주요 제품 취약점 (3,475건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
PostgreSQL
finance
28건
KEV 2 · 최근 2026-09-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
MySQL/MariaDB
finance
10건
KEV 2 · 최근 2024-11-07
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
Redis
infra
7건
KEV 3 · 최근 2026-05-26
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
wolfSSL
finance
3건
KEV 0
Apache Spark
finance
1건
KEV 1 · 최근 2023-03-07
Spring Framework
finance
1건
KEV 1 · 최근 2022-04-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
OpenSSL
OpenSSL OpenSSL
The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attac…
|
CVE-2014-0160 | 7.5 | CWE-125 | KEV | 2022-05-04 |
|
Windows
Adobe Flash Player
Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux;…
|
CVE-2012-2034 | 7.5 | CWE-119 | KEV | 2022-03-28 |
|
Cisco IOS
Cisco IOS XR
Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized transitive attributes, which allows remote attackers to …
|
CVE-2010-3035 | 7.5 | CWE-20 | KEV | 2022-03-25 |
|
Cisco IOS
Cisco IOS Software and Cisco IOS XE Software
A vulnerability in the implementation of Internet Key Exchange Version 1 (IKEv1) functionality in Cisco IOS Software and Cisco IOS XE Software could …
|
CVE-2018-0159 | 7.5 | CWE-20 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS Software and Cisco IOS XE Software
A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigg…
|
CVE-2018-0156 | 7.5 | CWE-399 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS Software
A vulnerability in the crypto engine of the Cisco Integrated Services Module for VPN (ISM-VPN) running Cisco IOS Software could allow an unauthentica…
|
CVE-2018-0154 | 7.5 | CWE-399 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE Software
A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote atta…
|
CVE-2017-6627 | 7.5 | CWE-399 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS and IOS XE Software
A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an…
|
CVE-2017-12237 | 7.5 | CWE-399 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS software
A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an un…
|
CVE-2017-12235 | 7.5 | CWE-20 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS software
Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthen…
|
CVE-2017-12234 | 7.5 | CWE-20 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS software
Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthen…
|
CVE-2017-12233 | 7.5 | CWE-20 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS software
A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an unauthenticate…
|
CVE-2017-12231 | 7.5 | CWE-399 | KEV | 2022-03-03 |
|
Windows
Microsoft Windows
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code …
|
CVE-2018-8174 | 7.5 | CWE-787 | KEV | 2022-02-15 |
|
Windows
Microsoft Windows
Windows LSA Spoofing Vulnerability
|
CVE-2021-36942 | 7.5 | — | KEV | 2021-11-03 |
|
Windows
Microsoft Windows
Windows MSHTML Platform Remote Code Execution Vulnerability
|
CVE-2021-33742 | 7.5 | CWE-787 | KEV | 2021-11-03 |
|
Microsoft Exchange
Microsoft Exchange Server
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." Th…
|
CVE-2018-8581 | 7.4 | — | KEV | 2022-03-03 |
|
Windows
Adobe Acrobat and Reader
Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.5 on Windows and Mac OS X, allows remote a…
|
CVE-2010-2883 | 7.3 | CWE-787 | KEV | 2022-06-08 |
|
Windows
Microsoft Windows
Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows…
|
CVE-2017-0213 | 7.3 | — | KEV | 2022-03-28 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Information Disclosure Vulnerability
|
CVE-2021-33766 | 7.3 | CWE-287 | KEV | 2022-01-18 |
|
Ivanti
Ivanti Endpoint Manager Mobile (EPMM)
An Improper Input Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remotely authenticated user with administrative…
|
CVE-2026-6973 | 7.2 | CWE-20 | KEV | 2026-05-07 |
|
Ivanti
Ivanti Endpoint Manager Mobile (EPMM)
Remote Code Execution in API component in Ivanti Endpoint Manager Mobile 12.5.0.0 and prior on unspecified platforms allows authenticated attackers t…
|
CVE-2025-4428 | 7.2 | CWE-94 | KEV | 2025-05-19 |
|
Palo Alto PAN-OS
Palo Alto Networks PAN-OS
A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator with access to the management web interface …
|
CVE-2024-9474 | 7.2 | CWE-78 | KEV | 2024-11-18 |
|
Ivanti
Ivanti Cloud Services Appliance (CSA)
An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin p…
|
CVE-2024-9380 | 7.2 | CWE-77 | KEV | 2024-10-09 |
|
Ivanti
Ivanti Cloud Services Appliance
An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attacker to …
|
CVE-2024-8190 | 7.2 | CWE-78 | KEV | 2024-09-13 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Remote Code Execution Vulnerability
|
CVE-2021-31196 | 7.2 | — | KEV | 2024-08-21 |
|
Cisco IOS
Cisco Cisco IOS XE Web UI
A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the privileges o…
|
CVE-2023-20273 | 7.2 | CWE-78 | KEV | 2023-10-23 |
|
Ivanti
Ivanti Endpoint Manager Mobile (EPMM)
A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticated admini…
|
CVE-2023-35081 | 7.2 | CWE-22 | KEV | 2023-07-31 |
|
Windows
Plex Media Server
Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code.
|
CVE-2020-5741 | 7.2 | CWE-502 | KEV | 2023-03-10 |
|
Ivanti
Ivanti Pulse Connect Secure
A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an authenticated administrator to pe…
|
CVE-2021-22900 | 7.2 | CWE-94 | KEV | 2021-11-03 |
|
Ivanti
Ivanti Pulse Connect Secure
A vulnerability in the Pulse Connect Secure < 9.1R9 admin web interface could allow an authenticated attacker to perform an arbitrary code execution …
|
CVE-2020-8260 | 7.2 | CWE-434 | KEV | 2021-11-03 |
|
Ivanti
Ivanti Pulse Connect Secure
A vulnerability in the Pulse Connect Secure < 9.1R8.2 admin web interface could allow an authenticated attacker to upload custom template to perform …
|
CVE-2020-8243 | 7.2 | CWE-94 | KEV | 2021-11-03 |
|
Ivanti
Ivanti Pulse Connect Secure and Pulse Policy Secure
In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse P…
|
CVE-2019-11539 | 7.2 | CWE-78 | KEV | 2021-11-03 |
|
Linux 커널
Linux Kernel
In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Fix out of bounds reads when finding clock sources
The current…
|
CVE-2024-53150 | 7.1 | CWE-125 | KEV | 2025-04-09 |
|
VMware ESXi
VMware ESXi, Workstation, and Fusion
VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with adm…
|
CVE-2025-22226 | 7.1 | CWE-125 | KEV | 2025-03-04 |
|
Windows
Microsoft Windows
Windows Storage Elevation of Privilege Vulnerability
|
CVE-2025-21391 | 7.1 | CWE-59 | KEV | 2025-02-11 |
|
Node.js
Npm package System Information Library for Node.JS
The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware,…
|
CVE-2021-21315 | 7.1 | CWE-78 | KEV | 2022-01-18 |
|
Windows
Microsoft Windows
We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt…
|
CVE-2021-43890 | 7.1 | CWE-290 | KEV | 2021-12-15 |
|
Windows
Microsoft Windows Ancillary Function Driver for WinSock
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
|
CVE-2026-68820 | 7.0 | CWE-416 | KEV | 2026-08-11 |
|
Windows
Microsoft Windows
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevat…
|
CVE-2025-62215 | 7.0 | CWE-362 | KEV | 2025-11-12 |
|
Windows
Microsoft Windows
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally.
|
CVE-2025-26633 | 7.0 | CWE-707 | KEV | 2025-03-11 |
|
Windows
Microsoft Windows
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
|
CVE-2025-24983 | 7.0 | CWE-416 | KEV | 2025-03-11 |
|
Windows
Microsoft Windows
Windows Kernel Elevation of Privilege Vulnerability
|
CVE-2024-30088 | 7.0 | CWE-367 | KEV | 2024-10-15 |
|
Windows
Microsoft Windows
Windows Kernel Elevation of Privilege Vulnerability
|
CVE-2024-38106 | 7.0 | CWE-591 | KEV | 2024-08-13 |
|
Windows
Microsoft Windows CNG Key Isolation Service
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
|
CVE-2023-28229 | 7.0 | CWE-591 | KEV | 2023-10-04 |
|
Windows
Microsoft Windows
Windows User Profile Service Elevation of Privilege Vulnerability
|
CVE-2022-26904 | 7.0 | CWE-362 | KEV | 2022-04-25 |
|
Windows
Microsoft Windows
Windows User Profile Service Elevation of Privilege Vulnerability
|
CVE-2022-21919 | 7.0 | CWE-59 | KEV | 2022-04-25 |
|
Windows
Microsoft Win32k
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation…
|
CVE-2018-8120 | 7.0 | CWE-404 | KEV | 2022-03-15 |
|
Linux 커널
Linux Kernel
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of…
|
CVE-2016-5195 | 7.0 | CWE-362 | KEV | 2022-03-03 |
|
Windows
Microsoft Win32k
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker…
|
CVE-2020-1054 | 7.0 | CWE-787 | KEV | 2021-11-03 |
|
VMware ESXi
VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access…
|
CVE-2024-37085 | 6.8 | CWE-287 | KEV | 2024-07-30 |
|
Windows
Microsoft Windows
Scripting Engine Memory Corruption Vulnerability
|
CVE-2021-34448 | 6.8 | CWE-787 | KEV | 2021-11-03 |
|
Fortinet
Fortinet FortiOS
A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through 7.2…
|
CVE-2022-41328 | 6.7 | CWE-22 | KEV | 2023-03-14 |
|
Cisco IOS
Cisco IOS and IOS XE
A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authentic…
|
CVE-2023-20109 | 6.6 | CWE-787 | KEV | 2023-10-10 |
|
Windows
Microsoft Windows
Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and…
|
CVE-2015-1769 | 6.6 | CWE-264 | KEV | 2022-05-25 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Security Feature Bypass Vulnerability
|
CVE-2021-31207 | 6.6 | CWE-434 | KEV | 2021-11-03 |
|
Fortinet
Fortinet FortiOS
Use of a hard-coded cryptographic key to cipher sensitive data in FortiOS configuration backup file may allow an attacker with access to the backup f…
|
CVE-2019-6693 | 6.5 | CWE-798 | KEV | 2025-06-25 |
|
Windows
Microsoft Windows
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
|
CVE-2025-24054 | 6.5 | CWE-73 | KEV | 2025-04-17 |
|
Palo Alto PAN-OS
Palo Alto Networks PAN-OS
An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the manag…
|
CVE-2025-0111 | 6.5 | CWE-73 | KEV | 2025-02-20 |
|
Windows
Microsoft Windows
NTLM Hash Disclosure Spoofing Vulnerability
|
CVE-2024-43451 | 6.5 | CWE-73 | KEV | 2024-11-12 |
|
Ivanti
Ivanti Cloud Services Appliance (CSA)
SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitra…
|
CVE-2024-9379 | 6.5 | CWE-89 | KEV | 2024-10-09 |