Skip to content
Noroxi

CWE-494 · 214 records

Download of Code Without Integrity Check

CVEs in this class

214 records

  • CVE-2022-40799
    75This week

    Data Integrity Failure in 'Backup Config' in D-Link DNR-322L <= 2.60B15 allows an authenticated attacker to execute OS level commands on the

    HighCVSS 8.8KEVWeaponizedEPSS 33%

    dlink · dnr-322l firmwareNov 29, 2022

  • CVE-2025-15556
    61This week

    Notepad++ < 8.8.9 WinGUp Updater Lacks Update Integrity Verification

    HighCVSS 7.7KEVWeaponizedEPSS 1%

    notepad-plus-plus · notepad\+\+Feb 2, 2026

  • CVE-2021-44168
    61This week

    A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local

    HighCVSS 7.8KEVWeaponizedEPSS 0%

    fortinet · fortiosJan 4, 2022

  • CVE-2026-3502
    61This week

    TrueConf Client Update Integrity Verification Bypass

    HighCVSS 7.8KEVWeaponizedEPSS 0%

    trueconf · trueconfMar 30, 2026

  • CVE-2016-6567
    40Plan

    SHDesigns' Resident Download Manager (as well as the Ethernet Download Manager) does not authenticate firmware downloads before executing code and deploying the

    CriticalCVSS 9.8No exploitEPSS 2%

    shdesigns · resident download managerJul 13, 2018

  • CVE-2001-1125
    40Plan

    Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute

    CriticalCVSS 9.8No exploitEPSS 2%

    symantec · liveupdateOct 5, 2001

  • CVE-2020-1595
    40Plan

    Microsoft SharePoint Remote Code Execution Vulnerability

    CriticalCVSS 9.9No exploitEPSS 1%

    microsoft · sharepoint enterprise serverSep 11, 2020

  • CVE-2020-1210
    40Plan

    Microsoft SharePoint Remote Code Execution Vulnerability

    CriticalCVSS 9.9No exploitEPSS 1%

    microsoft · sharepoint enterprise serverSep 11, 2020

  • CVE-2002-0671
    39Monitor

    Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 downloads phone applications from a web site but can not verify the inte

    CriticalCVSS 9.8No exploitEPSS 1%

    pingtel · xpressa firmwareJul 23, 2002

  • CVE-2020-28332
    39Monitor

    Barco wePresent WiPG-1600W devices download code without an Integrity Check.

    CriticalCVSS 9.8No exploitEPSS 1%

    barco · wepresent wipg-1600w firmwareNov 24, 2020

  • CVE-2018-5409
    39Monitor

    PrinterLogic Print Management Software updates and executes the code without origin and code verification

    CriticalCVSS 9.8No exploitEPSS 1%

    printerlogic · print managementMay 8, 2019

  • CVE-2024-27438
    39Monitor

    Apache Doris: Downloading arbitrary remote jar files resulting in remote command execution

    CriticalCVSS 9.8No exploitEPSS 0%

    apache · dorisMar 21, 2024

  • CVE-2020-7883
    39Monitor

    Printchaser v2.2021.804.1 and earlier versions contain a vulnerability, which could allow remote attacker to download and execute remote fil

    CriticalCVSS 9.8No exploitEPSS 0%

    wowsoft · printchaserDec 28, 2021

  • CVE-2020-2320
    39Monitor

    Jenkins Plugin Installation Manager Tool 2.1.3 and earlier does not verify plugin downloads.

    CriticalCVSS 9.8No exploitEPSS 0%

    jenkins · installation manager toolDec 3, 2020

  • CVE-2019-19167
    39Monitor

    Tobesoft Nexacro14 ActiveX File Download Vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    tobesoft · nexacroMay 6, 2020

  • CVE-2020-7812
    39Monitor

    Kaoni ezHTTPTrans Active-X File Download and Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    kaoni · ezhttptransMay 28, 2020

  • CVE-2020-7806
    39Monitor

    Tobesoft Xplatform ActiveX File Download Vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    tobesoft · xplatformMay 6, 2020

  • CVE-2020-7813
    39Monitor

    Kaoni ezHTTPTrans Active-X File Download and Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    kaoni · ezhttptransMay 22, 2020

  • CVE-2020-7826
    39Monitor

    EyeSurfer BflyInstallerX.ocx v1.0.0.16 and earlier versions contain a vulnerability that could allow remote files to be download by setting

    CriticalCVSS 9.8No exploitEPSS 0%

    eyesurfer · bflyinstallerx.ocxJul 17, 2020

  • CVE-2018-14620
    39Monitor

    The OpenStack RabbitMQ container image insecurely retrieves the rabbitmq_clusterer component over HTTP during the build stage.

    CriticalCVSS 9.8No exploitEPSS 0%

    redhat · openstackSep 10, 2018

  • CVE-2020-7873
    39Monitor

    Download of code without integrity check vulnerability in ActiveX control of Younglimwon Co., Ltd allows the attacker to cause a arbitrary f

    CriticalCVSS 9.8No exploitEPSS 0%

    ksystem · k-system wellcommSep 9, 2021

  • CVE-2019-3801
    39Monitor

    Java Projects using HTTP to fetch dependencies

    CriticalCVSS 9.8No exploitEPSS 0%

    cloudfoundry · cf-deploymentApr 25, 2019

  • CVE-2020-22658
    39Monitor

    In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus

    CriticalCVSS 9.8No exploitEPSS 0%

    ruckuswireless · r310 firmwareJan 20, 2023

  • CVE-2025-56513
    39Monitor

    NiceHash QuickMiner 6.12.0 perform software updates over HTTP without validating digital signatures or hash checks.

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    nicehash · quickminerSep 30, 2025

  • CVE-2026-30612
    39Monitor

    An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android <= 3.5.0.173 allows a

    CriticalCVSS 9.8No exploitEPSS 0%

    Aug 27, 2026

All vulnerability classes