CWE-494

Medium likelihood

Download of Code Without Integrity Check

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.

200 vulnerabilities with CWE-494
CVE-2025-55310 HIGH
Foxit PDF & Editor <13.2-2025.2 - Info Disclosure
CVSS 7.3
CVE-2025-14265 CRITICAL
ScreenConnect <25.8 - Code Injection
CVSS 9.1
CVE-2025-66334 LOW
Office Service - DoS
CVSS 3.3
CVE-2025-66333 LOW
Office Service - DoS
CVSS 3.3
CVE-2025-66332 LOW
Office Service - DoS
CVSS 3.3
CVE-2025-66331 LOW
Office Service - DoS
CVSS 3.3
CVE-2025-61228 HIGH
Shirt Pocket SuperDuper! <3.10 - RCE
CVSS 7.8
CVE-2025-63434 HIGH
Xtooltech Xtool AnyScan Android App <4.40.40 - RCE
CVSS 8.8
CVE-2025-40604 CRITICAL
Sonicwall Email Security Appliance 50... - Download Without Integrity Check
CVSS 9.8
CVE-2025-63220 HIGH
Sound4 FIRST - RCE
CVSS 7.2
CVE-2025-63215 HIGH
Sound4 IMPACT - RCE
CVSS 7.2
CVE-2025-52263 HIGH
Startcharge Artemis AC Charger 7-22 kW v1.0.4 - Authenticated RCE
CVSS 8.0
CVE-2025-11493 HIGH
Connectwise Automate < 2025.9 - Download Without Integrity Check
CVSS 8.8
CVE-2025-11182 MEDIUM
GTONE ChangeFlow <9.0.1.1 - Path Traversal
CVSS 6.5
CVE-2025-56513 CRITICAL
Nicehash Quickminer - Download Without Integrity Check
CVSS 9.8
CVE-2025-34212 CRITICAL
Vasion Virtual Appliance Application - Incorrect Permission Assignment
CVSS 9.8
CVE-2025-57431 HIGH
Sound4 Pulse-eco Aes67 Firmware - Download Without Integrity Check
CVSS 8.8
CVE-2025-9319 HIGH
Lenovo Wallpaper Client - RCE
CVSS 7.5
CVE-2025-30199 HIGH
ECOVACS - Code Injection
CVSS 7.2
CVE-2025-55582 MEDIUM
D-Link DCS-825L <1.08.01 - Privilege Escalation
CVSS 6.6
CVE-2025-35115 HIGH
Atlassian Agiloft < 30 - Download Without Integrity Check
CVSS 8.1
CVE-2025-55581 HIGH
D-Link DCS-825L <1.08.01 - Code Injection
CVSS 7.3
CVE-2025-31355 HIGH
Tenda Ac6 Firmware - Download Without Integrity Check
CVSS 7.2
CVE-2025-53520 HIGH
Firmware Update - Code Injection
CVSS 8.8
CVE-2025-53696 CRITICAL
iSTAR Ultra - Info Disclosure
Details
Vulnerabilities 200
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits