Cwe 94

🧬 CWE Related 1,870

slug: cwe-94

Explanation

CWE-94は「攻撃者が送ったデータが、プログラムコードとして解釈・実行されてしまう」欠陥です。 Pythonの `eval()`・PHPの `eval()`/`include()` にユーザー入力を渡すような実装が典型例です。リモートコード実行 (RCE) の直接的な原因となるため、最も重大なクラスの脆弱性です。

📌 Example

Log4Shell (CVE-2021-44228) はLog4jのJNDI Lookupを悪用したコードインジェクションで、世界中のJavaサーバーが数日でハッキングされた。

🔗 Related links

MITRE CWE-94 公式ページ ↗

🔖 Related tags

Cwe 798678 Cwe 894152 Cwe 8624031 Cwe 2844027 Cwe 4163896 Cwe 1193182 Cwe 2003138 Cwe 1253115 Cwe 202856 Cwe 222769 Cwe 7872517 Cwe 782021 Cwe 8631865 Cwe 1221799 Cwe 741796

🛡 Vulnerabilities tagged with this 1,871

ID	Title	Severity	Detected
CVE-2026-97650	Cross-Site Scripting (XSS) in ningzichun student-management-system (CVE-2026-97650)	Medium	3 weeks ago
CVE-2026-97322	Cross-Site Scripting (XSS) in YunaiV/zhijiantianya ruoyi-vue-pro (CVE-2026-97322)	Medium	3 weeks ago
CVE-2026-97233	Cross-Site Scripting (XSS) in volotat Anagnorisis (CVE-2026-97233)	Low	3 weeks ago
CVE-2026-97225	Vulnerability in DbGate (CVE-2026-97225)	Medium	3 weeks ago
CVE-2026-96750	MongoDB Compass can interpolate a database name without escaping into the initial input of its...	High	3 weeks ago
CVE-2026-97224	Cross-Site Scripting (XSS) in Excalidraw (CVE-2026-97224)	Medium	3 weeks ago
CVE-2026-51997	An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary...	High	3 weeks ago
CVE-2026-14780	Code Injection in PaperCut NG/MF platform's device-scripting functionality (CVE-2026-14780)		3 weeks ago
CVE-2026-96810	Cross-Site Scripting (XSS) in huanzi-qch base-admin (CVE-2026-96810)	Low	3 weeks ago
CVE-2026-96739	Cross-Site Scripting (XSS) in SEMCMS (CVE-2026-96739)	Medium	3 weeks ago
CVE-2026-77602	Code Injection in openc3 (CVE-2026-77602)	Critical	3 weeks ago
CVE-2026-96759	Code Injection in orval (CVE-2026-96759)	Critical	3 weeks ago
CVE-2026-96758	orval @orval/core before 8.28.0 contains a code injection vulnerability in the form-data...	Critical	3 weeks ago
CVE-2026-96757	Code Injection in orval (CVE-2026-96757)	Critical	3 weeks ago
CVE-2026-96756	Code Injection in orval (CVE-2026-96756)	High	3 weeks ago
CVE-2026-96754	Code Injection in orval (CVE-2026-96754)	Critical	3 weeks ago
CVE-2026-96755	Code Injection in orval (CVE-2026-96755)	Critical	3 weeks ago
CVE-2026-79310	webpy web.py 0.76 is vulnerable to server-side template injection (SSTI). The template engine can...	High	3 weeks ago
CVE-2026-96442	A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode...	High	3 weeks ago
CVE-2026-75799	Code Injection in YAHMAN Add-ons (WordPress plugin) (CVE-2026-75799)	Critical	3 weeks ago
CVE-2026-96258	Cross-Site Scripting (XSS) in onSite internet GmbH Auktion NG Auktionssoftware (CVE-2026-96258)	Medium	3 weeks ago
CVE-2026-95957	A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0....	Medium	3 weeks ago
CVE-2026-18162	Code Injection in Ibm Financial Transaction Manager (CVE-2026-18162)	Critical	3 weeks ago
CVE-2026-95657	Cross-Site Scripting (XSS) in dgtlmoon Changedetection.io (CVE-2026-95657)	Low	3 weeks ago
CVE-2026-89275	Code Injection in Adobe Windows (CVE-2026-89275)	Critical	3 weeks ago
CVE-2026-89276	Code Injection in Adobe Windows (CVE-2026-89276)	Critical	3 weeks ago
CVE-2026-84412	Code Injection in Adobe Windows (CVE-2026-84412)	Critical	3 weeks ago
CVE-2026-77271	Path Traversal in mcp-atlassian (CVE-2026-77271)	High	3 weeks ago
CVE-2026-75721	Code Injection in Adobe Windows (CVE-2026-75721)	Critical	3 weeks ago
CVE-2026-73369	Code Injection in Adobe Windows (CVE-2026-73369)	Critical	3 weeks ago

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details