Sign in Sign up
JA · EN · FR
SecPulse

Remote Code Execution

⚔️ Attack Types Related 19
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

Denial of Service85 Cross-Site Scripting27 SQL Injection23 Server-Side Request Forgery17 Path Traversal14 Privilege Escalation7 Authentication Bypass4 Insecure Deserialization4 Cross-Site Request Forgery1

🛡 Vulnerabilities tagged with this 1,235

ID Title
CVE-2024-26257 Microsoft Excel Remote Code Execution Vulnerability
CVE-2024-20673 Microsoft Office Remote Code Execution Vulnerability
CVE-2024-23054 Vulnerability in plone (CVE-2024-23054)
CVE-2024-22899 Code Injection in vinchin (CVE-2024-22899)
CVE-2024-22900 Command Injection in vinchin (CVE-2024-22900)
CVE-2024-22903 Command Injection in vinchin (CVE-2024-22903)
CVE-2024-23055 Vulnerability in plone (CVE-2024-23055)
CVE-2023-40547 Out-of-Bounds Write in redhat (CVE-2023-40547)
CVE-2023-50651 OS Command Injection in totolink (CVE-2023-50651)
CVE-2023-46987 Code Injection in seacms (CVE-2023-46987)
CVE-2023-6377 Out-of-Bounds Read in privilege-escalation (CVE-2023-6377)
CVE-2023-45199 Vulnerability in trustedfirmware (CVE-2023-45199)
CVE-2023-43234 Code Injection in dedebiz (CVE-2023-43234)
CVE-2023-37679 Command Injection in nextgen (CVE-2023-37679)
CVE-2023-34552 Out-of-Bounds Write in c (CVE-2023-34552)
CVE-2023-34551 Out-of-Bounds Write in c (CVE-2023-34551)
CVE-2023-34842 Code Injection in dedecms (CVE-2023-34842)
CVE-2023-33161 Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-33149 Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2023-33152 Microsoft ActiveX Remote Code Execution Vulnerability
CVE-2023-33153 Microsoft Outlook Remote Code Execution Vulnerability
CVE-2023-33158 Microsoft Excel Remote Code Execution Vulnerability
CVE-2023-35175 SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-35175)
CVE-2022-47879 Code Injection in jedox (CVE-2022-47879)
CVE-2023-27973 Out-of-Bounds Write in hp (CVE-2023-27973)
CVE-2023-27972 Vulnerability in hp (CVE-2023-27972)
CVE-2023-30404 Code Injection in aigital (CVE-2023-30404)
CVE-2023-25261 Code Injection in stimulsoft (CVE-2023-25261)
CVE-2022-45701 Command Injection in commscope (CVE-2022-45701)
CVE-2023-25136 Vulnerability in openbsd (CVE-2023-25136)

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →