Fallos del tipo CWE-120

3164 resultados

Execução de código ou comandos não autorizados

Fraqueza em que a aplicação executa código ou comandos sem validar adequadamente a origem, permissões ou conteúdo fornecido por um atacante. O perigo está em permitir que um usuário sem privilégios execute operações restritas, como comandos do sistema, funções administrativas ou código arbitrário, comprometendo toda a segurança da aplicação.

Ejemplo

Um painel de controle que permite ao usuário executar scripts de manutenção sem autenticação apropriada, ou uma função que passa entrada do usuário diretamente para eval() em Python/JavaScript, permitindo injeção de código malicioso que roda com as permissões da aplicação.

Cómo mitigar

Implemente validação rigorosa de entrada, use allowlists (não blacklists), mantenha controle de acesso baseado em roles (RBAC) com verificação em cada operação sensível, e evite construtores dinâmicos como eval(). Quando precisar executar comandos do sistema, use APIs seguras e nunca passe entrada do usuário sem sanitização completa.

CVE-2022-24028CRITICALA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuEPSS 1.2%CVE-2022-24014CRITICALA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuEPSS 1.2%CVE-2022-24024CRITICALA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuEPSS 1.2%CVE-2022-24020CRITICALA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuEPSS 1.2%CVE-2022-24022CRITICALA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuEPSS 1.2%CVE-2022-24027CRITICALA buffer overflow vulnerability exists in the GetValue functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A specially-crafted configuEPSS 1.2%CVE-2024-28639CRITICALBuffer Overflow vulnerability in TOTOLink X5000R V9.1.0u.6118-B20201102 and A7000R V9.1.0u.6115-B20201022, allow remote attackers to executeEPSS 1.2%CVE-2024-23286CRITICALA buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOEPSS 1.2%CVE-2023-30280CRITICALBuffer Overflow vulnerability found in Netgear R6900 v.1.0.2.26, R6700v3 v.1.0.4.128, R6700 v.1.0.0.26 allows a remote attacker to execute aEPSS 1.2%CVE-2026-7856HIGHD-Link DI-8100 Web Management url_member.asp buffer overflowEPSS 1.2%CVE-2020-27818—A flaw was found in the check_chunk_name() function of pngcheck-2.4.0. An attacker able to pass a malicious file to be processed by pngcheckEPSS 1.2%CVE-2025-32105CRITICALA buffer overflow in the the Sangoma IMG2020 HTTP server through 2.3.9.6 allows an unauthenticated user to achieve remote code execution.EPSS 1.2%CVE-2023-52735CRITICALbpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itselfEPSS 1.2%CVE-2026-59250HIGHMegaco flex scanner buffer overflow via oversized property parm nameEPSS 1.2%CVE-2022-29223HIGHBuffer overflow on HUB descriptor in Azure RTOS USBXEPSS 1.2%CVE-2025-6128HIGHTOTOLINK EX1200T HTTP POST Request formWirelessTbl buffer overflowEPSS 1.2%CVE-2022-26342HIGHA buffer overflow vulnerability exists in the confsrv ucloud_set_node_location functionality of TCL LinkHub Mesh Wi-Fi MS1G_00_01.00_14. A sEPSS 1.2%CVE-2022-0324HIGHBuffer Overflow in Dhcp6relay in Software for Open Networking in the Cloud (SONiC)EPSS 1.2%CVE-2022-24324CRITICALA CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow potentially leadinEPSS 1.2%CVE-2022-20888MEDIUMCisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service VulnerabilitiesEPSS 1.2%