Fallos del tipo CWE-120

3164 resultados

Execução de código ou comandos não autorizados

Fraqueza em que a aplicação executa código ou comandos sem validar adequadamente a origem, permissões ou conteúdo fornecido por um atacante. O perigo está em permitir que um usuário sem privilégios execute operações restritas, como comandos do sistema, funções administrativas ou código arbitrário, comprometendo toda a segurança da aplicação.

Ejemplo

Um painel de controle que permite ao usuário executar scripts de manutenção sem autenticação apropriada, ou uma função que passa entrada do usuário diretamente para eval() em Python/JavaScript, permitindo injeção de código malicioso que roda com as permissões da aplicação.

Cómo mitigar

Implemente validação rigorosa de entrada, use allowlists (não blacklists), mantenha controle de acesso baseado em roles (RBAC) com verificação em cada operação sensível, e evite construtores dinâmicos como eval(). Quando precisar executar comandos do sistema, use APIs seguras e nunca passe entrada do usuário sem sanitização completa.

CVE-2009-2502HIGHBuffer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office EPSS 22.0%CVE-2019-5063HIGHAn exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0. A specially crafteEPSS 21.1%CVE-2021-22802—A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in remote code execution due to missing length EPSS 20.2%CVE-2020-8597CRITICALeap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.EPSS 19.9%CVE-2023-27853CRITICALNETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to EPSS 19.7%CVE-2019-8287—TightVNC code version 1.3.10 contains global buffer overflow in HandleCoRREBBP macro function, which can potentially result code execution. EPSS 19.5%CVE-2022-43970HIGHBuffer overflow in Linksys WRT54GLEPSS 19.3%CVE-2022-37434CRITICALzlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: EPSS 17.9%CVE-2024-7828HIGHD-Link DNS-1550-04 photocenter_mgr.cgi cgi_set_cover buffer overflowEPSS 16.2%CVE-2024-42812CRITICALIn D-Link DIR-860L v2.03, there is a buffer overflow vulnerability due to the lack of length verification for the SID field in gena.cgi. AttEPSS 15.5%CVE-2025-5548MEDIUMFreeFloat FTP Server NOOP Command buffer overflowEPSS 15.0%CVE-2010-0820HIGHHeap-based buffer overflow in the Local Security Authority Subsystem Service (LSASS), as used in Active Directory in Microsoft Windows ServeEPSS 14.4%CVE-2021-22824—A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could result in denial of service, due to missing length cheEPSS 14.2%CVE-2023-34563CRITICALnetgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication.EPSS 13.7%CVE-2023-31475CRITICALAn issue was discovered on GL.iNet devices before 3.216. The function guci2_get() found in libglutil.so has a buffer overflow when an item iEPSS 13.7%CVE-2023-7095CRITICALTotolink A7100RU HTTP POST Request main buffer overflowEPSS 13.7%CVE-2019-17147HIGHThis vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-LINK TL-WR841N routers. Authentication EPSS 13.7%CVE-2024-39288CRITICALA buffer overflow vulnerability exists in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A speciallyEPSS 13.5%CVE-2017-12718—A Classic Buffer Overflow issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. AEPSS 12.8%CVE-2022-22805—A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists that could cause remote code executioEPSS 11.9%