Fallos del tipo CWE-120

3164 resultados

Execução de código ou comandos não autorizados

Fraqueza em que a aplicação executa código ou comandos sem validar adequadamente a origem, permissões ou conteúdo fornecido por um atacante. O perigo está em permitir que um usuário sem privilégios execute operações restritas, como comandos do sistema, funções administrativas ou código arbitrário, comprometendo toda a segurança da aplicação.

Ejemplo

Um painel de controle que permite ao usuário executar scripts de manutenção sem autenticação apropriada, ou uma função que passa entrada do usuário diretamente para eval() em Python/JavaScript, permitindo injeção de código malicioso que roda com as permissões da aplicação.

Cómo mitigar

Implemente validação rigorosa de entrada, use allowlists (não blacklists), mantenha controle de acesso baseado em roles (RBAC) com verificação em cada operação sensível, e evite construtores dinâmicos como eval(). Quando precisar executar comandos do sistema, use APIs seguras e nunca passe entrada do usuário sem sanitização completa.

CVE-2023-47995MEDIUMMemory Allocation with Excessive Size Value discovered in BitmapAccess.cpp::FreeImage_AllocateBitmap in FreeImage 3.18.0 allows attackers toEPSS 0.7%CVE-2024-46419CRITICALTOTOLINK AC1200 T8 v4.1.5cu.861_B20230220 has a buffer overflow vulnerability in the setWizardCfg function via the ssid5g parameter.EPSS 0.7%CVE-2022-43391MEDIUMA buffer overflow vulnerability in the parameter of the CGI program in Zyxel NR7101 firmware prior to V1.15(ACCC.3)C0, which could allow an EPSS 0.7%CVE-2026-28959HIGHA buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5EPSS 0.7%CVE-2024-47248MEDIUMApache NimBLE: Buffer overflow in NimBLE MESH Bluetooth stackEPSS 0.7%CVE-2026-20664MEDIUMThe issue was addressed with improved memory handling. This issue is fixed in Safari 26.4, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visioEPSS 0.7%CVE-2024-57538MEDIUMLinksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (anonymous_protect_status) is copieEPSS 0.7%CVE-2026-1158HIGHTotolink LR350 POST Request cstecgi.cgi setWizardCfg buffer overflowEPSS 0.7%CVE-2024-57540MEDIUMLinksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (action) is copied to the stack witEPSS 0.7%CVE-2026-1156HIGHTotolink LR350 cstecgi.cgi setWiFiBasicCfg buffer overflowEPSS 0.7%CVE-2024-27572HIGHLBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the updateCurAPlist function. This vulneraEPSS 0.7%CVE-2024-29507MEDIUMArtifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters.EPSS 0.7%CVE-2026-2068HIGHUTT 进取 520W formSyslogConf strcpy buffer overflowEPSS 0.7%CVE-2020-8252—The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js incorrectly determined the buffer size which EPSS 0.7%CVE-2024-39750HIGHIBM Analytics Content Hub buffer overflowEPSS 0.7%CVE-2025-3194HIGHVersions of the package bigint-buffer from 0.0.0 are vulnerable to Buffer Overflow in the toBigIntLE() function. Attackers can exploit this EPSS 0.7%CVE-2025-12274HIGHTenda CH22 P2pListFilter fromP2pListFilter buffer overflowEPSS 0.7%CVE-2023-45929CRITICALS-Lang 2.3.2 was discovered to contain a segmentation fault via the function fixup_tgetstr().EPSS 0.7%CVE-2023-28772MEDIUMAn issue was discovered in the Linux kernel before 5.13.3. lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow.EPSS 0.7%CVE-2026-18103MEDIUMDhcp-server: dhcp-server: persistent denial of service due to buffer overflow via omapiEPSS 0.7%