https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2024-73<\/span>99<\/span><\/a><\/span><\/p>","cb_filename":"","cb_filepath":"","cb_file_seq":null,"cb_regdate":"2025-05-08 01:47:32","cb_use_flag":"0","cb_admin_id":"ikmet147","cb_admin_name":"\uc774\ucc3d\uc218","cb_readcount":"0"},{"cb_seq":"3791","cb_code":"2","cb_notice":"0","cb_title":"\u7f8e CISA \ubc1c\ud45c \uc8fc\uc694 Exploit \uc815\ubcf4\uacf5\uc720(Update. 2025-05-06)","cb_contents":"\ud604\uc7ac \uc790\uc8fc \uc545\uc6a9\ub418\uace0 \uc788\ub294 \ucde8\uc57d\uc810 \ubaa9\ub85d\uc73c\ub85c, \ucde8\uc57d\ud55c \ubc84\uc804\uc758 SW\ub97c \uc0ac\uc6a9 \uc911\uc778 \uacbd\uc6b0 \uae34\uae09 \ud328\uce58\ub97c \uad8c\uace0 \ub4dc\ub9bd\ub2c8\ub2e4.<\/span>
* \ucc38\uc870 \ub9c1\ud06c : <\/span>https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog<\/a><\/a><\/p>cveID<\/th> | vendorProject<\/th> | vulnerabilityName<\/th> | dateAdded<\/th> | shortDescription<\/th> | requiredAction<\/th> | dueDate<\/th><\/tr> |
---|
CVE-2025-27363<\/th> | FreeType<\/th> | FreeType Out-of-Bounds Write Vulnerability<\/th> | 2025-05-06<\/th> | FreeType contains an out-of-bounds write vulnerability when attempting to parse font subglyph structures related to TrueType GX and variable font files that may allow for arbitrary code execution.<\/th> | Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.<\/th> | 2025-05-27<\/th><\/tr><\/tbody><\/table>","cb_filename":"","cb_filepath":"","cb_file_seq":null,"cb_regdate":"2025-05-08 01:46:46","cb_use_flag":"0","cb_admin_id":"ikmet147","cb_admin_name":"\uc774\ucc3d\uc218","cb_readcount":"0"},{"cb_seq":"3789","cb_code":"2","cb_notice":"0","cb_title":"\u7f8e CISA \ubc1c\ud45c \uc8fc\uc694 Exploit \uc815\ubcf4\uacf5\uc720(Update. 2025-05-05)","cb_contents":"\u7f8e CISA \ubc1c\ud45c \uc8fc\uc694 Exploit \uc815\ubcf4\uacf5\uc720(Update. 2025-05-05)2025-05-05<\/span><\/td><\/tr><\/colgroup>\ud604\uc7ac \uc790\uc8fc \uc545\uc6a9\ub418\uace0 \uc788\ub294 \ucde8\uc57d\uc810 \ubaa9\ub85d\uc73c\ub85c, \ucde8\uc57d\ud55c \ubc84\uc804\uc758 SW\ub97c \uc0ac\uc6a9 \uc911\uc778 \uacbd\uc6b0 \uae34\uae09 \ud328\uce58\ub97c \uad8c\uace0 \ub4dc\ub9bd\ub2c8\ub2e4. * \ucc38\uc870 \ub9c1\ud06c : https:\/\/www.cisa.gov\/known-exploited-vulnerabilities-catalog<\/a>
cveID<\/th> | vendorProject<\/th> | vulnerabilityName<\/th> | dateAdded<\/th> | shortDescription<\/th> | requiredAction<\/th> | dueDate<\/th><\/tr> |
---|
CVE-2025-3248<\/th> | Langflow<\/th> | Langflow Missing Authentication Vulnerability<\/th> | 2025-05-05<\/th> | Langflow contains a missing authentication vulnerability in the \/api\/v1\/validate\/code endpoint that allows a remote, unauthenticated attacker to execute arbitrary code via crafted HTTP requests.<\/th> | Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.<\/th> | 2025-05-26<\/th><\/tr><\/tbody><\/table><\/td><\/tr><\/tbody><\/table><\/td><\/tr><\/tbody><\/table>\ucd9c\ucc98 \uc0ac\uc774\ud2b8 : |
---|
| | |
|
---|