CWE-697 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-697 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2024-5217ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC,…99.6%심각9.2● 실제 악용이 확인됨CVE-2020-5849Unraid 6.8.0 allows authentication bypass.93.2%높음7.5CVE-2026-61795Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.7, host…0.6%보통6.8CVE-2026-71855Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M…0.5%보통5.9CVE-2026-93957A vulnerability has been found in olivier-ls PHP-FTS up to 1.1.3. This affects the function SearchEn…0.5%낮음2.1CVE-2026-73309XenForo before 2.3.13 contains an authentication bypass vulnerability in the OAuth2 token endpoint t…0.5%심각9.1CVE-2026-64836ICEcoder versions through 8.1 contain a path traversal vulnerability in the file-control endpoint du…0.4%높음8.7CVE-2026-57222Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security M…0.4%보통5.3
전체 목록
23건
CVE-2026-56101OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211_michael_mic_failu…0.4%보통6.0
CVE-2026-79913Cloudreve is a self-hosted file management and sharing system. Prior to 4.18.0, the ValidateExternalURL server…0.4%보통6.5
CVE-2026-101913ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.5.1, t…0.4%보통6.3
CVE-2026-92087@fastify/auth is a Fastify plugin that composes multiple authentication and authorization strategies into a si…0.4%높음8.1
CVE-2026-90977The Clean Login WordPress plugin before 1.19 does not verify its registration CAPTCHA when the stored session …0.4%보통5.3
CVE-2026-101912ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, t…0.4%보통6.3
CVE-2026-49846libks provides foundational support for signalwire C products. Prior to version 2.0.11, `clean_uri()` in libks…0.3%높음7.5
CVE-2026-91997evolution-api through 2.3.7 contains an incorrect array comparison in the metricsIPWhitelist middleware that a…0.3%보통6.9
CVE-2026-20333As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Sec…0.3%높음8.8
CVE-2026-61672Capsule is a multi-tenancy and policy-based framework for Kubernetes. Prior to 0.13.7, ForbiddenListSpec.Exact…0.3%높음7.1
CVE-2026-92395@fastify/proxy-addr is a Fastify plugin that determines a request's client address behind trusted reverse prox…0.3%심각9.1
CVE-2026-91851Affected versions of MISP incorrectly filter dashboard templates that are restricted to a specific permission …0.3%보통5.3
CVE-2026-85292InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1…0.3%보통4.8
CVE-2026-90711proxy-addr is a Node.js module that determines a request's client address behind trusted reverse proxies, and …0.2%심각9.1
CVE-2026-71892In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients, org.bou…0.2%보통6.9
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.