/gud: fix out-of-bounds write in gud_plane_atomic_check()
The plane property…
|
CVE-2026-98181 | — | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu: fix rmmio iounmap skipped on device removal
amdgpu_pci_remove() cal…
|
CVE-2026-98179 | — | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Avoid integer underflow in EOP ring size calculation.
The low 6 bit…
|
CVE-2026-98177 | — | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc
The low 6 bi…
|
CVE-2026-98176 | — | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix smbd_connection leak on cifs_get_tcp_session() error
When an R…
|
CVE-2026-98172 | — | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()
In move_smb2_…
|
CVE-2026-98170 | — | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix reparse buffer bounds in cifs_query_reparse_point()
In cifs_qu…
|
CVE-2026-98168 | — | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
smb: client: fix server->total_read for compound encrypted PDUs
In receive_encr…
|
CVE-2026-98167 | — | — | — | |
|
Citrix NetScaler
Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1…
|
CVE-2026-88778 | — | CWE-342 | — | |
|
Windows
Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows.
This issue affects Citrix Workspace app for Windows: before 2603.20 CR,…
|
CVE-2026-84420 | — | CWE-125 | — | |
|
Windows
Out-of-bounds write vulnerability in Citrix Workspace app for Windows.
This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR …
|
CVE-2026-84419 | — | CWE-787 | — | |
|
Windows
An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows remote authenticated users to execute arb…
|
CVE-2026-84256 | — | CWE-78 | — | |
|
Windows
OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack dur…
|
CVE-2026-84226 | — | CWE-426 | — | |
|
Node.js
Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift
nodejs and D lang bi…
|
CVE-2026-83745 | — | CWE-130 | — | |
|
Windows
OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on…
|
CVE-2026-82312 | — | CWE-412 | — | |
|
Windows
OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH ent…
|
CVE-2026-81738 | — | CWE-121 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
xfrm: ah6: validate routing header segments_left
AH6 rearranges routing-header …
|
CVE-2026-80844 | — | — | — | |
|
Windows
Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows.
This issue affects Citrix Workspace app for Windows: before 2603.11 Cu…
|
CVE-2026-78547 | — | CWE-787 | — | |
|
Windows
Out-of-bounds read vulnerability in Citirx Workspace app for Windows.
This issue affects Workspace app for Windows: before 2603.11 Current Release (…
|
CVE-2026-78546 | — | CWE-125 | — | |
|
Windows
The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory co…
|
CVE-2026-78043 | — | CWE-22 | — | |
|
Node.js
Prior to 3.1.3, Flowise CSVAgent interpolates an attacker-controlled segment of the csvFile data URI directly into a Python source-code template that…
|
CVE-2026-69264 | — | CWE-94 | — | |
|
Node.js
Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the CSVAgent in packages/components/nodes/ag…
|
CVE-2026-69255 | — | CWE-94 | — | |
|
Node.js
Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to version 3.1.3, several custom-tool compo…
|
CVE-2026-69253 | — | CWE-95 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ipv6: Fix null-ptr-deref in fib6_nh_mtu_change().
fib6_nh_mtu_change() re-fetch…
|
CVE-2026-64538 | — | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
bpf: Support for hardening against JIT spraying
The BPF JIT allocator packs man…
|
CVE-2026-64508 | — | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
x86/bugs: Enable IBPB flush on BPF JIT allocation
Enable hardening against JIT …
|
CVE-2026-64507 | — | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
block: Avoid mounting the bdev pseudo-filesystem in userspace
The bdev pseudo-f…
|
CVE-2026-63810 | — | — | — | |
|
Citrix NetScaler
Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual se…
|
CVE-2026-4368 | — | CWE-362 | — | |
|
Windows
A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support utility and the agent's tamper protect…
|
CVE-2026-40145 | — | CWE-1220 | — | |
|
Windows
A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management (Windows deployments) prior to versi…
|
CVE-2026-40144 | — | CWE-125 | — | |
|
Windows
This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.
|
CVE-2026-32996 | — | CWE-532 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: hv_netvsc: reject RSS hash key programming without RX indirection table
RS…
|
CVE-2026-23054 | — | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
In nfs4_ff_all…
|
CVE-2026-23038 | — | CWE-401 | — | |
|
Windows
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabl…
|
CVE-2026-19592 | — | CWE-15 | — | |
|
Citrix NetScaler
Vulnerability in NetScaler ADC and NetScaler Gateway.
This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.…
|
CVE-2026-19489 | — | CWE-120 | — | |
|
Windows
A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the installer th…
|
CVE-2026-16675 | — | CWE-307 | — | |
|
Windows
Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.…
|
CVE-2026-16437 | — | CWE-640 | — | |
|
Windows
Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX…
|
CVE-2026-13584 | — | CWE-924 | — | |
|
Citrix NetScaler
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC.
NetScaler ADC or NetScaler Gate…
|
CVE-2026-107406 | — | — | — | |
|
Node.js
Axios is a promise-based HTTP client for the browser and Node.js. From 0.28.0 until 0.34.0 and 1.15.1 until 1.20.0, ToFormData processes inherited se…
|
CVE-2026-101909 | — | CWE-1321 | — | |
|
Node.js
Axios is a promise-based HTTP client for the browser and Node.js. From 1.17.0 until 1.20.0, the fetch adapter bypasses the maxRedirects: 0 redirect p…
|
CVE-2026-101907 | — | CWE-441 | — | |
|
Node.js
Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy applies a quadratic trailing-dot …
|
CVE-2026-101906 | — | CWE-400 | — | |
|
Node.js
Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.2 until 1.20.0, the Node HTTP adapter in lib/adapters/http.js supplies re…
|
CVE-2026-101905 | — | CWE-441 | — | |
|
Node.js
Axios is a promise-based HTTP client for the browser and Node.js. From 1.16.1 until 1.20.0, the RFC 2397 regular expression allows slash characters o…
|
CVE-2026-101903 | — | CWE-1333 | — | |
|
Node.js
Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Http2Sessions does not install adequate error handling fo…
|
CVE-2026-101901 | — | CWE-400 | — | |
|
Node.js
Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Axios HTTP/2 request setup does not consistently apply pr…
|
CVE-2026-101898 | — | CWE-918 | — | |
|
Palo Alto PAN-OS
A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with n…
|
CVE-2026-0310 | — | CWE-787 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
w1: therm: Fix off-by-one buffer overflow in alarms_store
The sysfs buffer pass…
|
CVE-2025-71197 | — | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: hns3: using the num_tqps in the vf driver to apply for resources
Currently…
|
CVE-2025-71064 | — | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
ext4: xattr: fix null pointer deref in ext4_raw_inode()
If ext4_get_inode_loc()…
|
CVE-2025-68820 | — | CWE-476 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: fw_tracer, Validate format string parameters
Add validation for forma…
|
CVE-2025-68816 | — | CWE-134 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
io_uring: fix filename leak in __io_openat_prep()
__io_openat_prep() allocates…
|
CVE-2025-68814 | — | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
perf/x86/amd: Check event before enable to avoid GPF
On AMD machines cpuc->even…
|
CVE-2025-68798 | — | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
fsnotify: do not generate ACCESS/MODIFY events on child for special files
inoti…
|
CVE-2025-68788 | — | CWE-200 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
netrom: Fix memory leak in nr_sendmsg()
syzbot reported a memory leak [1].
Whe…
|
CVE-2025-68787 | — | — | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net/hsr: fix NULL pointer dereference in prp_get_untagged_frame()
prp_get_untag…
|
CVE-2025-68776 | — | — | — |