메뉴열기
메뉴열기
취약점 소개
신고포상제
취약점 신고/조회
기업 및 기관
취약점 정보 공유
알림마당
로그인
Home > 취약점 정보 공유 > 보안공지
보안공지

목록

조회수 : 7,757


美 CISA 발표 주요 Exploit 정보공유(Update. 2025-10-02)2025-10-02
현재 자주 악용되고 있는 취약점 목록으로, 취약한 버전의 SW를 사용 중인 경우 긴급 패치를 권고 드립니다.
* 참조 링크 : https://www.cisa.gov/known-exploited-vulnerabilities-catalog

cveIDvendorProjectvulnerabilityNamedateAddedshortDescriptionrequiredActiondueDate
CVE-2025-4008SmartbeddedSmartbedded Meteobridge Command Injection Vulnerability2025-10-02Smartbedded Meteobridge contains a command injection vulnerability that could allow remote unauthenticated attackers to gain arbitrary command execution with elevated privileges (root) on affected devices.Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.2025-10-23
CVE-2025-21043SamsungSamsung Mobile Devices Out-of-Bounds Write Vulnerability2025-10-02Samsung mobile devices contain an out-of-bounds write vulnerability in libimagecodec.quram.so which allows remote attackers to execute arbitrary code.Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.2025-10-23
CVE-2015-7755JuniperJuniper ScreenOS Improper Authentication Vulnerability2025-10-02Juniper ScreenOS contains an improper authentication vulnerability that could allow unauthorized remote administrative access to the device.Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.2025-10-23
CVE-2017-1000353JenkinsJenkins Remote Code Execution Vulnerability2025-10-02Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java SignedObject object to the remoting-based Jenkins CLI, that would be deserialized using a new ObjectInputStream, bypassing the existing blocklist-based protection mechanism.Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.2025-10-23
CVE-2014-6278GNUGNU Bash OS Command Injection Vulnerability2025-10-02GNU Bash contains an OS command injection vulnerability which allows remote attackers to execute arbitrary commands via a crafted environment.Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. 2025-10-23
출처 사이트 : https://www.cisa.gov/known-exploited-vulnerabilities-catalog