Sign in Sign up
JA · EN · FR
SecPulse

Remote Code Execution

⚔️ Attack Types Related 2,906
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

Denial of Service8713 Cross-Site Scripting8075 SQL Injection3881 Path Traversal2053 Privilege Escalation1503 Cross-Site Request Forgery1068 Server-Side Request Forgery856 Authentication Bypass853 Insecure Deserialization739 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnerabilities tagged with this 2,908

Image ID Title
CVE-2025-34163 Unrestricted File Upload in Dongsheng Logistics Software (CVE-2025-34163)
CVE-2024-13981 LiveBOS, an object-oriented business architecture middleware suite developed by Apex Software Co., Ltd., contains an…
CVE-2024-13984 Path Traversal in QiAnXin TianQing Management Center (CVE-2024-13984)
CVE-2023-7309 Path Traversal in Dahua Smart Park Integrated Management Platform (CVE-2023-7309)
CVE-2025-34159 Vulnerability in Coolify (CVE-2025-34159)
CVE-2025-34161 Vulnerability in Coolify (CVE-2025-34161)
CVE-2025-71344 Unsafe Deserialization in picklescan (CVE-2025-71344)
CVE-2025-71361 Vulnerability in picklescan (CVE-2025-71361)
CVE-2012-10060 Vulnerability in Sysax Multi Server (CVE-2012-10060)
CVE-2012-10047 SQL Injection in Cyclope Employee Surveillance Solution (CVE-2012-10047)
CVE-2025-51056 Unrestricted File Upload in Vedo Suite (CVE-2025-51056)
CVE-2012-10027 Unrestricted File Upload in WP-Property plugin for WordPress (CVE-2012-10027)
CVE-2025-29534 OS Command Injection in PowerStick Wave Dual-Band Wifi Extender (CVE-2025-29534)
CVE-2016-15044 Code Injection in Kaltura (CVE-2016-15044)
CVE-2015-10138 Unrestricted File Upload in Work The Flow File Upload (WordPress plugin) (CVE-2015-10138)
CVE-2025-53867 Code Injection in Island Lake WebBatch (CVE-2025-53867)
CVE-2025-34088 OS Command Injection in Pandora FMS (CVE-2025-34088)
CVE-2025-34086 Code Injection in Bolt CMS (CVE-2025-34086)
CVE-2025-23172 SSRF (Server-Side Request Forgery) in Versa Networks (CVE-2025-23172)
CVE-2025-23173 Information Disclosure in Versa Networks (CVE-2025-23173)
CVE-2025-34025 Vulnerability in Concerto (CVE-2025-34025)
CVE-2025-34027 Vulnerability in Concerto (CVE-2025-34027)
CVE-2025-0520 Unrestricted File Upload in ShowDoc (CVE-2025-0520)
CVE-2025-2251 Unsafe Deserialization in WildFly (CVE-2025-2251)
CVE-2025-22457 KEV [KEV] Vulnerability in Ivanti Connect Secure, Policy Secure, and ZTA Gateways (CVE-2025-22457)
CVE-2024-48248 KEV [KEV] Vulnerability in NAKIVO Backup and Replication (CVE-2024-48248)
CVE-2025-25802 Command Injection in SeaCMS (CVE-2025-25802)
CVE-2025-25813 Command Injection in SeaCMS (CVE-2025-25813)
CVE-2025-25792 Command Injection in SeaCMS (CVE-2025-25792)
CVE-2025-25793 Command Injection in SeaCMS (CVE-2025-25793)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details