Remote Code Execution

⚔️ Attack Types Related 2,906
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,908

Image ID Title
CVE-2025-6440 Unrestricted File Upload in WooCommerce Designer Pro (WordPress plugin) (CVE-2025-6440)
CVE-2025-54236 KEV [KEV] Vulnerability in Adobe commerce (CVE-2025-54236)
CVE-2025-10639 The WorkExaminer Professional server installation comes with an FTP server that is used to receive the client logs on…
CVE-2025-62429 Code Injection in Oxygenz (CVE-2025-62429)
CVE-2025-9890 Cross-Site Request Forgery (CSRF) in Theme Editor (WordPress plugin) (CVE-2025-9890)
CVE-2025-11391 Unrestricted File Upload in WordPress (CVE-2025-11391)
CVE-2025-62515 Unsafe Deserialization in pyquokka (CVE-2025-62515)
CVE-2025-57567 Code Injection in PluXml CMS theme editor (CVE-2025-57567)
CVE-2025-60641 The file mexcel.php in the Vfront 0.99.52 codebase contains a vulnerable call to…
CVE-2025-10706 Vulnerability in Classified Pro (WordPress theme) (CVE-2025-10706)
CVE-2025-62381 sveltekit-superforms makes SvelteKit forms a pleasure to use. sveltekit-superforms v2.27.3 and prior are susceptible to…
CVE-2025-10754 Unrestricted File Upload in DocoDoco Store Locator (WordPress plugin) (CVE-2025-10754)
CVE-2025-10041 Unrestricted File Upload in Flex QR Code Generator (WordPress plugin) (CVE-2025-10041)
CVE-2025-10051 Unrestricted File Upload in Demo Import Kit (WordPress plugin) (CVE-2025-10051)
CVE-2025-61678 Unrestricted File Upload in FreePBX Endpoint Manager (CVE-2025-61678)
CVE-2025-34267 Command Injection in Flowise (CVE-2025-34267)
CVE-2025-11548 A remote, unauthenticated privilege escalation in ibi WebFOCUS allows an attacker to gain administrative access to the…
CVE-2025-10242 OS Command Injection in Ivanti Endpoint Manager Mobile (CVE-2025-10242)
CVE-2025-10243 OS Command Injection in Ivanti Endpoint Manager Mobile (CVE-2025-10243)
CVE-2025-10985 OS Command Injection in Ivanti Endpoint Manager Mobile (CVE-2025-10985)
CVE-2025-46581 Code Injection in ZTE ZXCDN (CVE-2025-46581)
CVE-2025-9713 Path Traversal in Ivanti Endpoint Manager (CVE-2025-9713)
CVE-2025-31998 Vulnerability in HCL Unica Centralized Offer Management (CVE-2025-31998)
CVE-2025-6439 Path Traversal in WooCommerce Designer Pro (WordPress plugin) (CVE-2025-6439)
CVE-2025-6553 Unrestricted File Upload in Ovatheme Events Manager (WordPress plugin) (CVE-2025-6553)
CVE-2025-61927 Happy DOM is a JavaScript implementation of a web browser without its graphical user interface. Happy DOM v19 and lower…
CVE-2025-10284 Path Traversal in bbot (CVE-2025-10284)
CVE-2025-11539 Code Injection in grafana-image-renderer (CVE-2025-11539)
CVE-2025-7526 Path Traversal in WordPress (CVE-2025-7526)
CVE-2025-10353 File upload leading to remote code execution (RCE) in the “melis-cms-slider” module of Melis Technology's Melis…

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details