Vulnerability Category — Code Execution

Chinese name:
代码执行
Detail：
代码执行漏洞是用户通过浏览器提交执行命令，由于服务器端没有针对执行函数做过滤，导致在没有指定绝对路径的情况下就执行命令，可能会允许攻击者通过改变 $PATH 或程序执行环境的其他方面来执行一个恶意构造的代码。

Related Vulnerabilities

SSV ID Name
SSV-96670 FreeImage Library XMP Image Handling Code Execution Vulnerability(CVE-2016-5684)
SSV-96668 Hopper Disassembler ELF Section Header Size Code Execution Vulnerability(CVE-2016-8390)
SSV-96667 LibTIFF PixarLogDecode Remote Code Execution Vulnerability(CVE-2016-5875)
SSV-96666 LibTIFF TIFF2PDF TIFFTAG_JPEGTABLES Remote Code Execution Vulnerability(CVE-2016-5652)
SSV-96665 LibTIFF Tag Extension Remote Code Execution Vulnerability(CVE-2016-8331)
SSV-96664 Iceni Argus ipNameAdd Code Execution Vulnerability(CVE-2016-8335)
SSV-96663 Iceni Argus ipfSetColourStroke Code Execution Vulnerability(CVE-2016-8333)
SSV-96662 GMER Path Length Code Execution Vulnerability(CVE-2016-4289)
SSV-96660 Macro-less Code Exec in MSWord
SSV-96659 Outlook Home Page – Another Ruler Vector
SSV-96658 seacms6.55 search.php 代码执行漏洞
SSV-96654 HDF5 Group libhdf5 H5T_ARRAY Code Execution Vulnerability(CVE-2016-4330)
SSV-96653 HDF5 Group libhdf5 H5Z_NBIT Code Execution Vulnerability(CVE-2016-4331)
SSV-96652 HDF5 Group libhdf5 Shareable Message Type Code Execution Vulnerability(CVE-2016-4332)
SSV-96651 HDF5 Group libhdf5 H5T_COMPOUND Code Execution Vulnerability(CVE-2016-4333)
SSV-96646 ArcGIS Server 10.3.1: RMIClassLoader RCE
SSV-96643 OrientDB 2.2.2 < 2.2.22 - Remote Code Execution
SSV-96633 Computerinsel Photoline SVG Parsing Code Execution Vulnerability(CVE-2017-2920)
SSV-96632 Computerinsel Photoline GIF Parsing Code Execution Vulnerability(CVE-2017-2880)
SSV-96631 Computerinsel Photoline TGA Parsing Code Execution Vulnerability(CVE-2017-12106)
SSV-96630 WebKit: JSC: Incorrect for-in optimization #2(CVE-2017-7117)
SSV-96629 WebKit: JSC: Incorrect optimization in BytecodeGenerator::emitGetByVal(CVE-2017-7061)
SSV-96627 Apple: Multiple Race Conditions in PCIe Message Ring protocol leading to OOB Write and OOB Read(CVE-2017-7115)
SSV-96626 Apple: OOB NUL byte write when handling WLC_E_TRACE event packets(CVE-2017-7112)
SSV-96625 Apple: Heap overflow and information disclosure in "setVendorIE" when handling ioctl results(CVE-2017-7110)
SSV-96624 Apache Tomcat Upload Bypass / Remote Code Execution(CVE-2017-12617)
SSV-96617 Mozilla Firefox WebExtensions can download and open non-executable files without user interaction(CVE-2017-7821)
SSV-96604 Adobe Flash: Out-of-bounds read in applyToRange(CVE-2017-11282)
SSV-96602 Adobe Flash: Out-of-bounds write in MP4 Edge Processing(CVE-2017-11281)
SSV-96601 Adobe Flash: Out-of-bounds memory read in MP4 parsing(CVE-2017-11281)
SSV-96595 Smart home: remote command execution (RCE)
SSV-96594 LibOFX Tag Parsing Code Execution Vulnerability
SSV-96592 ansible-vault Yaml Load Code Execution Vulnerability
SSV-96589 Aerospike Database Server Set Name Code Execution Vulnerability(CVE-2016-9054)
SSV-96588 Aerospike Database Server Index Name Code Execution Vulnerability(CVE-2016-9052)
SSV-96586 Oracle Outside In Technology PDF parser confusion Code Execution Vulnerability(CVE-2017-3271)
SSV-96585 Oracle Outside In Technology RTF Parsing Code Execution Vulnerability(CVE-2017-3293)
SSV-96584 Adobe Acrobat Reader DC jpeg decoder Remote Code Execution Vulnerability(CVE-2017-2971)
SSV-96583 Libbpg BGP image decoding Code Execution Vulnerability(CVE-2016-8710)
SSV-96581 Nitro Pro 10 PDF Handling Code Execution Vulnerability(CVE-2016-8713)
SSV-96580 Nitro Pro PDF Handling Code Execution Vulnerability(CVE-2016-8709)
SSV-96579 Nitro Pro 10 PDF Handling Code Execution Vulnerability(CVE-2016-8711)
SSV-96578 FLIR Systems Multiple Vulnerabilities
SSV-96572 Apple GarageBand Out of Bounds Write Code Execution Vulnerability(CVE-2017-2374)
SSV-96570 Apple GarageBand Out of Bounds Write Code Execution Vulnerability(CVE-2017-2372)
SSV-96569 Aerospike Database Server Client Batch Request Code Execution Vulnerability(CVE-2016-9051)
SSV-96568 Aerospike Database Server RW Fabric Message Particle Type Code Execution Vulnerability(CVE-2016-9053)
SSV-96566 Ichitaro Office JTD Figure handling Code Execution Vulnerability(CVE-2017-2789)
SSV-96565 Ichitaro Word Processor PersistDirectory Code Execution Vulnerability(CVE-2017-2791)
SSV-96564 Iceni Argus PDF Inflate+LZW Decompression Heap-Based Buffer Overflow Vulnerability(CVE-2016-8387)
SSV-96563 Ichitaro Office Excel File Code Execution Vulnerability(CVE-2017-2790)
SSV-96560 Iceni Argus TrueType Font File Cmap Table Code Execution Vulnerability(CVE-2016-8386)
SSV-96559 Iceni Argus PDF Font-Encoding GlyphMap Adjustment Code Execution Vulnerability(CVE-2016-8388)
SSV-96558 Iceni Argus icnChainAlloc Signed Comparison Code Execution Vulnerability(CVE-2016-8715)
SSV-96557 Tomcat代码执行漏洞(CVE-2017-12615)
SSV-96554 Iceni Argus PDF Uninitialized WordStyle Color Length Code Execution Vulnerability(CVE-2016-8385)
SSV-96553 Iceni Argus ipStringCreate Code Execution Vulnerability(CVE-2017-2777)
SSV-96552 Iceni Argus PDF TextToPolys Rasterization Code Execution Vulnerability(CVE-2016-8389)
SSV-96551 Pharos PopUp Printer Client DecodeString Code Execution Vulnerability(CVE-2017-2786)
SSV-96550 Pharos PopUp Printer Client memcpy Code Execution Vulnerability(CVE-2017-2787)
SSV-96549 Pharos PopUp Printer Client DecodeBinary Code Execution Vulnerability(CVE-2017-2788)
SSV-96547 Pharos PopUp Printer Client DecodeString Code Execution Vulnerability(CVE-2017-2785)
SSV-96546 R PDF LoadEncoding Code Execution Vulnerability(CVE-2016-8714)
SSV-96545 National Instruments LabVIEW LvVarientUnflatten Code Execution Vulnerability(CVE-2017-2775)
SSV-96528 ARM Mbedtls x509 ECDSA invalid public key Remote Code Execution Vulnerability(CVE-2017-2784)
SSV-96527 IrfanView JPEG 2000 Reference Tile Width Arbitrary Code Execution Vulnerability(CVE-2017-2813)
SSV-96524 AntennaHouse DMC HTMLFilter DHFSummary Code Execution Vulnerability(CVE-2016-8384)
SSV-96523 AntennaHouse DMC HTMLFilter FillRowFormat Code Execution Vulnerability(CVE-2017-2783)
SSV-96522 AntennaHouse DMC HTMLFilter iBldDirInfo Code Execution Vulnerability(CVE-2017-2792)
SSV-96521 AntennaHouse DMC HTMLFilter PPT DHFSummary Code Execution Vulnerability(CVE-2017-2794)
SSV-96520 AntennaHouse DMC HTMLFilter PPT ParseEnvironment Code Execution Vulnerability(CVE-2017-2797)
SSV-96519 WolfSSL library X509 Certificate Text Parsing Code Execution Vulnerability(CVE-2017-2800)
SSV-96518 AntennaHouse DMC HTMLFilter UnCompressUnicode Code Execution Vulnerability(CVE-2017-2793)
SSV-96517 AntennaHouse DMC HTMLFilter Doc_SetSummary Code Execution Vulnerability(CVE-2016-8382)
SSV-96516 AntennaHouse DMC HTMLFilter Doc_GetFontTable Code Execution Vulnerability(CVE-2016-8383)
SSV-96515 AntennaHouse DMC HTMLFilter Txo Code Execution Vulnerability(CVE-2017-2795)
SSV-96514 AntennaHouse DMC HTMLFilter GetIndexArray Code Execution Vulnerability(CVE-2017-2798)
SSV-96513 AntennaHouse DMC HTMLFilter AddSst Code Execution Vulnerability(CVE-2017-2799)
SSV-96512 PowerIso Parsing Code Execution Vulnerability(CVE-2017-2817)
SSV-96510 Hancom Thinkfree NEO Hangul Word Processor HWPTAG_TAB_DEF Tab Count Code Execution Vulnerability(CVE-2017-2819)
SSV-96509 Artifex MuPDf JBIG2 Parser Code Execution Vulnerability(CVE-2016-8729)
SSV-96508 MuPDF Fitz library font glyph scaling Code Execution Vulnerability(CVE-2016-8728)
SSV-96507 Tablib Yaml Load Code Execution Vulnerability(CVE-2017-2810)
SSV-96503 Foscam IP Video Camera CGIProxy.fcgi Wifi Settings Code Exectuion Vulnerability(CVE-2017-2851)
SSV-96502 Foscam IP Video Camera CGIProxy.fcgi Message 0x3001 Multi-part Form Boundary Code Execution Vulnerability(CVE-2017-2830)
SSV-96487 Foscam IP Video Camera WebService CGI Parameter Code Execution Vulnerability(CVE-2017-2805)
SSV-96484 FireEye Uncovers CVE-2017-8759: Zero-Day Used in the Wild to Distribute FINSPY
SSV-96482 InsideSecure MatrixSSL x509 certificate IssuerDomainPolicy Remote Code Execution Vulnerability(CVE-2017-2781)
SSV-96481 InsideSecure MatrixSSL x509 certificate SubjectDomainPolicy Remote Code Execution Vulnerability(CVE-2017-2780)
SSV-96477 Nitro Pro 11 PDF Handling Code Execution Vulnerability(CVE-2016-2796)
SSV-96476 Poppler PDF Image Display DCTStream::readProgressiveSOF() Code Execution Vulnerability(CVE-2017-2818)
SSV-96475 Poppler PDF library JPEG 2000 levels Code Execution Vulnerability(CVE-2017-2820)
SSV-96474 Poppler PDF Image Display DCTStream::readScan() Code Execution Vulnerability(CVE-2017-2814)
SSV-96473 Iceni Infix PDF parsing SetSize Code Execution Vulnerability(CVE-2017-2863)
SSV-96471 ProcessMaker Enterprise Core Code Execution Vulnerability(CVE-2016-9045)
SSV-96465 Corel CorelDRAW X8 EMF Parser Code Execution Vulnerability(CVE-2016-9043)
SSV-96464 Corel PHOTO-PAINT X8 TIFF Filter Code Execution Vulnerability(CVE-2017-2804)
SSV-96463 Corel PHOTO-PAINT X8 64-bit TIFF Filter Code Execution Vulnerability(CVE-2017-2803)
SSV-96462 Corel PHOTO-PAINT X8 GIF Filter Code Execution Vulnerability(CVE-2016-8730)
SSV-96457 FreeRDP Rdp Client License Recv Code Execution Vulnerability(CVE-2017-2834)
京ICP备10040895号 京公网安备 11010502034610号 Copyright @ 404 Team from Knownsec. 简体中文