Sign in Sign up
JA · EN · FR
SecPulse

Remote Code Execution

⚔️ Attack Types Related 2,906
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

Denial of Service8713 Cross-Site Scripting8075 SQL Injection3881 Path Traversal2053 Privilege Escalation1503 Cross-Site Request Forgery1068 Server-Side Request Forgery856 Authentication Bypass853 Insecure Deserialization739 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnerabilities tagged with this 2,908

Image ID Title
CVE-2022-41039 Vulnerability in Windows Point-to-Point Tunneling Protocol (CVE-2022-41039)
CVE-2022-41044 Vulnerability in Windows Point-to-Point Tunneling Protocol (CVE-2022-41044)
CVE-2022-41047 Vulnerability in Microsoft ODBC Driver (CVE-2022-41047)
CVE-2022-41048 Vulnerability in Microsoft ODBC Driver (CVE-2022-41048)
CVE-2022-41051 Vulnerability in Azure RTOS GUIX Studio (CVE-2022-41051)
CVE-2022-41052 Vulnerability in Windows Graphics Component (CVE-2022-41052)
CVE-2022-41128 KEV [KEV] Out-of-Bounds Write in Microsoft Windows (CVE-2022-41128)
CVE-2022-40048 Unrestricted File Upload in Flatpress (CVE-2022-40048)
CVE-2022-36534 Command Injection in Linux Syncovery (CVE-2022-36534)
CVE-2022-36532 Vulnerability in Bolt CMS (CVE-2022-36532)
CVE-2022-26258 KEV [KEV] OS Command Injection in D-Link DIR-820L (CVE-2022-26258)
CVE-2022-35201 Vulnerability in Tenda-AC18 (CVE-2022-35201)
CVE-2022-37042 KEV [KEV] Vulnerability in Synacor Zimbra Collaboration Suite (ZCS) (CVE-2022-37042)
CVE-2022-31673 Information Disclosure in Vmware Vrealize Operations (CVE-2022-31673)
CVE-2022-32224 Unsafe Deserialization in activerecord (CVE-2022-32224)
CVE-2022-24140 Vulnerability in Iobit (CVE-2022-24140)
CVE-2022-2274 Out-of-Bounds Write in Openssl (CVE-2022-2274)
CVE-2022-29499 KEV [KEV] Vulnerability in Mitel MiVoice Connect (CVE-2022-29499)
CVE-2022-24562 Vulnerability in IOBit IOTransfer (CVE-2022-24562)
CVE-2022-30168 Vulnerability in Microsoft Photos (CVE-2022-30168)
CVE-2021-42675 Unrestricted File Upload in Kreado Kreasfero (CVE-2021-42675)
CVE-2022-30190 KEV [KEV] Vulnerability in Microsoft Windows (CVE-2022-30190)
CVE-2022-30075 Vulnerability in Tp Link Archer Ax50 Firmware (CVE-2022-30075)
CVE-2022-27438 Vulnerability in Caphyon Ltd Advanced Installer (CVE-2022-27438)
CVE-2016-0034 KEV [KEV] Vulnerability in Microsoft Silverlight (CVE-2016-0034)
CVE-2021-41653 Code Injection in Tp Link Tl Wr840N Firmware (CVE-2021-41653)
CVE-2021-35504 Vulnerability in Afian FileRun (CVE-2021-35504)
CVE-2021-35505 Vulnerability in Afian FileRun (CVE-2021-35505)
CVE-2020-26678 Unrestricted File Upload in vFairs (CVE-2020-26678)
CVE-2021-21974 Out-of-Bounds Write in Vmware Esxi (CVE-2021-21974)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details