주요 제품 취약점 (3,434건)
Windows
infra
2105건
KEV 293 · 최근 2026-10-13
Linux 커널
infra
908건
KEV 31 · 최근 2026-10-28
Cisco IOS
infra
58건
KEV 44 · 최근 2026-07-13
Ivanti
infra
45건
KEV 36 · 최근 2026-10-13
Microsoft Exchange
infra
43건
KEV 20 · 최근 2026-05-15
Fortinet
infra
41건
KEV 22 · 최근 2026-10-16
Apache HTTP
infra
33건
KEV 11 · 최근 2026-08-24
Citrix NetScaler
infra
31건
KEV 16 · 최근 2026-10-04
Apache Tomcat
infra
30건
KEV 8 · 최근 2026-08-04
OpenSSH
infra
30건
KEV 3 · 최근 2025-10-02
Node.js
infra
24건
KEV 2 · 최근 2025-01-14
nginx
infra
16건
KEV 0
Palo Alto PAN-OS
infra
15건
KEV 14 · 최근 2026-10-14
VMware vCenter
infra
13건
KEV 12 · 최근 2026-08-18
Atlassian Confluence
infra
10건
KEV 10 · 최근 2026-10-15
Redis
infra
9건
KEV 3 · 최근 2026-05-26
curl
infra
8건
KEV 1 · 최근 2023-05-12
OpenSSL
infra
8건
KEV 1 · 최근 2022-05-04
VMware ESXi
infra
7건
KEV 7 · 최근 2025-03-04
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Windows
Microsoft XML Core Services
Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 and R2 SP…
|
CVE-2017-0022 | 6.5 | CWE-119 | KEV | 2022-05-24 |
|
Windows
Microsoft Internet Explorer
Microsoft Internet Explorer 9 through 11 and the Internet Messaging API in Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 a…
|
CVE-2016-3298 | 6.5 | — | KEV | 2022-05-24 |
|
Redis
Cisco IOS XR
A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to access the Redis instance that is…
|
CVE-2022-20821 | 6.5 | CWE-200 | KEV | 2022-05-23 |
|
Cisco IOS
Cisco IOS XR
A vulnerability in the health check RPM of Cisco IOS XR Software could allow an unauthenticated, remote attacker to access the Redis instance that is…
|
CVE-2022-20821 | 6.5 | CWE-200 | KEV | 2022-05-23 |
|
Windows
Microsoft Windows
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosu…
|
CVE-2019-0703 | 6.5 | — | KEV | 2022-05-23 |
|
Cisco IOS
Cisco IOS and IOS XE Software
A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent attacker…
|
CVE-2017-6663 | 6.5 | — | KEV | 2022-03-03 |
|
Cisco IOS
Cisco Catalyst 6800 Series Switches
A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an …
|
CVE-2017-12238 | 6.5 | CWE-399 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS software
A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through…
|
CVE-2017-12232 | 6.5 | CWE-399 | KEV | 2022-03-03 |
|
Fortinet
Fortinet FortiOS
A Default Configuration vulnerability in FortiOS may allow an unauthenticated attacker on the same subnet to intercept sensitive information by imper…
|
CVE-2019-5591 | 6.5 | CWE-306 | KEV | 2021-11-03 |
|
Cisco IOS
Cisco IOS Software
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches…
|
CVE-2018-0161 | 6.3 | CWE-399 | KEV | 2022-03-03 |
|
Windows
Microsoft Windows
Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.
|
CVE-2026-21525 | 6.2 | CWE-476 | KEV | 2026-02-10 |
|
Windows
Adobe Flash Player
Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solari…
|
CVE-2012-0767 | 6.1 | CWE-79 | KEV | 2022-06-08 |
|
Fortinet
Fortinet Multiple Products
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, For…
|
CVE-2025-61624 | 6.0 | CWE-22 | KEV | 2026-10-16 |
|
Fortinet
Fortinet FortiOS
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS …
|
CVE-2025-68686 | 5.9 | CWE-200 | KEV | 2026-07-27 |
|
Cisco IOS
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP c…
|
CVE-2004-1464 | 5.9 | CWE-400 | KEV | 2023-05-19 |
|
Cisco IOS
Cisco IOS XR
Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attrib…
|
CVE-2009-2055 | 5.9 | CWE-20 | KEV | 2022-03-25 |
|
Cisco IOS
Cisco IOS Software
Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to tri…
|
CVE-2018-0180 | 5.9 | CWE-399 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS Software
Multiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to tri…
|
CVE-2018-0179 | 5.9 | CWE-399 | KEV | 2022-03-03 |
|
Cisco IOS
Cisco IOS XE Software
A vulnerability in the Border Gateway Protocol (BGP) over an Ethernet Virtual Private Network (EVPN) for Cisco IOS XE Software could allow an unauthe…
|
CVE-2017-12319 | 5.9 | CWE-20 | KEV | 2022-03-03 |
|
Windows
Microsoft Windows
Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally.
|
CVE-2026-20805 | 5.5 | CWE-200 | KEV | 2026-01-13 |
|
Windows
Microsoft Windows
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
|
CVE-2025-24991 | 5.5 | CWE-125 | KEV | 2025-03-11 |
|
Linux 커널
Linux Kernel
In the Linux kernel, the following vulnerability has been resolved:
HID: core: zero-initialize the report buffer
Since the report buffer is used by…
|
CVE-2024-50302 | 5.5 | CWE-908 | KEV | 2025-03-04 |
|
Citrix NetScaler
Citrix NetScaler ADC and NetScaler Gateway
Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP…
|
CVE-2023-6548 | 5.5 | CWE-94 | KEV | 2024-01-17 |
|
Linux 커널
Linux Kernel
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST"…
|
CVE-2014-0196 | 5.5 | CWE-362 | KEV | 2023-05-12 |
|
Windows
Microsoft Windows
Windows Installer Elevation of Privilege Vulnerability
|
CVE-2021-41379 | 5.5 | CWE-59 | KEV | 2022-03-03 |
|
Windows
Microsoft WinVerifyTrust function
Why is Microsoft republishing a CVE from 2013?
We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table an…
|
CVE-2013-3900 | 5.5 | CWE-347 | KEV | 2022-01-10 |
|
Windows
Microsoft Windows
Windows Kernel Information Disclosure Vulnerability
|
CVE-2021-31955 | 5.5 | CWE-497 | KEV | 2021-11-03 |
|
Windows
Microsoft Netlogon
An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, u…
|
CVE-2020-1472 | 5.5 | CWE-269 | KEV | 2021-11-03 |
|
Windows
OpenPLC ScadaBR
OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm.
|
CVE-2021-26829 | 5.4 | CWE-79 | KEV | 2025-11-28 |
|
Windows
Microsoft Windows
Windows Mark of the Web Security Feature Bypass Vulnerability
|
CVE-2024-38217 | 5.4 | CWE-693 | KEV | 2024-09-10 |
|
Windows
Microsoft Windows
Windows Mark of the Web Security Feature Bypass Vulnerability
|
CVE-2023-36584 | 5.4 | — | KEV | 2023-11-16 |
|
Windows
Microsoft Defender
Windows SmartScreen Security Feature Bypass Vulnerability
|
CVE-2022-44698 | 5.4 | — | KEV | 2022-12-13 |
|
Windows
Microsoft Windows
Windows Mark of the Web Security Feature Bypass Vulnerability
|
CVE-2022-41049 | 5.4 | — | KEV | 2022-11-14 |
|
Windows
Microsoft Windows
Windows Mark of the Web Security Feature Bypass Vulnerability
|
CVE-2022-41091 | 5.4 | CWE-863 | KEV | 2022-11-08 |
|
Ivanti
Ivanti Endpoint Manager Mobile (EPMM)
An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources wit…
|
CVE-2025-4427 | 5.3 | CWE-288 | KEV | 2025-05-19 |
|
Atlassian Confluence
Atlassian Confluence Server
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vuln…
|
CVE-2021-26085 | 5.3 | CWE-425 | KEV | 2022-03-28 |
|
VMware vCenter
VMware vCenter Server and Cloud Foundation
The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin…
|
CVE-2021-21973 | 5.3 | CWE-918 | KEV | 2022-03-07 |
|
VMware vCenter
VMware vCenter Server
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network acce…
|
CVE-2021-22017 | 5.3 | — | KEV | 2022-01-10 |
|
Windows
Microsoft Windows
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
|
CVE-2025-24984 | 4.6 | CWE-532 | KEV | 2025-03-11 |
|
Windows
Microsoft Windows
Windows SmartScreen Security Feature Bypass Vulnerability
|
CVE-2023-24880 | 4.4 | CWE-863 | KEV | 2023-03-14 |
|
Cisco IOS
Multiple cross-site request forgery (CSRF) vulnerabilities in the HTTP Administration component in Cisco IOS 12.4 on the 871 Integrated Services Rout…
|
CVE-2008-4128 | 4.3 | CWE-352 | KEV | 2026-07-13 |
|
Windows
Microsoft Windows
Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
|
CVE-2026-32202 | 4.3 | CWE-693 | KEV | 2026-04-28 |
|
Fortinet
Fortinet FortiOS and FortiADC
A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the L…
|
CVE-2018-13374 | 4.3 | CWE-732 | KEV | 2022-09-08 |
|
Fortinet
Fortinet FortiOS and FortiProxy
A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, …
|
CVE-2018-13383 | 4.3 | CWE-787 | KEV | 2022-01-10 |
|
VMware ESXi
VMware Tools
A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of…
|
CVE-2023-20867 | 3.9 | CWE-287 | KEV | 2023-06-23 |
|
Fortinet
Fortinet FortiOS
A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authentic…
|
CVE-2021-44168 | 3.3 | CWE-494 | KEV | 2021-12-10 |
|
Atlassian Confluence
Atlassian Multiple Products
h3. Summary
This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center…
|
CVE-2026-21589 | — | — | KEV | 2026-10-15 |
|
Palo Alto PAN-OS
Palo Alto Networks PAN-OS
A remote code execution (RCE) vulnerability in the management interface of Palo Alto Networks PAN-OS® software enables an authenticated attacker with…
|
CVE-2026-0322 | — | CWE-94 | KEV | 2026-10-14 |
|
Ivanti
Ivanti Connect Secure
Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary …
|
CVE-2026-104935 | — | — | KEV | 2026-10-13 |
|
Citrix NetScaler
Vulnerability in NetScaler ADC and NetScaler Gateway.
This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and befo…
|
CVE-2026-88779 | — | CWE-119 | KEV | 2026-10-04 |
|
Citrix NetScaler
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 …
|
CVE-2026-88772 | — | CWE-119 | KEV | 2026-09-27 |
|
Citrix NetScaler
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1…
|
CVE-2026-88771 | — | CWE-20 | KEV | 2026-09-27 |
|
Citrix NetScaler
Vulnerability in NetScaler ADC and NetScaler Gateway.
This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.…
|
CVE-2026-19490 | — | CWE-288 | KEV | 2026-09-09 |
|
Citrix NetScaler
Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
…
|
CVE-2026-88773 | 10.0 | CWE-444 | — | |
|
Linux 커널
In the Linux kernel, the following vulnerability has been resolved:
net: stmmac: fix TSO DMA API usage causing oops
Commit 66600fac7a98 ("net: stmm…
|
CVE-2024-56719 | 10.0 | — | — | |
|
Ivanti
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrar…
|
CVE-2026-12650 | 9.9 | CWE-502 | — | |
|
Ivanti
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on th…
|
CVE-2026-12647 | 9.9 | CWE-862 | — | |
|
Ivanti
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on th…
|
CVE-2026-12646 | 9.9 | CWE-862 | — | |
|
Ivanti
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on th…
|
CVE-2026-12645 | 9.9 | CWE-862 | — | |
|
Ivanti
An exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated attacker to leak sensitive authentication information.
|
CVE-2026-109412 | 9.9 | CWE-749 | — |