CWE-201 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-201 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
CVE-2026-54649punchin-email is a Cloudflare Email Worker that provides two-way role aliases while relaying mail to…0.8%낮음2.1CVE-2026-100258In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read proj…0.7%보통4.3CVE-2026-65812Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorize…0.5%보통6.8CVE-2026-78336Insertion of sensitive information into sent data vulnerability in Apache Syncope. Any authenticated…0.4%높음7.5CVE-2026-82837GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.1.8, 19.…0.4%보통5.3CVE-2026-103957Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allo…0.4%높음8.2CVE-2026-78374Joomla Extension - joomlart.com - Open mail relay via contact AJAX endpoint in T4 Page Builder exten…0.3%보통6.9CVE-2026-101322In Eclipse BaSyx AAS Web UI versions v2-241220 through releases before v2-260924, the shared request…0.3%높음8.3
전체 목록
32건
CVE-2026-63630BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, deserializeWorkflow() accep…0.3%낮음3.4
CVE-2026-97240Unauthenticated Sensitive Data Exposure in StifLi Backup Tools <= 2.2.7 versions.0.3%높음7.5
CVE-2026-87015Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 until 0.11.1…0.3%보통6.8
CVE-2026-86497In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project …0.3%보통6.8
CVE-2026-78303Joomla Extension - joomshaper.com - Unvalidated Email Destination & Form Manipulation in Booking Requests in S…0.3%보통6.9
CVE-2026-81804Unauthenticated Sensitive Data Exposure in ZHBackup – Backup, Restore & Migration <= 2.4.2 versions.0.2%높음7.5
CVE-2026-91198GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads ser…0.2%보통6.9
CVE-2026-86450Insertion of sensitive information into sent data vulnerability in Parla Auto Automotive Trading Limited Compa…0.2%높음7.5
CVE-2026-101043pnpm versions 11.0.0 before 11.11.0 and 10.7.0 before 10.34.5 expand ${VAR} environment-variable placeholders …0.2%높음8.3
CVE-2026-62088Insertion of Sensitive Information Into Sent Data vulnerability in 10up ElasticPress allows Retrieve Embedded …0.2%보통5.3
CVE-2026-85307Insertion of Sensitive Information Into Sent Data vulnerability in Kevin Pirnie KP Agent Ready allows Retrieve…0.2%보통5.3
CVE-2026-103280Ghost from version 0.8.0 before 6.23.0 contains an information disclosure vulnerability in its setup endpoint:…0.2%보통6.9
CVE-2026-103336Insertion of Sensitive Information Into Sent Data vulnerability in Smackcoders Inc. WP Ultimate CSV Importer w…0.2%보통5.3
CVE-2026-32584Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – …0.2%보통5.3
CVE-2026-62058Insertion of Sensitive Information Into Sent Data vulnerability in WPExperts CF7 Apps contact-form-7-honeypot …0.2%보통5.3
CVE-2026-103345Insertion of Sensitive Information Into Sent Data vulnerability in Shamim Rajani Pie Register pie-register all…0.2%보통5.3
CVE-2026-89332Inclusion of functionality from an untrusted control sphere in the Kiro Powers feature in Amazon Kiro IDE befo…0.2%보통6.7
CVE-2026-103281Ghost (npm package 'ghost') versions from 3.23.0 up to, but not including, 6.23.0 expose API keys to users wit…0.2%보통5.3
CVE-2026-86505In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Ma…0.1%낮음3.3
CVE-2026-104402Insertion of Sensitive Information Into Sent Data vulnerability in farvisun Mindio Magic MCP mindio-magic-mcp …보통4.3
CVE-2026-97307Insertion of Sensitive Information Into Sent Data vulnerability in StylemixThemes Cost Calculator Builder cost…높음7.5
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.