Weaknesses of type CWE-124

38 results

Execução de código ou comandos não autorizados

É uma fraqueza onde o software permite que um atacante execute código ou comandos arbitrários com privilégios que ele não deveria ter. Ocorre quando não há validação adequada de entrada, controle de acesso falho ou uso inseguro de funções perigosas (como eval, system, exec). O risco é crítico: comprometimento total do sistema.

Example

Uma aplicação web que recebe um parâmetro de entrada e o passa diretamente para system() ou eval() sem sanitizar: um atacante injeta um comando shell malicioso no parâmetro e consegue executar operações no servidor com os mesmos privilégios da aplicação.

How to mitigate

Valide e sanitize toda entrada de usuário antes de usá-la em operações sensíveis; evite funções perigosas como eval() e system() quando possível; implemente lista branca de comandos/funções permitidas; use contexto de execução restrito (sandbox, contenedor) e aplique princípio do menor privilégio na aplicação.

CVE-2015-2426HIGHBuffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, EPSS 86.7%KEVCVE-2023-25610CRITICALA buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, versEPSS 18.3%CVE-2018-5388—In stroke_socket.c in strongSwan before 5.6.3, a missing packet length check could allow a buffer underflow, which may lead to resource exhaEPSS 4.0%CVE-2018-15361—UltraVNC revision 1198 has a buffer underflow vulnerability in VNC client code, which can potentially result in code execution. This attack EPSS 2.9%CVE-2021-36064HIGHXMP Toolkit SDK SVG_Adapter ParseFullNS Buffer UnderflowEPSS 2.7%CVE-2023-48230MEDIUMCap'n Proto WebSocket message can cause crashEPSS 1.9%CVE-2021-38575—NetworkPkg/IScsiDxe has remotely exploitable buffer overflows.EPSS 1.9%CVE-2022-20683HIGHCisco IOS XE Software for Catalyst 9800 Series Wireless Controllers Application Visibility and Control Denial of Service VulnerabilityEPSS 1.4%CVE-2021-38578HIGHExisting CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.EPSS 1.0%CVE-2025-53101HIGHImageMagick has Stack Buffer Overflow in image.cEPSS 0.8%CVE-2023-34351HIGHBuffer underflow in some Intel(R) PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of serviEPSS 0.7%CVE-2023-32614HIGHA heap-based buffer overflow vulnerability exists in the create_png_object functionality of Accusoft ImageGear 20.1. A specially crafted malEPSS 0.7%CVE-2025-62786MEDIUMWazuh Vulnerable to Heap-based Buffer Out-Of-Bounds WRITE in decode_win_permissionsEPSS 0.7%CVE-2026-0966MEDIUMLibssh: libssh: denial of service via zero-length input in ssh_get_hexa()EPSS 0.6%CVE-2025-4373MEDIUMGlib: buffer underflow on glib through glib/gstring.c via function g_string_insert_unicharEPSS 0.5%CVE-2022-33896HIGHA buffer underflow vulnerability exists in the way Hword of Hancom Office 2020 version 11.0.0.5357 parses XML-based office files. A speciallEPSS 0.5%CVE-2026-34253HIGHA buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in function remotethread in rEPSS 0.5%CVE-2026-44631CRITICALApache HTTP Server: Heap Underflow in `ap_regname` via Signed Char OverflowEPSS 0.5%CVE-2025-61915MEDIUMOpenPrinting CUPS vulnerable to stack based out-of-bound writeEPSS 0.5%CVE-2025-27440HIGHZoom Apps - Heap-based Buffer OverflowEPSS 0.4%