Remote Code Execution

⚔️ Attack Types Related 2,906
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,908

Image ID Title
CVE-2024-14010 OS Command Injection in Typora (CVE-2024-14010)
CVE-2025-36745 Vulnerability in Solaredge (CVE-2025-36745)
CVE-2025-26866 Unsafe Deserialization in Apache (CVE-2025-26866)
CVE-2025-67728 Command Injection in Fireshare facilitates self-hosted media (CVE-2025-67728)
CVE-2025-14166 Code Injection in WPMasterToolKit (WordPress plugin) (CVE-2025-14166)
CVE-2025-13320 Vulnerability in WP User Manager (WordPress plugin) (CVE-2025-13320)
CVE-2025-12968 Unrestricted File Upload in Infility Global (WordPress plugin) (CVE-2025-12968)
CVE-2025-12824 Path Traversal in Player Leaderboard (WordPress plugin) (CVE-2025-12824)
CVE-2025-34506 Unrestricted File Upload in WBCE CMS (CVE-2025-34506)
CVE-2024-58298 Unrestricted File Upload in Compuware iStrobe Web (CVE-2024-58298)
CVE-2024-58295 Unrestricted File Upload in ElkArte Forum (CVE-2024-58295)
CVE-2024-58286 OS Command Injection in dizqueTV (CVE-2024-58286)
CVE-2025-13780 Code Injection in pgadmin4 (CVE-2025-13780)
CVE-2025-36937 Out-of-Bounds Write in Google (CVE-2025-36937)
CVE-2025-44016 Vulnerability in Teamviewer Windows (CVE-2025-44016)
CVE-2025-66474 Vulnerability in XWiki Rendering (CVE-2025-66474)
CVE-2024-58282 Unrestricted File Upload in Serendipity (CVE-2024-58282)
CVE-2024-58283 Unrestricted File Upload in WBCE CMS (CVE-2024-58283)
CVE-2024-58279 Unrestricted File Upload in Apprain (CVE-2024-58279)
CVE-2024-58281 Unrestricted File Upload in Dotclear (CVE-2024-58281)
CVE-2025-65824 Vulnerability in Meatmeet (CVE-2025-65824)
CVE-2025-34392 Vulnerability in Barracuda (CVE-2025-34392)
CVE-2025-34393 Vulnerability in Barracuda (CVE-2025-34393)
CVE-2025-34394 Unsafe Deserialization in Barracuda (CVE-2025-34394)
CVE-2025-34395 Path Traversal in Barracuda (CVE-2025-34395)
CVE-2025-14390 Unrestricted File Upload in Video Merchant (WordPress plugin) (CVE-2025-14390)
CVE-2025-9571 Unsafe Deserialization in Google Cloud Data Fusion (CVE-2025-9571)
CVE-2025-67489 @vitejs/plugin-rs provides React Server Components (RSC) support for Vite. Versions 0.5.5 and below are vulnerable to…
CVE-2025-66214 Unsafe Deserialization in Wearefrank (CVE-2025-66214)
CVE-2025-66456 Vulnerability in Elysia (CVE-2025-66456)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details