CWE-120 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-120 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2017-7269Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information S…99.8%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2019-11043In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurati…99.8%심각9.8● 실제 악용이 확인됨CVE-2016-6366Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA…87.6%높음8.8● 실제 악용이 확인됨CVE-2007-5659Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to ex…87.4%높음7.8● 실제 악용이 확인됨CVE-2016-10174The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when invoki…83.3%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2018-6789An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sendi…82.1%심각9.8● 실제 악용이 확인됨CVE-2013-1331Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to exec…79.8%높음7.8● 실제 악용이 확인됨CVE-2025-20333A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Sof…70.7%심각9.9
전체 목록
105건
CVE-2020-15999악용 확인Heap buffer overflow in Freetype in Google Chrome prior to 86.0.4240.111 allowed a remote attacker to potentia…63.9%심각9.6
CVE-2010-2572악용 확인Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary cod…58.6%높음7.8
CVE-2022-37055악용 확인D-Link Go-RT-AC750 GORTAC750_revA_v101b03 and GO-RT-AC750_revB_FWv200b02 are vulnerable to Buffer Overflow via…55.5%심각9.8
CVE-2023-41064악용 확인A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPa…53.4%높음7.8
CVE-2006-2492악용 확인Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and Microsoft Wo…48.1%높음8.8
CVE-2017-6862악용 확인NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5 devices before 1.0…45.7%심각9.8
CVE-2016-0099랜섬웨어 악용The Secondary Logon Service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,…37.0%높음7.8
CVE-2013-0641악용 확인Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allo…32.3%높음7.8
CVE-2023-33010악용 확인A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 throu…28.8%심각9.8
CVE-2023-33009악용 확인A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 throug…28.1%심각9.8
CVE-2020-5135랜섬웨어 악용A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and poten…26.9%심각9.8
CVE-2020-15069악용 확인Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via the HTTP/S B…10.7%심각9.8
CVE-2004-0210악용 확인The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via …7.2%높음7.8
CVE-2021-30983악용 확인A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 15.2 and iPadO…2.9%높음7.8
CVE-2025-31277악용 확인The issue was addressed with improved memory handling. This issue is fixed in Safari 18.6, iOS 18.6 and iPadOS…1.6%높음8.8
CVE-2025-43520악용 확인A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.2 and i…0.4%보통5.5
CVE-2026-93740A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt o…0.9%심각9.3
CVE-2026-93739A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of th…0.9%높음8.6
CVE-2026-93738A vulnerability was found in Totolink A3002MU Hh-B20211125.1046. This affects the function formSchedule of the…0.9%높음8.6
CVE-2026-94101A security vulnerability has been detected in Netcore NBR200V2 1.3.241127.071246. The affected element is the …0.8%높음8.6
CVE-2026-94100A weakness has been identified in Netcore NBR200V2 1.3.241127.071246. Impacted is the function wan_config_set_…0.8%높음8.6
CVE-2026-90608A flaw has been found in Totolink A3002MU Hh-B20211125.1046. The affected element is the function formPortFw o…0.8%높음8.6
CVE-2026-93741A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is t…0.7%심각9.3
CVE-2026-86165A vulnerability was found in Tenda HG10 300001138. This vulnerability affects the function formURL of the file…0.6%높음8.9
CVE-2026-90780SIPp through 3.7.7 contains a buffer overflow vulnerability in the get_header() function in src/sip_parser.cpp…0.6%높음8.7
CVE-2026-90778SIPp through 3.7.7 contains a buffer overflow vulnerability in get_peer_tag() function when processing SIP To …0.6%높음8.7
CVE-2026-85109A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file …0.6%높음8.9
CVE-2026-85031A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of the file /cg…0.6%높음8.6
CVE-2026-76705A buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways. Succ…0.5%보통5.5
CVE-2026-103227A weakness has been identified in GPAC up to 26.07.0. Affected by this issue is the function gf_dash_resolve_u…0.5%보통5.3
CVE-2026-90606A security vulnerability has been detected in Totolink A3002MU Hh-B20211125.1046. This issue affects the funct…0.5%높음8.6
CVE-2026-86166A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formWanRedirect of the…0.5%높음7.4
CVE-2026-85110A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /bo…0.5%높음7.4
CVE-2026-90607A vulnerability was detected in Totolink A3002MU Hh-B20211125.1046. Impacted is the function formNewSchedule o…0.5%높음8.6
CVE-2026-90605A weakness has been identified in Totolink A3002MU Hh-B20211125.1046. This vulnerability affects the function …0.5%높음8.6
CVE-2026-82772Buffer overflow vulnerability exists in Contec EC1000 series. If a remote attacker sends a specially crafted r…0.5%높음8.7
CVE-2026-82770Buffer overflow vulnerability exists in Contec RP-WAH-SR Series. If a remote attacker sends a specially crafte…0.5%높음8.7
CVE-2026-88409FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a buffer overflow in the _Decode_GrB_Matr…0.5%높음8.8
CVE-2026-87931A vulnerability has been found in Behavioral Technology Group Pavlok Behavioral Conditioning Wearable up to 20…0.4%높음8.6
CVE-2026-91953FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in nego_send_negotiation_request()…0.4%높음7.1
CVE-2026-55209resdata is software for reading and writing result files from the Eclipse reservoir simulator. Prior to 6.2.9,…0.4%심각9.8
CVE-2026-48490ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform. A vulnera…0.4%보통6.9
CVE-2026-76695Buffer overflow vulnerabilities exist in the underlying operating system of HPE Networking EdgeConnect SD-WAN …0.4%보통6.5
CVE-2026-88775Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: be…0.4%높음8.8
CVE-2026-102296ZoneMinder before 1.38.4 contains static buffer overflow vulnerabilities in RemoteCameraHttp::GetResponse() th…0.4%높음8.3
CVE-2026-92006Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera…0.3%높음8.8
CVE-2026-28934A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, ma…0.3%보통6.5
CVE-2026-44756A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specifi…0.3%심각10.0
CVE-2026-76723Buffer overflow vulnerabilities exist in the affected interface of HPE Networking Instant ON APS that could al…0.3%심각9.6
CVE-2026-6730IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking. A loca…0.3%심각9.8
CVE-2026-58710In DecodeFilmGrainParams of film_grain_dec.cc, there is a possible out-of-bounds write due to a missing bounds…0.3%높음8.8
CVE-2026-55331In IP Multimedia Subsystem, there is a possible out-of-bounds write due to an incorrect bounds check. This cou…0.3%높음8.8
CVE-2026-92011Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera…0.3%높음8.8
CVE-2026-92009Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera…0.3%높음8.8
CVE-2026-92020Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component. This vulnerabi…0.3%높음8.8
CVE-2026-92012Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera…0.3%높음8.8
CVE-2026-92007Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera…0.3%높음8.8
CVE-2026-92013Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera…0.3%높음8.8
CVE-2026-92010Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera…0.3%높음8.8
CVE-2026-92008Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnera…0.3%높음8.8
CVE-2026-92043Privilege escalation due to incorrect boundary conditions in the Audio/Video component. This vulnerability was…0.3%높음8.8
CVE-2026-92014Privilege escalation due to incorrect boundary conditions in the Graphics component. This vulnerability was fi…0.3%높음8.8
CVE-2026-55343In decodeAmr of ImsMediaAudioPlayer.cpp, there is a possible out-of-bounds write due to a missing bounds check…0.2%높음8.0
CVE-2026-42808An issue was discovered in Bosch Sensortec COINES_SDK versions 2.0 through 2.11. The host streaming API functi…0.2%보통6.8
CVE-2026-81433A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon (fingerd) a…0.2%높음8.7
CVE-2026-84581A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, ma…0.2%높음8.4
CVE-2026-84489A buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.10 and iPadOS 1…0.2%보통5.5
CVE-2026-71613Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute a…0.1%높음7.8
CVE-2026-90801A security flaw has been discovered in GNU Binutils 2.47. This impacts the function cache_bwrite of the file b…0.1%낮음1.9
CVE-2021-43614Error in handling the PlatformLangCodes UEFI variable could cause a buffer overflow, leading to resource exhau…0.1%보통6.7
CVE-2026-90803A security vulnerability has been detected in GNU Binutils 2.47. Affected by this vulnerability is the functio…0.1%낮음1.9
CVE-2026-84632The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27…0.1%높음7.3
CVE-2023-24284Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the is_mark…0.1%낮음2.9
CVE-2023-24285Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is trigge…0.1%낮음2.9
CVE-2023-24291Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record …0.1%낮음2.9
CVE-2023-24287Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the "M" com…0.1%낮음2.9
CVE-2026-55277In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing…0.1%높음8.0
CVE-2026-90804A vulnerability was detected in GNU Binutils 2.47. Affected by this issue is the function _bfd_elf_write_secti…0.1%낮음0.9
CVE-2026-58695In gmc_phy_lp3_exit_restore_registers of phy_power.c, there is a possible escalation of privilege due to a mis…0.1%높음7.8
CVE-2026-56978In get_global_config_item_addr of gc.c, there is a possible out-of-bounds read due to a missing bounds check. …0.1%높음8.4
CVE-2026-55301In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check. This co…0.1%높음8.4
CVE-2023-24283Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which allows at…0.1%낮음2.9
CVE-2026-16726Buffer overflow vulnerability in Panasonic Industry USB Driver for MINAS A5/A6 allows attackers to stop Window…0.1%보통6.8
CVE-2023-24286Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game de…0.1%낮음2.9
CVE-2026-55285In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check…0.1%높음7.8
CVE-2026-58839In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This cou…0.1%높음7.8
CVE-2026-58823In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds …0.1%높음7.8
CVE-2026-0177In do_sss_aes_gcm_256_op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check…0.1%보통4.4
CVE-2026-56892In ReadDataElement of common.c, there is a possible information disclosure due to an incorrect bounds check. T…0.1%보통6.2
CVE-2023-40250Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Hancom HCell on Window…높음8.8
CVE-2018-3894An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP se…높음8.8
CVE-2018-3876An exploitable buffer overflow vulnerability exists in the credentials handler of video-core's HTTP server of …높음8.8
CVE-2018-3865An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP serve…높음8.8
CVE-2018-3864An exploitable buffer overflow vulnerability exists in the Samsung WifiScan handler of video-core's HTTP serve…높음8.8
CVE-2018-3897An exploitable buffer overflow vulnerabilities exist in the /cameras/XXXX/clips handler of video-core's HTTP s…높음8.8
CVE-2018-3896An exploitable buffer overflow vulnerabilities exist in the /cameras/XXXX/clips handler of video-core's HTTP s…높음8.8
CVE-2018-3895An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP se…높음8.8
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.