Base de CVEs

CVE-2020-8218 Alta · 7.2 KEV Alta · 62 Exploit público CWE-94 30/07/2020

Pulse Connect Secure Code Injection Vulnerability

A code injection vulnerability exists in Pulse Connect Secure <9.1R8 that allows an attacker to crafted a URI to perform an arbitrary code execution via the admin web interface.

CVE-2020-8644 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-94 05/02/2020

PlaySMS Server-Side Template Injection Vulnerability

PlaySMS before 1.4.3 does not sanitize inputs from a malicious string.

CVE-2019-10758 Crítica · 9.9 KEV Urgente · 70 Exploit público CWE-94 24/12/2019

Execução Remota de Código no mongo-express via Injeção de Código

mongo-express anterior à 0.54.0 é vulnerável a Remote Code Execution (execução remota de código) por meio de endpoints que usam o método toBSON. Trata-se de um uso indevido da dependência vm para executar comandos exec em um ambiente não seguro.

CVE-2019-4716 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-94 18/12/2019

IBM Planning Analytics Remote Code Execution Vulnerability

IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. IBM X-Force ID: 172094.

CVE-2019-16759 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-94 24/09/2019

vBulletin PHP Module Remote Code Execution Vulnerability

vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request.

CVE-2019-0193 Alta · 7.2 KEV Alta · 66 Exploit público CWE-94 01/08/2019

Injeção de código no DataImportHandler do Apache Solr

No Apache Solr, o DataImportHandler, um módulo opcional, mas popular, para importar dados de bancos de dados e outras fontes, possui um recurso em que toda a configuração DIH pode vir do parâmetro 'dataConfig' de uma requisição. O modo de depuração da tela administrativa do DIH usa esse recurso para facilitar a depuração e o desenvolvimento de uma configuração DIH. Como uma configuração DIH pode conter scripts, esse parâmetro representa um risco de segurança. A partir da versão 8.2.0 do Solr, o uso desse parâmetro exige que a propriedade de sistema Java 'enable.dih.dataConfigParam' esteja definida como true.

CVE-2019-7609 Crítica · 10.0 KEV Urgente · 83 Exploit público CWE-94 25/03/2019

Kibana Arbitrary Code Execution

Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.

CVE-2019-9082 Alta · 8.8 KEV Urgente · 76 Exploit público CWE-94 24/02/2019

ThinkPHP Remote Code Execution Vulnerability

ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]= followed by the command.

CVE-2018-14667 Crítica · 9.8 KEV Alta · 69 Exploit público CWE-94 06/11/2018

Injeção de Expression Language no Red Hat JBoss RichFaces

O RichFaces Framework da série 3 até a versão 3.3.4 (inclusive) é vulnerável a injeção de Expression Language (EL) por meio do recurso UserResource. Um atacante remoto e não autenticado poderia explorar isso para executar código arbitrário usando uma cadeia de objetos Java serializados via org.ajax4jsf.resource.UserResource$UriData.

CVE-2018-7602 Crítica · 9.8 KEV Urgente · 88 Exploit público Ransomware CWE-94 19/07/2018

Execução remota de código no Drupal Core (CVE-2018-7602)

Existe uma vulnerabilidade de execução remota de código em múltiplos subsistemas do Drupal 7.x e 8.x. Isso potencialmente permite que atacantes explorem múltiplos vetores de ataque em um site Drupal, o que pode resultar no comprometimento do site. Esta vulnerabilidade está relacionada ao núcleo do Drupal - Altamente crítica - Execução remota de código - SA-CORE-2018-002. Tanto a SA-CORE-2018-002 quanto esta vulnerabilidade estão sendo exploradas na natureza.

CVE-2018-1273 Crítica · 9.8 KEV Urgente · 83 Exploit público Ransomware CWE-94 11/04/2018

VMware Tanzu Spring Data Commons Property Binder Vulnerability

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.

CVE-2018-1270 Crítica · 9.8 CWE-94 06/04/2018

Code Injection em Vmware Spring Framework

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.

CVE-2017-8759 Alta · 7.8 KEV Urgente · 80 Exploit público CWE-94 12/09/2017

Microsoft .NET Framework Remote Code Execution Vulnerability

Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Execution Vulnerability."

CVE-2017-9822 Alta · 8.8 KEV Urgente · 86 Exploit público Ransomware CWE-94 20/07/2017

DotNetNuke (DNN) - Execução Remota de Código via Cookie

DNN (também conhecido como DotNetNuke) anterior à versão 9.1.1 apresenta Execução Remota de Código por meio de um cookie, também referido como "2017-08 (Critical) Possible remote code execution on DNN sites."

CVE-2017-9841 Crítica · 9.8 KEV Urgente · 81 Exploit público CWE-94 27/06/2017

Injeção de código no PHPUnit via eval-stdin.php

Util/PHP/eval-stdin.php no PHPUnit anterior a 4.8.28 e na série 5 anterior a 5.6.3 permite que atacantes remotos executem código PHP arbitrário por meio de dados HTTP POST que começam com a substring "<?php ", como demonstrado por um ataque em um site com a pasta /vendor exposta, ou seja, acesso externo ao URI /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php.

CVE-2017-7494 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-94 30/05/2017

Samba Remote Code Execution Vulnerability

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.

CVE-2015-1635 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-94 14/04/2015

Microsoft HTTP.sys Remote Code Execution Vulnerability

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability."

CVE-2014-4148 Alta · 8.8 KEV Alta · 56 CWE-94 15/10/2014

Microsoft Windows Remote Code Execution Vulnerability

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted TrueType font, as exploited in the wild in October 2014, aka "TrueType Font Parsing Remote Code Execution Vulnerability."

CVE-2014-6287 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-94 07/10/2014

Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability

The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c allows remote attackers to execute arbitrary programs via a %00 sequence in a search action.

CVE-2013-4444 Média · 6.8 CWE-94 11/09/2014

Code Injection em Apache Software Foundation Tomcat

Unrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers to execute arbitrary code by uploading and accessing a JSP file.

CVE-2013-3906 Alta · 7.8 KEV Urgente · 89 Exploit público CWE-94 06/11/2013

Microsoft Graphics Component Memory Corruption Vulnerability

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a Word document, and exploited in the wild in October and November 2013.

CVE-2013-4810 Crítica · 9.8 KEV Urgente · 71 Exploit público CWE-94 16/09/2013

HP Multiple Products Remote Code Execution Vulnerability

HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to (1) EJBInvokerServlet or (2) JMXInvokerServlet, aka ZDI-CAN-1760. NOTE: this is probably a duplicate of CVE-2007-1036, CVE-2010-0738, and/or CVE-2012-0874.

CVE-2012-0158 Alta · 8.8 KEV Urgente · 96 Exploit público Ransomware CWE-94 10/04/2012

Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability

The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2003 Web Components SP3; SQL Server 2000 SP4, 2005 SP4, and 2008 SP2, SP3, and R2; BizTalk Server 2002 SP1; Commerce Server 2002 SP4, 2007 SP2, and 2009 Gold and R2; Visual FoxPro 8.0 SP1 and 9.0 SP2; and Visual Basic 6.0 Runtime allow remote attackers to execute arbitrary code via a crafted (a) web site, (b) Office document, or (c) .rtf file that triggers "system state" corruption, as exploited in the wild in April 2012, aka "MSCOMCTL.OCX RCE Vulnerability."

CVE-2012-0391 Crítica · 9.8 KEV Urgente · 83 Exploit público CWE-94 08/01/2012

Apache Struts 2: injeção de código OGNL via ExceptionDelegator

O componente ExceptionDelegator interpreta valores de parâmetros como expressões OGNL durante determinado tratamento de exceções relacionado a incompatibilidades de tipos de dados de propriedades, o que permite que atacantes remotos executem código Java arbitrário por meio de um parâmetro elaborado. A falha afeta versões anteriores à 2.2.3.1.

CVE-2010-4410 Média · 4.3 CWE-94 06/12/2010

CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm...

CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline characters, a different vulnerability than CVE-2010-2761 and CVE-2010-3172.