Remote Code Execution

⚔️ Attack Types Related 2,906
slug: rce

Explanation

RCE (Remote Code Execution) は「攻撃者が遠隔から、サーバー上で任意のプログラムを実行できる」最も深刻な脆弱性です。 これが成立すると、サーバー全体が乗っ取られ、データ全削除・暗号通貨マイニング・ランサムウェア感染・他社攻撃の踏み台化など何でもされます。 セキュリティ業界では「最悪レベル」「最優先で塞ぐべき」と扱われます。
📌 Example
Log4Shell (CVE-2021-44228), Heartbleed (CVE-2014-0160) の後継 OpenSSL系, MOVEit Transfer (CVE-2023-34362) など。被害規模は数千億円〜兆円単位。

🔖 Related tags

🛡 Vulnerabilities tagged with this 2,908

Image ID Title
CVE-2025-63258 A remote command execution (RCE) vulnerability was discovered in all H3C ERG3/ERG5 series routers and XiaoBei series…
CVE-2025-62519 SQL Injection in phpMyFAQ (CVE-2025-62519)
CVE-2025-12089 Path Traversal in Data Tables Generator by Supsystic (WordPress plugin) (CVE-2025-12089)
CVE-2025-12092 Path Traversal in CYAN Backup (WordPress plugin) (CVE-2025-12092)
CVE-2025-12399 Unrestricted File Upload in Alex Reservations: Smart Restaurant Booking (WordPress plugin) (CVE-2025-12399)
CVE-2025-11967 Unrestricted File Upload in Mail Mint (WordPress plugin) (CVE-2025-11967)
CVE-2025-12161 Unrestricted File Upload in Smart Auto Upload Images (WordPress plugin) (CVE-2025-12161)
CVE-2025-12000 Path Traversal in WPFunnels (WordPress plugin) (CVE-2025-12000)
CVE-2025-12486 Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote…
CVE-2025-12490 Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote…
CVE-2025-48593 Use-After-Free in platform/packages/modules/Bluetooth (CVE-2025-48593)
CVE-2025-7846 Vulnerability in WordPress User Extra Fields (WordPress plugin) (CVE-2025-7846)
CVE-2025-48983 Vulnerability in Veeam Backup & Replication (CVE-2025-48983)
CVE-2025-48984 Code Injection in Veeam Backup Replication (CVE-2025-48984)
CVE-2025-34280 OS Command Injection in Nagios Network Analyzer (CVE-2025-34280)
CVE-2025-34286 OS Command Injection in Nagios Xi (CVE-2025-34286)
CVE-2025-34134 OS Command Injection in Nagios Xi (CVE-2025-34134)
CVE-2024-14003 OS Command Injection in Nagios Xi (CVE-2024-14003)
CVE-2020-36863 Nagios XI versions prior to 5.7.2 allow PHP files to be uploaded to the Audio Import directory and executed from that location. The upload handler did not properly restrict file types or enforce stora...
CVE-2018-25122 Nagios XI versions prior to 5.4.13 contain a remote code execution vulnerability in the Component Download page. The download/import handler used unsafe command construction with attacker-controlled i...
CVE-2025-11463 Vulnerability in Ashlar (CVE-2025-11463)
CVE-2025-11464 Vulnerability in Ashlar (CVE-2025-11464)
CVE-2025-11465 Use-After-Free in Ashlar (CVE-2025-11465)
CVE-2025-64140 OS Command Injection in Jenkins (CVE-2025-64140)
CVE-2025-62368 Unsafe Deserialization in Taiga (CVE-2025-62368)
CVE-2025-56399 Code Injection in Laravel (CVE-2025-56399)
CVE-2025-55752 Vulnerability in org.apache.tomcat:tomcat (CVE-2025-55752)
CVE-2025-34292 Rox, the software running BeWelcome, contains a PHP object injection vulnerability resulting from deserialization of…
CVE-2025-10488 Path Traversal in WordPress (CVE-2025-10488)
CVE-2025-11889 Unrestricted File Upload in AIO Forms – Craft Complex Forms Easily (WordPress plugin) (CVE-2025-11889)

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details