$_SecureScope악용 확인 · 악용 확률 · 한국어 권고
소개
CVE Ledger

CWE-80 관련 취약점

같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.

원장 17,280건이 중 악용 확인 1,734건분류: CWE-80
우선순위순최신 공개순CWE-787 276CWE-78 202CWE-416 189CWE-22 163CWE-502 120CWE-94 119CWE-20 96CWE-119 94CWE-306 81CWE-843 79

CWE-80 — 주요 취약점

악용이 확인된 것을 먼저 보여줍니다.

6.1ROCWE-79● 실제 악용이 확인됨CVE-2020-13965Roundcube · WebmailAn issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS via …76.6%보통6.16.1QNCWE-79● 랜섬웨어 캠페인에 사용됨CVE-2018-19953QNAP · Network Attached Storage (NAS)If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicio…28.8%보통6.15.4QNCWE-79● 랜섬웨어 캠페인에 사용됨CVE-2018-19943QNAP · Network Attached Storage (NAS)If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicio…21.5%보통5.46.125CWE-80CVE-2026-52774YesWiki is a wiki system written in PHP. Prior to version 4.6.6, YesWiki's Bazar widget handler refl…0.5%보통6.16.125CWE-80CVE-2026-52773YesWiki is a wiki system written in PHP. From version 4.1.0 to before version 4.6.6, YesWiki's archi…0.5%보통6.17.026CWE-80CVE-2026-68919GoCD is a continuous deliver server. From 13.3.0 until 26.1.0, GoCD does not correctly encode and es…0.5%높음7.07.525CWE-80CVE-2026-52741GoCD is a continuous deliver server. From 18.3.0 until 26.1.0, GoCD can generate unescaped tracking-…0.4%높음7.59.329CWE-80CVE-2026-91130Home Assistant is open source home automation software focused on local control and privacy. Prior t…0.4%심각9.3

전체 목록

22건

CVE-2026-103444Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia F…0.3%낮음1.1
CVE-2026-103445Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia F…0.3%낮음1.2
CVE-2026-103585Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia F…0.3%낮음1.2
CVE-2026-103437Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia F…0.3%낮음1.1
CVE-2026-12751IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject maliciou…0.3%보통5.4
CVE-2026-103584Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia F…0.3%낮음1.1
CVE-2026-57440The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser t…0.3%높음7.5
CVE-2026-54503plone.app.textfield provides a zope.schema-style field type called RichText for storing a value with a related…0.2%보통4.3
CVE-2026-63216Zammad is a web based open source helpdesk/customer support system. Prior to 7.1.2, unsanitized option labels …0.2%보통5.3
CVE-2026-27085Shop manager Content Injection in Astra WordPress Theme <= 4.13.12 versions.0.2%낮음2.7
CVE-2026-102279Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APP_D…0.2%낮음3.1
CVE-2026-103443Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia F…0.2%낮음1.1
CVE-2026-103439Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia F…0.1%낮음0.3
CVE-2026-103438Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in The Wikimedia F…0.1%낮음0.3
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.