Fallos del tipo CWE-120

3164 resultados

Execução de código ou comandos não autorizados

Fraqueza em que a aplicação executa código ou comandos sem validar adequadamente a origem, permissões ou conteúdo fornecido por um atacante. O perigo está em permitir que um usuário sem privilégios execute operações restritas, como comandos do sistema, funções administrativas ou código arbitrário, comprometendo toda a segurança da aplicação.

Ejemplo

Um painel de controle que permite ao usuário executar scripts de manutenção sem autenticação apropriada, ou uma função que passa entrada do usuário diretamente para eval() em Python/JavaScript, permitindo injeção de código malicioso que roda com as permissões da aplicação.

Cómo mitigar

Implemente validação rigorosa de entrada, use allowlists (não blacklists), mantenha controle de acesso baseado em roles (RBAC) com verificação em cada operação sensível, e evite construtores dinâmicos como eval(). Quando precisar executar comandos do sistema, use APIs seguras e nunca passe entrada do usuário sem sanitização completa.

CVE-2018-14879HIGHThe command-line argument parser in tcpdump before 4.9.3 has a buffer overflow in tcpdump.c:get_next_file().EPSS 4.7%CVE-2021-40709HIGHAdobe Photoshop Buffer Overflow leads to Arbitrary Code ExecutionEPSS 4.6%CVE-2026-7856HIGHD-Link DI-8100 Web Management url_member.asp buffer overflowEPSS 4.6%CVE-2018-1054—An out-of-bounds memory read flaw was found in the way 389-ds-base handled certain LDAP search filters, affecting all versions including 1.4EPSS 4.6%CVE-2025-12232HIGHTenda CH22 SafeClientFilter fromSafeClientFilter buffer overflowEPSS 4.5%CVE-2019-5143HIGHAn exploitable format string vulnerability exists in the iw_console conio_writestr functionality of the Moxa AWK-3131A firmware version 1.13EPSS 4.5%CVE-2022-23188HIGHAdobe Illustrator Buffer Overflow could lead to Arbitrary code executionEPSS 4.4%CVE-2025-12233HIGHTenda CH22 SafeUrlFilter fromSafeUrlFilter buffer overflowEPSS 4.3%CVE-2022-23187HIGHAdobe Illustrator 2022 Buffer Overflow could lead to Arbitrary code executionEPSS 4.3%CVE-2015-0973HIGHBuffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows context-dependent atEPSS 4.3%CVE-2020-6087HIGHAn exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENTEPSS 4.3%CVE-2020-6084HIGHAn exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AEPSS 4.3%CVE-2020-6086HIGHAn exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENTEPSS 4.3%CVE-2020-6085HIGHAn exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AEPSS 4.3%CVE-2025-29032MEDIUMTenda AC9 v15.03.05.19(6318) was discovered to contain a buffer overflow via the formWifiWpsOOB function.EPSS 4.2%CVE-2021-45039CRITICALMultiple models of the Uniview IP Camera (e.g., IPC_G6103 B6103.16.10.B25.201218, IPC_G61, IPC21, IPC23, IPC32, IPC36, IPC62, and IPC_HCMN) EPSS 4.2%CVE-2022-23219CRITICALThe deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argEPSS 4.2%CVE-2020-6083HIGHAn exploitable denial of service vulnerability exists in the ENIP Request Path Port Segment functionality of Allen-Bradley Flex IO 1794-AENTEPSS 4.2%CVE-2019-3705HIGHBuffer Overflow VulnerabilityEPSS 4.2%CVE-2026-7857HIGHD-Link DI-8100 CGI user_group.asp sprintf buffer overflowEPSS 4.2%