CWE-494: Download of Code Without Integrity Check
The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.
A kind of CWE-345 Insufficient Verification of Data Authenticity.
From the CWE List. © The MITRE Corporation.
Newest
- nicehash quickminerNiceHash QuickMiner 6.12.0 perform software updates over HTTP without validating digital...9.8 Critical
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Insecure Build Pipeline8.7 High
- sound4 pulse-eco aes67 firmwareThe Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code...8.8 High
- lenovo wallpaper clientA potential vulnerability was reported in the Lenovo Wallpaper Client that could allow arbitrary...7.5 High
- ecovacs deebot t10 series, deebot t20 series, deebot t30 series +14 more +16 moreECOVACS Vacuum and Base Station accept unsigned firmware7.5 High
- dlink dcs-825l firmwareD-Link DCS-825L firmware v1.08.01 contains a vulnerability in the watchdog script `mydlink-watch...6.6 Medium
- agiloftAgiloft insecure download of system packages9.2 Critical
- maharaAn issue was discovered in Mahara 23.04.8 and 24.04.4. The use of a malicious export download URL...5.3 Medium
- dlink dcs-825l firmwareD-Link DCS-825L firmware version 1.08.01 and possibly prior versions contain an insecure...7.3 High
- tenda ac6 v5.0, ac6 firmware +1 moreA firmware update vulnerability exists in the Firmware Signature Validation functionality of...7.2 High
- eg4 electronics 12000xp, 12kpv, 18kpv +4 more +6 moreEG4 Electronics EG4 Inverters Download of Code Without Integrity Check8.6 High
- johnson controls, inc istar ultraiSTAR Ultra performs a firmware verification on boot, however the verification does not inspect...9.3 Critical
- dsic cross-browser components for official document creationDSIC｜Cross-browser Components for Official Document Creation - Remote Code Execution8.6 High
- pointcloudlibrary pclVulnerability in PointCloudLibrary PCL2.0 Low
- centreon webA user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request.8.4 High
- No product listedNautel VX Series transmitters VX SW v6.4.0 and below was discovered to contain a remote code...9.8 Critical
- sick ag dl100-2xxxxxxxRCE due to Device Driver9.3 Critical
- ibm engineering requirements management doors nextIBM Engineering Requirements Management DOORS Next file download8.8 High
- sungrowpower winet-s firmwareSunGrow WiNet-S V200.001.00.P025 and earlier versions is missing integrity checks for firmware...7.5 High
- schneider electric asco 5310 single-channel remote annunciator, asco 5350 eight channel remote annunciator +1 moreCWE-494: Download of Code Without Integrity Check vulnerability exists that could render the...7.2 High
- ecovacs airbot andy firmware, airbot ava firmware, airbot z1 firmware +12 more +14 moreECOVACS lawnmowers and vacuums deterministic firmware encryption key7.7 High
- hcl software bigfix patch management download plug-insHCL BigFix Patch Download Plug-ins are affected by an arbitrary file download vulnerability2.5 Low
- keraskeras Path Traversal vulnerability6.5 Medium
- tp-link archer c50 wireless router, archer c50 firmware +1 moreInsufficient Integrity Verification Vulnerability in TP-Link Archer C508.5 High
- definetlynotai weshacksWesHacks code includes links to Leostop tracking spyware infested files8.2 High
- baxter life2000 ventilation system, life2000 ventilator firmware +1 moreLife2000 Ventilator does not perform proper file integrity checks when adopting firmware updates9.3 Critical
- ami aptio v, aptiov +1 morePotential Firmware update without integrity check5.2 Medium
- gradio-app gradioLack of integrity check on the downloaded FRP client in Gradio2.1 Low
- perl cpanminus, app\ \ +1 moreThe App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling...8.1 High
- zoom communications, inc workplace apps and sdk for windows, zoom meeting software development kit, rooms +3 more +5 moreZoom Workplace Apps and SDK for Windows - Improper Privilege Management6.7 Medium
- kiloview p1/p2, p1 4g video encoder firmware, p2 4g video encoder firmware +2 moreDownload of Code Without Integrity Check in Kiloview P1/P2 devices9.8 Critical
- synology router manager, router manager (srm) +1 moreDownload of code without integrity check vulnerability in AirPrint functionality in Synology...7.5 High
- siemens simatic rtls locating managerA vulnerability has been identified in SIMATIC RTLS Locating Manager (6GT2780-0DA00) (All...8.8 High
- luckyframe luckyframewebLuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the...7.5 High
- inductive automation ignitionInductive Automation Ignition downloadLaunchClientJar Remote Code Execution Vulnerability8.0 High
- iosix io-1020 micro eldIOSIX IO-1020 Micro ELD Download of Code Without Integrity Check9.6 Critical
- johnbillion wp crontrol, wp-crontrol +1 moreWP Crontrol possible RCE when combined with a pre-condition8.2 High
- gnu emacs, org mode, debian linux +2 moreIn Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org...7.1 High
- apache dorisApache Doris: Downloading arbitrary remote jar files resulting in remote command execution9.8 Critical
- imoulife imou goAn issue in the com.oneed.dvr.service.DownloadFirmwareService component of IMOU GO v1.0.11 allows...8.8 High
- phoenix contact axc f 1152, axc f 2152, axc f 3152 +14 more +16 morePHOENIX CONTACT: PLCnext Control prone to download of code without integrity check6.5 Medium
- phoenix contact automation worx software suite, axc 1050, axc 1050 xc +30 more +32 morePhoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC7.5 High
- phoenix contact multiprog, proconos eclr (sdk), phoenixcontact proconos eclr +2 morePhoenix Contact: ProConOs prone to Download of Code Without Integrity Check7.5 High
- schneider electric trio e-series ethernet data radio, trio j-series ethernet data radio, trio q-series ethernet data radio +16 more +18 moreA CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a...6.5 Medium
- buildrootMultiple data integrity vulnerabilities exist in the package hash checking functionality of...8.1 High
- buildrootMultiple data integrity vulnerabilities exist in the package hash checking functionality of...8.1 High
- buildrootMultiple data integrity vulnerabilities exist in the package hash checking functionality of...8.1 High
- buildrootMultiple data integrity vulnerabilities exist in the package hash checking functionality of...8.1 High
- buildrootMultiple data integrity vulnerabilities exist in the package hash checking functionality of...8.1 High
- buildrootA data integrity vulnerability exists in the BR_NO_CHECK_HASH_FOR functionality of Buildroot 2023...8.1 High
- Show moreLoading…