Sign in Sign up
JA · EN · FR
SecPulse

Cwe 94

🧬 CWE Related 1,871
slug: cwe-94

Explanation

CWE-94は「攻撃者が送ったデータが、プログラムコードとして解釈・実行されてしまう」欠陥です。 Pythonの `eval()`・PHPの `eval()`/`include()` にユーザー入力を渡すような実装が典型例です。 リモートコード実行 (RCE) の直接的な原因となるため、最も重大なクラスの脆弱性です。
📌 Example
Log4Shell (CVE-2021-44228) はLog4jのJNDI Lookupを悪用したコードインジェクションで、世界中のJavaサーバーが数日でハッキングされた。
🔗 Related links

🔖 Related tags

Cwe 798692 Cwe 894154 Cwe 8624040 Cwe 2844030 Cwe 4163898 Cwe 1193185 Cwe 2003145 Cwe 1253116 Cwe 202857 Cwe 222773 Cwe 7872520 Cwe 782028 Cwe 8631869 Cwe 1221801 Cwe 741796

🛡 Vulnerabilities tagged with this 1,874

Image ID Title
CVE-2026-5760 Code Injection in Lmsys (CVE-2026-5760)
CVE-2026-48962 IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an...
CVE-2026-9608 Cross-Site Scripting (XSS) in QianFox FoxCMS (CVE-2026-9608)
CVE-2026-44632 Code Injection in org.yamcs:yamcs-core (CVE-2026-44632)
CVE-2026-43945 Code Injection in @frangoteam/fuxa (CVE-2026-43945)
CVE-2026-9568 Vulnerability in ThingsBoard (CVE-2026-9568)
CVE-2026-9170 Code Injection in Ibm Http Server (CVE-2026-9170)
CVE-2026-9566 Cross-Site Scripting (XSS) in teableio teable (CVE-2026-9566)
CVE-2026-8633 Code Injection in Ibm Web Server Plug-ins (CVE-2026-8633)
CVE-2026-8855 Code Injection in Ibm Http Server (CVE-2026-8855)
CVE-2026-9564 A vulnerability was found in SourceCodester/oretnom23 Hospitals Patient Records Management System...
CVE-2026-42785 Code Injection in OpenKM (CVE-2026-42785)
CVE-2026-9519 Cross-Site Scripting (XSS) in stonith404 pingvin-share (CVE-2026-9519)
CVE-2026-9518 Cross-Site Scripting (XSS) in hemant6488 CodeIgniter-StudentManagementSystem (CVE-2026-9518)
CVE-2026-9527 Cross-Site Scripting (XSS) in itsourcecode Electronic Judging System (CVE-2026-9527)
CVE-2026-9520 Cross-Site Scripting (XSS) in blitz (CVE-2026-9520)
CVE-2026-24937 Code Injection in Broadcast Live Video (CVE-2026-24937)
CVE-2026-9485 Cross-Site Scripting (XSS) in SourceCodester Student Grades Management System (CVE-2026-9485)
CVE-2026-9471 Cross-Site Scripting (XSS) in yashpokharna2555 StudentManagementSystem (CVE-2026-9471)
CVE-2026-9448 Cross-Site Scripting (XSS) in code-projects Employee Management System (CVE-2026-9448)
CVE-2026-9418 Cross-Site Scripting (XSS) in code-projects Employee Management System (CVE-2026-9418)
CVE-2026-9419 Cross-Site Scripting (XSS) in code-projects Employee Management System (CVE-2026-9419)
CVE-2026-9417 Cross-Site Scripting (XSS) in code-projects Employee Management System (CVE-2026-9417)
CVE-2026-9416 Cross-Site Scripting (XSS) in code-projects Employee Management System (CVE-2026-9416)
CVE-2026-9413 Cross-Site Scripting (XSS) in SourceCodester Indian Invoicing System (CVE-2026-9413)
CVE-2026-9415 Cross-Site Scripting (XSS) in code-projects Employee Management System (CVE-2026-9415)
CVE-2026-9414 Cross-Site Scripting (XSS) in SourceCodester Indian Invoicing System (CVE-2026-9414)
CVE-2026-9377 Cross-Site Scripting (XSS) in SourceCodester SUP Online Shopping (CVE-2026-9377)
CVE-2026-9357 Cross-Site Scripting (XSS) in vBulletin (CVE-2026-9357)
CVE-2018-25357 Code Injection in dolibarr/dolibarr (CVE-2018-25357)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details