CWE-114: Process Control
Executing commands or loading libraries from an untrusted source or in an untrusted environment can cause an application to execute malicious commands (and payloads) on behalf of an attacker.
A kind of CWE-73 External Control of File Name or Path.
From the CWE List. © The MITRE Corporation.
Newest
- dell powerprotect data domain virtual edition PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024... 7.2 High
- patriksimek vm2 vm2 3.11.3 through 3.11.6 Native Code Execution via crypto.setEngine 9.4 Critical
- dell integrated dell remote access controller Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G... 5.3 Medium
- maximmasiutin tinyweb TinyWeb: HTTP Header Control Character Injection into CGI Environment 9.2 Critical
- ibm aix, vios +1 more AIX Code Execution 10.0 Critical
- ibm aix, vios +1 more AIX Command Execution 9.6 Critical
- dell alienware command center 6.x (awcc), alienware command center +1 more Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Process Control... 3.3 Low
- ibm hardware management console - power systems, hardware management console +1 more IBM Hardware Management Console - Power Systems command execution 9.3 Critical
- ibm aix IBM AIX command execution 9.6 Critical
- ibm aix IBM AIX command execution 10.0 Critical
- ibm storage virtualize IBM FlashSystem code execution 8.1 High
- jetbrains dottrace, etw host service, resharper +1 more +3 more In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8,... 7.8 High
- apple macos A library injection issue was addressed with additional restrictions. This issue is fixed in... 5.5 Medium
- mongodb, mongodb inc server, mongodb, inc. mongodb server +2 more MongoDB Server binaries may load potentially insecure shared libraries from specific relative paths 6.4 Medium
- git, debian linux, fedoraproject fedora +2 more Git vulnerable to Remote Code Execution while cloning special-crafted local repositories 8.2 High
- ibm aix, vios +1 more IBM AIX command execution 8.4 High
- kubernetes Windows kube-proxy LoadBalancer contention 5.8 Medium
- kong insomnia macos, konghq insomnia +1 more Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or... 7.8 High
- ge cimplicity GE Digital CIMPLICITY Process Control 7.8 High
- audinate dante discovery, dante application library +1 more mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to... 7.8 High
- bitdefender antivirus plus, internet security, total security +2 more Process Control vulnerability in Bitdefender Antivirus Plus 8.2 High
- checkpoint check point smartconsole, smartconsole +1 more Check Point SmartConsole before R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415... 7.8 High
- check point endpoint security client for windows, checkpoint endpoint security +1 more Check Point Endpoint Security Client for Windows, with Anti-Bot or Threat Emulation blades... 6.5 Medium
- linuxfoundation osquery osquery susceptible to DLL search order hijacking of zlib1.dll 5.3 Medium
- anchore engine, anchore-engine +1 more Shell Escape in Anchore Engine 7.7 High
- checkpoint endpoint security, capsule docs standalone client, remote access clients +2 more Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a... 7.8 High
- check point endpoint security client for windows, anti-malware blade, checkpoint capsule docs, endpoint security clients +1 more +3 more Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before... 4.4 Medium
- check point zonealarm point zonealarm, checkpoint zonealarm +1 more Some of the DLLs loaded by Check Point ZoneAlarm up to 15.4.062 are taken from directories where... 5.5 Medium