Sign in Sign up
JA · EN · FR
SecPulse

Remote Code Execution

⚔️ Attack Types Related 2,906
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

Denial of Service8713 Cross-Site Scripting8075 SQL Injection3881 Path Traversal2053 Privilege Escalation1503 Cross-Site Request Forgery1068 Server-Side Request Forgery856 Authentication Bypass853 Insecure Deserialization739 Buffer Overflow77 Command Injection28 Use After Free20 Credential Leak14 Prototype Pollution7 Integer Overflow7

🛡 Vulnerabilities tagged with this 2,906

Image ID Title
CVE-2020-1064 Vulnerability in Microsoft Internet Explorer (CVE-2020-1064)
CVE-2020-1065 Out-of-Bounds Write in Microsoft Edge (CVE-2020-1065)
CVE-2020-1067 Buffer Overflow in Microsoft Windows 10 (CVE-2020-1067)
CVE-2020-1069 Buffer Overflow in Microsoft Sharepoint Server (CVE-2020-1069)
CVE-2020-0901 Buffer Overflow in Microsoft Office (CVE-2020-0901)
CVE-2020-1023 Unrestricted File Upload in Microsoft Sharepoint Server (CVE-2020-1023)
CVE-2020-1024 Unrestricted File Upload in Microsoft Sharepoint Server (CVE-2020-1024)
CVE-2020-1035 Buffer Overflow in Microsoft Internet Explorer (CVE-2020-1035)
CVE-2020-1037 Out-of-Bounds Write in Microsoft Edge (CVE-2020-1037)
CVE-2020-1051 Buffer Overflow in Microsoft Windows 10 (CVE-2020-1051)
CVE-2020-9484 Unsafe Deserialization in org.apache.tomcat:tomcat-catalina (CVE-2020-9484)
CVE-2020-6096 Vulnerability in GNU glibc (CVE-2020-6096)
CVE-2020-11111 Unsafe Deserialization in com.fasterxml.jackson.core:jackson-databind (CVE-2020-11111)
CVE-2020-11112 Unsafe Deserialization in com.fasterxml.jackson.core:jackson-databind (CVE-2020-11112)
CVE-2020-11113 Unsafe Deserialization in com.fasterxml.jackson.core:jackson-databind (CVE-2020-11113)
CVE-2020-10969 Unsafe Deserialization in com.fasterxml.jackson.core:jackson-databind (CVE-2020-10969)
CVE-2020-10968 Unsafe Deserialization in com.fasterxml.jackson.core:jackson-databind (CVE-2020-10968)
CVE-2020-10672 Unsafe Deserialization in com.fasterxml.jackson.core:jackson-databind (CVE-2020-10672)
CVE-2020-10673 Unsafe Deserialization in Oracle Weblogic Server (CVE-2020-10673)
CVE-2016-1000027 Unsafe Deserialization in Vmware Spring Framework (CVE-2016-1000027)
CVE-2019-12675 Vulnerability in Cisco Firepower Threat Defense (FTD) Software (CVE-2019-12675)
CVE-2019-14379 Vulnerability in Oracle Fasterxml (CVE-2019-14379)
CVE-2019-1068 KEV [KEV] Vulnerability in Microsoft SQL Server (CVE-2019-1068)
CVE-2019-12384 Unsafe Deserialization in FasterXML jackson-databind (CVE-2019-12384)
CVE-2017-14854 Buffer Overflow in Orpak (CVE-2017-14854)
CVE-2017-14853 Code Injection in Orpak (CVE-2017-14853)
CVE-2019-5018 Use-After-Free in Sqlite3 (CVE-2019-5018)
CVE-2019-7386 Vulnerability in Kaiostech (CVE-2019-7386)
CVE-2018-18861 Buffer Overflow in PCMan FTP Server (CVE-2018-18861)
CVE-2018-7160 Vulnerability in Nodejs (CVE-2018-7160)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details