주요 제품 취약점 (3,481건)

기술	CVE	심각도	유형	등재일
Windows OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH ent…	CVE-2026-81738	—	CWE-121	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left AH6 rearranges routing-header …	CVE-2026-80844	—	—	—
Windows Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Cu…	CVE-2026-78547	—	CWE-787	—
Windows Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.11 Current Release (…	CVE-2026-78546	—	CWE-125	—
Windows The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory co…	CVE-2026-78043	—	CWE-22	—
Node.js Prior to 3.1.3, Flowise CSVAgent interpolates an attacker-controlled segment of the csvFile data URI directly into a Python source-code template that…	CVE-2026-69264	—	CWE-94	—
Node.js Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, the CSVAgent in packages/components/nodes/ag…	CVE-2026-69255	—	CWE-94	—
Node.js Flowise is a drag-and-drop user interface for building customized large language model (LLM) flows. Prior to version 3.1.3, several custom-tool compo…	CVE-2026-69253	—	CWE-95	—
MySQL/MariaDB Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise record manager and agent memory node…	CVE-2026-69251	—	CWE-94	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). fib6_nh_mtu_change() re-fetch…	CVE-2026-64538	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: bpf: Support for hardening against JIT spraying The BPF JIT allocator packs man…	CVE-2026-64508	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Enable IBPB flush on BPF JIT allocation Enable hardening against JIT …	CVE-2026-64507	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: block: Avoid mounting the bdev pseudo-filesystem in userspace The bdev pseudo-f…	CVE-2026-63810	—	—	—
Citrix NetScaler Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual se…	CVE-2026-4368	—	CWE-362	—
Windows A vulnerability exists in the interaction between a Endpoint Privilege Management (Windows Deployment) support utility and the agent's tamper protect…	CVE-2026-40145	—	CWE-1220	—
Windows A memory-corruption vulnerability exists in a kernel-mode component of BeyondTrust Endpoint Privilege Management (Windows deployments) prior to versi…	CVE-2026-40144	—	CWE-125	—
Windows This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.	CVE-2026-32996	—	CWE-532	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: net: hv_netvsc: reject RSS hash key programming without RX indirection table RS…	CVE-2026-23054	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() In nfs4_ff_all…	CVE-2026-23038	—	CWE-401	—
Windows OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata without disabl…	CVE-2026-19592	—	CWE-15	—
Citrix NetScaler Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.…	CVE-2026-19489	—	CWE-120	—
Windows A privilege escalation security issue exists within FactoryTalk® Activation Manager. The security issue stems from custom actions in the installer th…	CVE-2026-16675	—	CWE-307	—
Windows Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.…	CVE-2026-16437	—	CWE-640	—
Windows Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Mitsubishi Electric MELSEC MX Controller MX…	CVE-2026-13584	—	CWE-924	—
MySQL/MariaDB Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based API guard does not reject a cra…	CVE-2026-114509	—	CWE-287	—
Citrix NetScaler Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gate…	CVE-2026-107406	—	—	—
Node.js Axios is a promise-based HTTP client for the browser and Node.js. From 0.28.0 until 0.34.0 and 1.15.1 until 1.20.0, ToFormData processes inherited se…	CVE-2026-101909	—	CWE-1321	—
Node.js Axios is a promise-based HTTP client for the browser and Node.js. From 1.17.0 until 1.20.0, the fetch adapter bypasses the maxRedirects: 0 redirect p…	CVE-2026-101907	—	CWE-441	—
Node.js Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.0 until 1.20.0, Axios shouldBypassProxy applies a quadratic trailing-dot …	CVE-2026-101906	—	CWE-400	—
Node.js Axios is a promise-based HTTP client for the browser and Node.js. From 1.15.2 until 1.20.0, the Node HTTP adapter in lib/adapters/http.js supplies re…	CVE-2026-101905	—	CWE-441	—
Node.js Axios is a promise-based HTTP client for the browser and Node.js. From 1.16.1 until 1.20.0, the RFC 2397 regular expression allows slash characters o…	CVE-2026-101903	—	CWE-1333	—
Node.js Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Http2Sessions does not install adequate error handling fo…	CVE-2026-101901	—	CWE-400	—
Node.js Axios is a promise-based HTTP client for the browser and Node.js. From 1.13.0 until 1.20.0, Axios HTTP/2 request setup does not consistently apply pr…	CVE-2026-101898	—	CWE-918	—
Palo Alto PAN-OS A buffer overflow vulnerability in the XML processing functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with n…	CVE-2026-0310	—	CWE-787	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: w1: therm: Fix off-by-one buffer overflow in alarms_store The sysfs buffer pass…	CVE-2025-71197	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: net: hns3: using the num_tqps in the vf driver to apply for resources Currently…	CVE-2025-71064	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: ext4: xattr: fix null pointer deref in ext4_raw_inode() If ext4_get_inode_loc()…	CVE-2025-68820	—	CWE-476	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: fw_tracer, Validate format string parameters Add validation for forma…	CVE-2025-68816	—	CWE-134	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: io_uring: fix filename leak in __io_openat_prep() __io_openat_prep() allocates…	CVE-2025-68814	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Check event before enable to avoid GPF On AMD machines cpuc->even…	CVE-2025-68798	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: fsnotify: do not generate ACCESS/MODIFY events on child for special files inoti…	CVE-2025-68788	—	CWE-200	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: netrom: Fix memory leak in nr_sendmsg() syzbot reported a memory leak [1]. Whe…	CVE-2025-68787	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() prp_get_untag…	CVE-2025-68776	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: spi: fsl-cpm: Check length parity before switching to 16 bit mode Commit fc96ec…	CVE-2025-68773	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix invalid prog->stats access when update_effective_progs fails Syzkaller…	CVE-2025-68742	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix device resources accessed after device removal Correct poss…	CVE-2025-68371	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: bpf: Check skb->transport_header is set in bpf_skb_check_mtu The bpf_skb_check_…	CVE-2025-68363	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in mptcp_do_fas…	CVE-2025-68291	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: bfs: Reconstruct file type when loading from disk syzbot is reporting that S_IF…	CVE-2025-68266	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: ext4: refresh inline data size before write operations The cached ei->i_inline_…	CVE-2025-68264	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: restore write access before closing files opened by open_exec() bm…	CVE-2025-68239	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: PCI/IOV: Fix race between SR-IOV enable/disable and hotplug Commit 05703271c3cd…	CVE-2025-40219	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: fs: quota: create dedicated workqueue for quota_release_work There is a kernel …	CVE-2025-40196	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: nbd: restrict sockets to TCP and UDP Recently, syzbot started to abuse NBD with…	CVE-2025-40080	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: bpf: Explicitly check accesses to bpf_sock_addr Syzkaller found a kernel warnin…	CVE-2025-40078	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: pps: fix warning in pps_register_cdev when register device fail Similar to prev…	CVE-2025-40070	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Fix incorrect boolean values in af_alg_ctx Commit 1b34cbbf4f01…	CVE-2025-40022	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free The previous com…	CVE-2025-39997	—	—	—
Linux 커널 In the Linux kernel, the following vulnerability has been resolved: nexthop: Forbid FDB status change while nexthop is in a group The kernel forbid…	CVE-2025-39980	—	—	—
Windows Protection Mechanism Failure vulnerability in ESTsoft ALZip on Windows allows SmartScreen bypass.This issue affects ALZip: from 12.01 before 12.29.	CVE-2025-29864	—	CWE-693	—